Questions and answers

The questions that come up, answered as they are asked.

These are the real objections, in the words they arrive in. Where the answer is not the one you were hoping for, it is written that way on purpose.

What the software is

What does VERA actually do?

VERA is forensic analysis software for seized devices. It takes a raw Full File System extraction from a phone, a computer or a hard drive, turns it into something an investigator can search, read and question, and runs entirely offline.

It begins where acquisition ends. It does not extract devices and it does not replace the tool that does.

We already have Cellebrite or AXIOM. Why would we add this?

Most VERA users do have one, and they keep it. VERA works from the raw extraction rather than from their output, so it covers what your existing tool did not decode, including application versions that changed since its last release.

The two run alongside each other. Nothing is migrated and nothing is retired.

Does it need our acquisition suite to be installed, or licensed?

No. VERA reads the extraction directly. There is no upstream licence, no dongle and no companion installation, which also means you can read a seal that arrived from a service using a tool you do not own.

Which operating systems and devices does it cover?

VERA works on the raw extraction rather than on a device, so the question of which handset it supports does not really apply to it. Whatever your acquisition tool produced, from whatever operating system, is what VERA reads.

Coverage of the applications inside that extraction is the interesting question, and that is answered on the automatic coverage page.

Is it a cloud service?

No. The default deployment is fully on-premise and offline: a central inference server on your intranet and clients on analyst workstations, with no internet connection required or used.

A cloud-model configuration exists at lower cost for organisations that have no sovereignty constraint. It is an explicit choice made at deployment rather than a default, and most of the services we talk to do not take it.

Coverage and mappings

So our examiners have to build these mappings themselves?

No. Known applications are mapped automatically on import. Anything unknown is mapped by the software itself, and the examiner reviews the result.

The visual editor exists so that your examiners keep full control and can correct anything, rather than because they are expected to do the work.

What happens when an application updates and the storage layout changes?

That is treated the same way as an application nobody has seen before, and it is far more common. VERA generates a new mapping for the changed structure and the examiner validates it. You are not waiting for someone else to notice the change and ship a fix.

Does our case data go into your library?

No. The library holds parsing definitions, which describe how to read a given application's data structure. It never holds evidence.

It is self-hosted on your infrastructure, and you decide who it is shared with, including nobody.

What if the generated mapping is wrong?

You see it before it is applied. What reaches the examiner is a preview over the real records rather than a specification to read, so a mapping that has misunderstood the source is usually obvious immediately.

The examiner corrects it in the visual editor or discards it. Nothing enters the case until a human accepts it.

Verification, AI and the courtroom

How do we know the AI is not inventing things?

You do not have to take its word for it. Every statement links to the exact file, table and row behind it, and one click puts you on the source.

The assistant proposes and your examiner decides. Nothing enters a report unverified.

Is this admissible in court?

Admissibility rests on the examiner's verification of source data rather than on the tool. VERA is built so that verifying takes one click instead of an afternoon.

It does not replace the examiner's judgement. It makes exercising that judgement practical at scale.

What does the audit trail actually contain?

Every action the assistant takes and every result it receives is written to a log held inside your deployment. Records carry their provenance from ingestion through to display, and recovered records carry their recovery status, so a carved row is never presented as a live one.

Can the defence challenge a finding that came from the assistant?

They can challenge any finding, and they should be able to. What VERA provides is the material to answer with: the original record, its path, and the fact that an examiner verified it before it entered the report.

A finding that could not be traced back to a source record is not one we would want in a report either.

Security and sovereignty

We would need a security review.

I would expect one. The architecture makes it simpler than most: no external connection, no telemetry, no vendor remote access, no data leaving your perimeter.

The questions that normally arrive in a review are answered in advance on the sovereignty page. I will answer whatever questionnaire you use, and anything not covered gets added to that page.

Can you access our deployment?

No. There is no remote support tunnel, no maintenance access and no mechanism by which I could reach a deployment. That is also why deployment documentation matters: the system has to run without me because I cannot reach into it.

Which AI models does it use?

The models run on your own hardware and can be replaced by you. Naming the specific models publicly would be a level of detail no vendor in this category publishes, and it would date badly, because the point of the design is that a model can be swapped without touching the client.

In a technical evaluation under a confidentiality frame this is a reasonable question and it gets a straight answer.

Does it phone home for licensing?

No. There is no online activation and no licence check that requires a network. A deployment that has never had an internet connection works exactly like one that has.

The company, procurement and continuity

You are one person.

I am. That is why the deployment is fully documented, why the software runs without me, and why I am having this conversation with you rather than building a sales team.

If continuity is a concern, source escrow can go into the contract, along with a perpetual licence on the deployed version.

What happens if you disappear?

A fair question, and the honest answer has two halves. Contractually, source escrow and a perpetual licence on the deployed version are both available. Practically, a deployment that requires no internet connection and no vendor access does not stop working because the vendor did.

We cannot procure from a company this small.

Below the direct-award threshold there is no formal procedure required, which is exactly why I would propose a pilot at that scale rather than a large contract.

If your service has a supplier-size requirement that a pilot does not solve, tell me early. That is a real constraint and I would rather know it before either of us spends time.

Send us your pricing.

I can. It depends on the shape of the deployment, so it is a short conversation rather than a page on this site.

The structure is published: an annual licence per organisation rather than per seat, which matches the centralised architecture, with pilot arrangements available. What I would suggest first is a pilot small enough that procurement is not the difficult part.

What support and training come with it?

Deployment support during installation, written documentation for the deployment, and a training session for the examiners who will use it. Support afterwards is direct with me, by email, without a ticketing layer in between.

I will not describe a twenty-four-hour support desk that does not exist. If your service requires one contractually, that is a real conversation to have before anything else.

Can we speak to an existing user?

That depends on what the deploying institution is willing to have said publicly, and I will not put words in their mouth on this website. Ask during the demonstration and I will tell you exactly where that stands at the time.

Something not answered here?

If your question is missing, write to me. The answer usually ends up on this page afterwards, which is a good reason to ask.

Write to Alexandre

See it running on a real extraction

Thirty minutes, on fictitious data, with time for your questions. If VERA does not fit what your service needs, that is a useful answer too.

Every request is reviewed before access is granted.