Privacy
At Web Forensics Lab, discretion is not a policy—it is our primary operational requirement. This Charter outlines our clinical approach to data handling.
Clinical Confidentiality
We operate under a "Need-to-Know" protocol. Information provided during case initiation is segmented. Forensic analysts only receive technical data necessary for their specific investigative branch, while identifying principal details remain encrypted and restricted to Agency Directors.
- Zero Voluntary Disclosure: We do not cooperate with private party discovery requests without a binding New York State court order.
- Encrypted Comms: All client communications are conducted via secure, end-to-end encrypted channels.
Retention & Purge Protocols
Our standard operational procedure includes a mandatory 30-day data lifecycle. Upon conclusion of a mandate, forensic images and working files are held for 30 calendar days to allow for principal review, after which they are subject to a multi-pass cryptographic wipe.
Security Architecture
Investigations are performed on air-gapped forensic stations where possible. All Agency servers utilize AES-256 at-rest encryption and are physically located within Tier-4 secure facilities in the New York metropolitan area.
Legal Defensive Posture
In the event of a legal challenge to obtain principal data, Web Forensics Lab maintains a standing legal counsel to contest overly broad or non-compliant subpoenas. We prioritize the protection of the Attorney-Client privilege when working as part of a legal team.
Last Operational Update: January 16, 2026 // NYC Agency Standard