Databases and event logs make it possible to reconstruct the sequence of operations, user actions, changes to records and technical causes of a failure.
These examinations are often needed in disputes involving databases, CRM systems, online stores, internal systems, warehouse software and accounting platforms.
The more original logs, backups and exports have been preserved, the greater the chance of a technically substantiated conclusion.
What to do before contacting us
- preserve original files and documents;
- avoid unnecessary changes to storage media and data;
- prepare a list of questions;
- state whether the examination is required for court proceedings or before litigation.
What is checked
The examination may cover table structures, relationships, integrity constraints, operation history, calculation accuracy, timestamps and whether exports match the source database.
Materials that strengthen evidential value
- a database backup or image;
- a description of the schema and the DBMS version used;
- complete SQL exports specifying how they were generated;
- audit trails and server logs;
- documents defining calculation rules and business logic.
Typical questions
It is possible to establish whether the claimed operations are recorded in the database, when records were changed, whether exports are consistent with each other, whether calculations are performed correctly and whether there are signs of data deletion or modification.
What an examination cannot replace
A technical examination does not decide the legal question of a party's fault. It establishes data properties, the sequence of operations and technical reasons for discrepancies; the court or a party to the dispute then provides the legal assessment.
How work with a specialist proceeds
First, the task and available materials undergo a preliminary review. The examination subject, technically appropriate questions, required access and deliverable format are then agreed. If the initial data are insufficient, the specialist identifies in advance which additional files, documents or exports must be preserved.
The final opinion distinguishes the information provided, actions performed, indicators established, limitations and conclusions. This structure makes the reasoning verifiable and enables the document to be used in a formal claim, negotiations or court proceedings.
When to seek advice in advance
The earlier original data are preserved, the lower the risk of loss or alteration. Before reinstalling a system, updating software, clearing logs or handing a device over for repair, it is advisable to discuss how the materials should be recorded.