Services for Individuals
+40 notarial procedures available online
View all →
Services for Businesses
Notarial solutions for your business
View all →
Digital Expert Services
Forensic analysis and digital evidence validation
View all →
Loans & Mortgages
Credit policies and mortgage cancellation
View all →
About Us
NOTARIAL ACTS OF DECLARATIONS
Proof of Life Certificate Prize Draws Lottery Single Status Minor Travel Consent Cohabitation Certificate Domestic Partnership Dissolution Certified Copies of Documents Various Uses Domestic Partnership Family Reunification Visa Processing
NOTARIAL POWERS OF ATTORNEY
Specific · Other Powers Revocation or Renunciation Public Administration NIE Procedures Purchase and Sale Litigation (Court Proceedings) Inheritance DNI/NIE without Spouse Loans and Mortgages Guarantees and/or Sureties Financial Institutions Divorce (power of attorney to lawyer) Marital Agreements Company Incorporation Verbal Difficulties Hearing Disability Visual Disability
SIGNATURES, CONCILIATION AND ADDITIONAL SERVICES
Signature Authentication Notarial Conciliation Hague Apostille Simultaneous Translation NIF Application Deed in 2 Languages Commercial Policies New Build Declaration Last Wills Death Certificate Marriage Certificate Birth Certificate Web Certification View all →
CORPORATE PROCEDURES
Company Incorporation Registered Office Change Corporate Purpose Change Amendment of Articles of Association Capital Increase Capital Reduction Appointment and Removal Dissolution and Liquidation Civil Law Partnership Dissolution
NOTARIAL POWERS OF ATTORNEY
Acts of Administration Legal Representation (Litigation) Bank Accounts Credit and Financing Cheques and Securities Hiring and Dismissing Staff Execution of Contracts Import and Export Tax Authorities Litigation and Debt Collection Conciliation and Arbitration Real Estate Mergers and Acquisitions Company Liquidation Special Power of Attorney for Companies
BOOKS AND ADDITIONAL SERVICES
Legalisation of Company Books General Meeting Minutes Hague Apostille Notarial Rectification Legal Entity Digital Certificate Notarial Certificates Corporate Certified Copies Filing of Annual Accounts
FOREIGN COMPANIES
Opening a Branch in Spain Opening a Subsidiary ROI/VIES Registration ROI/VIES Notarial Request ROI/VIES Re-registration EPR Power of Attorney View all →
MESSAGING
WhatsApp Expert Report Telegram Expert Report Email Validation
MULTIMEDIA
Photograph Validation Video Validation Audio Validation
FORENSICS
Computer Forensic Analysis Web Certification View all →
POLICIES
Credit Policies Commercial Policies
MORTGAGE CANCELLATION
Cancellation Calculator Cancel BBVA Mortgage Cancel Santander Mortgage Cancel Sabadell Mortgage
HELP
Prices Frequently Asked Questions View all →
930 485 101 Contact
Prices Blog FAQs Cities
Home›Expert Reports›Computer Forensic Analysis
COMPUTER FORENSICS · CHAIN OF CUSTODY
100% online process desde 2.850,00 €

Forensic analysis of computers and servers

Comprehensive forensic investigation of computers, laptops and servers.

When the dispute involves a computer (information leaks, deliberate deletion, unauthorized access or misuse of corporate resources), forensic analysis clones the drive, reconstructs the user's activity, recovers deleted files and builds a timeline of events, all under a valid chain of custody admissible in court.

✓Bit-by-bit cloning with a write blocker
✓Recovery of deleted files
✓Full timeline of user activity
✓Tracking of USB devices and data exfiltration
✓Analysis of access logs and browsing history
✓Expert report ready for ratification in court
Instant WhatsApp OR CALL US 930 485 101
ONLINE REQUEST
Reply < 2 h
Request: Computer Forensic Analysis
Client type
Your data is protected and secure
Law 11/2023
The same legal validity as signing in person
Registered
Practising notaries of the Notarial Association of Spain
4,7 / 5
Average rating from more than 1.000 clients
< 2 h
Average response time to a request

When might you need it?

