Court-tested digital forensics for Canadian law firms and businesses.
Computer, mobile, and cloud evidence handled to a defensible standard. Main office in Langley, BC. Serving counsel and corporate clients across Canada.
Phone (604) 800-9060. Mon to Fri intake. Seven-day phone, 8 a.m. to 8 p.m.
Methodology
A defensible engagement, from first call to expert report.
Confidential intake
Initial consultation by phone or secure email. We confirm scope, custodians, devices, and timeline before any evidence is collected.
Forensic acquisition & analysis
Hardware write-blocked imaging or Cellebrite-grade extraction at our Langley main office, hash-verified, then examined with EnCase, AXIOM, X-Ways, or other forensic tools matched to the matter.
Court-ready report
A written examiner report with exhibits, chain of custody, and methodology disclosures, drafted for Canadian civil or criminal proceedings.
What we do
Forensic services for Canadian litigation and investigations.
Computer Forensics
Forensic imaging and examination of laptops, desktops, and servers. Windows, macOS, and Linux, including encrypted volumes.
Learn more about computer forensicsMobile Forensics
Cellebrite acquisitions plus chip-off, JTAG, and ISP for damaged or locked phones. iOS and Android, with full app-artifact decoding.
Learn more about mobile forensicsCloud Forensics
Microsoft 365, Google Workspace, Slack, Teams, and AWS evidence collection. Defensible audit-log preservation under legal hold.
Learn more about cloud forensicsExpert Witness
Affidavits, expert reports, and trial testimony from expert examiners, written for Canadian civil and criminal proceedings.
Learn more about expert witnessData Breach Investigation
PIPEDA and BC PIPA-aligned breach scope, exfiltration analysis, and regulator-ready reports.
Learn more about breach investigationWho we serve
Built for the buyers who use digital evidence every day.
Law firms.
Litigation, expert-witness, and Anton Piller execution support.
Corporate.
Internal investigations, IP theft, employee misconduct, fraud, and breach response.
Employment and HR.
Departing-employee matters, workplace investigations, and policy violations.
Insurance.
Coverage disputes, fraud claims, and subrogation forensics.
Family law.
Hidden assets, electronic communication evidence, spyware and stalkerware detection.
Criminal defence.
Independent expert review and counter-analysis of Crown forensic evidence.
Why Teradrive
Three things that change the math for Canadian counsel.
Court-tested methodology
Every engagement uses a defensible, documented evidence-handling process built for Canadian courts. Chain of custody is documented from first contact through trial. Reports are written for Canadian courts, not for cybersecurity vendors.
In-house BC main office in Langley, BC
Our main office is at 20627 Fraser Hwy in Langley. Evidence stays under our custody from acquisition to archive. We pick up across Metro Vancouver, ship Canada-wide, and accept remote acquisition for cloud and many endpoint matters. No third-party processing. No offshoring of evidence.
Advanced extraction in-house
Cellebrite, Magnet AXIOM, OpenText EnCase, X-Ways, KAPE, and Chainalysis cover most engagements. For damaged, locked, or unsupported devices, we operate chip-off, JTAG, and ISP rework benches. Few BC boutiques offer this in-house.
Common questions
Common questions from counsel and corporate clients.
What is digital forensics, in plain language?
Digital forensics is the process of recovering, preserving, and analysing electronic evidence so it survives challenge in court. The work covers computers, phones, cloud accounts, and any other source of electronically stored information. The deliverable is usually a written examiner report or affidavit, supported by a documented chain of custody.
Are deleted text messages admissible in Canadian court?
Generally yes, when they are recovered through a defensible process and authenticated under section 31.1 of the Canada Evidence Act. The forensic acquisition method, the chain of custody, and the examiner's qualifications all matter. Recovered messages usually need to be tied to a specific device, account, and time-stamped sequence to be admitted.
How long does a forensic examination take?
Most single-device matters move from intake to a draft report in two to four weeks. Urgent matters can be expedited. Multi-custodian, cloud-heavy, or international matters take longer. We give a written timeline estimate at the consultation stage.
Can a damaged or locked phone still yield evidence?
Often, yes. Where conventional Cellebrite or Magnet acquisitions fail, we can move to chip-off (desoldering the memory chip and reading it directly), JTAG (acquiring through the device's debug port), or ISP (accessing eMMC test points on the board). These techniques recover data from devices other firms turn away.
Do you work with counsel or directly with clients?
Both. Many engagements are retained through counsel so that the work product is covered by litigation privilege. We also accept direct retainers from corporate clients, individuals, and insurers. We sign NDAs as standard.
Where are you located, and do you serve clients outside BC?
Our main reception is in Langley at 20627 Fraser Highway. We pick up across Metro Vancouver, ship Canada-wide, and accept remote acquisition for cloud forensics and many endpoint matters. We serve law firms and businesses across Canada.
Need digital evidence handled defensibly?
Tell us about your matter. Our team will reach out as soon as possible.