Security and evidence handling

Evidence stays where you put it.

SectraTEK reads evidence in place, hashes it before analysis and keeps an audit trail of every case action, so the work can be followed from evidence to conclusion.

The evidence chain

Read in place. Hashed. Logged.

Three habits that make a case easy to defend, built into every examination.

Read in place

Evidence is referenced where it is stored. SectraTEK opens it read-only and does not copy it into the product; if the source changed after it was added, the examination is refused.

Hash before analysis

A SHA-256 hash of the evidence is recorded in the case before analysis starts, and a final check near the end confirms the evidence still matches.

Every action is logged

The application audit ledger records who did what and when, and verification shows a changed record.

The audit ledger is tamper-evident: it shows when a record changes. It cannot prevent a change by someone with access to the machine.

Where your data lives

Your workstation does the work.

On your own computer

SectraTEK analyzes evidence on your own workstation; evidence is referenced in place.

AI beside the case

The integrated AI assistant runs on your own workstation.

Release and support

Nothing leaves without a decision.

An examiner releases the dossier

SectraTEK prepares the AI-Dossier on your computer and does not send it anywhere; case data leaves your machine only if you choose to give the dossier to an AI tool or an analyst.

The AI-Dossier is built as a draft and cannot be downloaded until an examiner approves it; the approval is recorded in the case audit trail (SectraTEK Full). In SectraTEK Lite the operator releases the dossier and the release is recorded.

A support bundle without case data

The diagnostics bundle that SectraTEK prepares for support holds a system-readiness snapshot and recent operational logs. It contains no case evidence, case database or credentials, and nothing is sent until you attach it to your message.