The most common cases for this procedure

Information leak
An employee copies a database or client portfolio before leaving for a competitor.
Deliberate deletion
Destruction of documentation relevant to an ongoing proceeding.
Unauthorized access
Internal or external intrusions: what was accessed, when and from where.
Misuse of resources
Disciplinary proceedings requiring solid, legally sound technical evidence.
REQUIREMENTS FOR THIS PROCEDURE
✓Be the owner of the equipment or have authorization from the owner or a court order
✓For corporate equipment: a usage policy communicated to employees (prevents the evidence from being voided)
✓Turn off and seal the equipment without further use: every boot-up destroys evidence
✓For a production server: schedule the acquisition window with the IT manager
DOCUMENTS YOU WILL NEED
01Equipment or drive to be analyzed, sealed since its seizure
02Authorization from the owner or an enabling court order
03IT usage policy and consents, if it is company equipment
04Specific investigation objectives and the time period of interest
REGULATIONS: LEC arts. 299 and 382 Art. 20.3 and 20 bis ET (employer monitoring and right to disconnect) STC 39/2016 (employee's expectation of privacy) ISO/IEC 27037, 27041, 27042 and 27043 LO 3/2018 (data protection)

How does the process work?

From request to signed document, with no travelling

1 Seizure and sealing 2 Forensic cloning 3 Analysis and investigation 4 Expert report
1
Seizure and sealing
⏱ 24 hours
We document the equipment's condition and seal it. The chain of custody begins here, or the evidence is compromised from the start.
2
Forensic cloning
⏱ 24-48 hours
Bit-by-bit image using a write blocker, with hash verification of both the original and the copy.
3
Analysis and investigation
⏱ 3-10 days
Recovery of deleted data, system registry review, connected USB devices, browsing history, email and timeline reconstruction.
4
Expert report
⏱ depending on scope
Report including methodology, findings, timeline and appendices; includes ratification in court.

Clients who have already done it

Verified reviews of this service

4,7★★★★★
★★★★★ES
"Un comercial se llevó la cartera de clientes a la competencia. El forense acreditó las copias a USB con fecha y hora. Ganamos el procedimiento y la indemnización."
DR
Directora RRHH
Fuga de datos · Barcelona
★★★★★EN
"Full forensic analysis of a laptop and server. Rigorous chain of custody and a timeline that made the whole incident understandable to the court."
IM
IT Manager
Insider incident · Madrid
★★★★★ES
"La contraparte había borrado la documentación clave. El análisis recuperó los archivos y documentó el borrado intencionado. Cambió el juicio."
Am
Abogado mercantil
Borrado de prueba · Valencia
★★★★★DE
"Forensische Untersuchung mit sehr sauberer Dokumentation. Der Gutachter konnte alles vor Gericht klar erklären."
G
Geschäftsführer
Datenabfluss · Palma
★★★★★ES
"Necesitaba el trámite con urgencia y lo resolvieron en tiempo récord. El notario fue muy profesional y recibí el documento al día siguiente."
CR
Carmen R.
España
★★★★★EN
"Excellent service from start to finish. Everything was handled online and the signed document arrived within 24 hours. Highly recommended."
JW
James W.
Reino Unido
★★★★★ES
"Lo gestioné desde Buenos Aires sin viajar a España. Me guiaron paso a paso, incluso con el certificado digital. Todo claro y sin sorpresas."
MG
Mariana G.
Argentina
★★★★★FR
"Démarche réalisée entièrement en ligne depuis Paris. Équipe très réactive sur WhatsApp et notaire très professionnel. Impeccable."
SL
Sophie L.
Francia
★★★★★ES
"El proceso fue mucho más sencillo de lo que esperaba. Atención cercana por WhatsApp y presupuesto cerrado sin costes ocultos."
AM
Andrés M.
España
★★★★★DE
"Die Beurkundung wurde komplett online erledigt. Schnelle Terminvergabe, klare Anweisungen und das Dokument kam am nächsten Tag."
KB
Katrin B.
Alemania
★★★★★IT
"Pratica completata interamente online dall'Italia. Notaio disponibile e documento firmato in 24 ore. Servizio eccellente."
MT
Marco T.
Italia
★★★★★PT
"Tratei de tudo sem sair de Lisboa. Acompanhamento constante por WhatsApp e documento entregue no dia seguinte. Recomendo totalmente."
BS
Beatriz S.
Portugal
★★★★★ES
"Desde CDMX pensé que sería complicadísimo, pero salió a la primera. Videollamada puntual, notario clarísimo y precio cerrado."
GP
Gloria P.
México
★★★★★EN
"Handled from New York without flying to Spain. Clear instructions, fast scheduling and constant updates. Five stars."
SK
Sarah K.
Estados Unidos

