EvidenceVaultEvidenceVault.
Long-term storage for digital forensic evidence, built and run in the United Kingdom. The evidence belongs to you; we only hold it, and the platform is built to keep it that way.
EvidenceVault was created after time spent inside Digital Forensic Units, where teams hold closed-case evidence for years on a shared SAN, on hard drives in evidence rooms, on legacy tape. Retrieving an old case can take hours or days, and after that long in storage it is difficult to show that a file is still bit-for-bit what was seized. There had never been a system built for holding evidence that long — or for managing the retention and compliance that comes with it.
EvidenceVault was built to fill that gap. It runs entirely in UK-sovereign Azure. Each customer holds its own encryption keys and we never have them. Evidence is written once, cannot be overwritten, and is encrypted twice over. Every action is recorded in a hash-chained log the customer can verify at any time. The platform we operate is deliberately constrained — we cannot read your evidence, cannot delete it, cannot change it. That is not a policy choice; it is how the system is built.
Every byte of evidence — primary, audit log, metadata — lives in Azure UK South. No replication overseas, ever. Cross-region egress is policy-blocked at the platform layer.
Customer-managed encryption keys live in your organisation's own Key Vault, never the platform's. We can show you the cryptographic proof in under a minute — disable, watch reads fail, re-enable, watch them succeed.
Every action is hash-chained. You can verify chain integrity end-to-end on demand. Tampering is detectable in milliseconds; concealing it would require rewriting every row from the tamper point to the tail.
Our operators keep the platform running and have no route to your evidence — not a restricted one, none at all. That is a property of how the software is built rather than a rule staff are asked to follow: the operator's half of the system is a separate program, with no code in it for reading evidence.
"If your evidence isn't perfect when you ask for it back, we have failed."
— EvidenceVault operating principle