Frequently asked questions

How long does the analysis take?−
The complete forensic analysis takes between 7 and 10 business days, depending on disk size and case complexity. Urgent analyses are available with a surcharge.
Can you recover deleted files?+
Yes, in most cases we can recover deleted files, even from emptied recycle bins. Possibilities depend on time elapsed and whether the space has been overwritten.
Is it legal to analyze an employee's computer?+
Yes, if the computer is company property and it is covered in the employment contract or usage policy. We advise you on legal aspects before proceeding.
What information can you extract?+
Files (current and deleted), emails, browsing history, downloads, connected USB devices, installed software, network activity, printed documents, screenshots, and much more.
Do you maintain chain of custody?+
Yes, we follow strict chain of custody protocols from equipment collection. We document every step to guarantee evidence admissibility in court.
Do I need to turn off the computer?+
Preferably DO NOT turn it off or touch it once the incident is detected. We take care of preserving volatile evidence. Contact us immediately.
Will the employee find out about the analysis?+
That depends on your decision. We can perform discreet analyses in some cases, or proceed with the employee's knowledge depending on legal circumstances.
How much does the service cost?+
The price depends on disk size, complexity, and urgency. Starting from €1,200 for standard analysis. Contact us for a personalized quote.
Can I have an employee's computer examined by an expert?+
Yes, provided the equipment belongs to the company and there is a usage policy communicated beforehand. Without that prior notice, STC 39/2016 opens the door to the evidence being declared void due to a reasonable expectation of privacy. We check this point before touching the equipment.
Why do you insist on not turning on the equipment?+
Because every boot-up writes to the disk, updates timestamps, and can overwrite precisely the space where the deleted files we're looking for reside. A single power-on can destroy the key evidence.
Can deleted files that have been emptied from the recycle bin be recovered?+
Often yes, as long as the space hasn't been overwritten. Traces also remain in the system registry, recent access lists, thumbnails and logs, which allow us to prove a file existed even if its content can no longer be recovered.
Can you prove someone copied data to a USB drive?+
This is one of the most common findings: the system logs connected devices, their serial numbers, first and last connection times, and often the files accessed. This is used to build a timeline of the exfiltration.
How long does the analysis of a production server take?+
Acquisition is planned together with your IT manager to minimize impact, sometimes performed live. The subsequent analysis takes 3 to 10 business days depending on volume and objectives.
Is the report valid for a disciplinary dismissal?+
Yes, provided the evidence was obtained in compliance with Article 20.3 of the Workers' Statute (ET) and internal policy. A technically flawless report based on improperly obtained evidence will not support the dismissal: we handle both aspects.
Do documents signed online have the same validity as those signed in person?+
Exactly the same. Law 11/2023 recognises the full legal validity of notarial documents executed by video call with a qualified electronic signature before a registered notary.
Do I need a digital certificate?+
Yes, to sign electronically you need a digital certificate or an electronic DNI. If you do not have one, we help you obtain it quickly before your appointment, with no additional handling fee.
Can I do it from abroad?+
Yes, the notarial video call works from any country. You only need a stable connection, your valid identity document and a digital certificate.
How much does this service cost?+
The quote includes the official notarial fees set by the Notarial Association plus our handling, fixed before you start and with no hidden costs. Request it with no obligation via WhatsApp or the form.
What if I have questions during the process?+
Our team supports you from start to finish via WhatsApp, phone or email, and the notary answers all your legal questions before signing.
Ready to get started?
Request information with no obligation: we will contact you within 2 hours.
WhatsApp 930 485 101