Solutions04 · Investigations
Corporate investigations and digital forensics.
Defensible collection, chain of custody, analysis of logs, devices and messaging apps and fact reconstruction for internal and shareholder investigations, plus communications monitoring and whistleblowing-channel initial assessment.
Context
An investigation is only as strong as its first collection.
When a report reaches compliance, the evidence is spread across laptops, phones, messaging apps and cloud accounts, and some of it changes every day. Collection done in a hurry, without hashes or records, weakens everything that follows.
LexNexo collects and preserves with forensic tools and a documented chain of custody, then reconstructs the facts in a timeline counsel can test. Findings separate what was observed from what was inferred.
Process
Six stages, from report to findings.
Each stage records sources, procedures and limitations so another examiner can review the work.
- 01
Scoping
Custodians, sources, period and search terms defined with counsel, respecting privacy and labour rules.
Deliverable: investigation plan
- 02
Collection
Forensic imaging of devices and accounts, with hashes and a signed custody record for each item.
Deliverable: collection report with hashes
- 03
Processing
Extraction of messages and logs, deduplication, indexing and attempted recovery of deleted items where the source allows.
Deliverable: processed evidence set
- 04
Analysis
AI-assisted search and review, with specialists confirming every relevant item.
Deliverable: relevant-item log
- 05
Reconstruction
Timeline of events across sources, with each entry linked to the original evidence.
Deliverable: fact timeline
- 06
Findings
Report of findings with limits stated, ready for decisions, disciplinary measures or litigation.
Deliverable: findings report
Our approach
What makes an investigation hold up later.
- 01
Custody from the first item
Collection is adapted to the source, with integrity checks and handling records established before analysis.
- 02
Messaging apps in Portuguese
Collection and analysis of Portuguese-language messages, preserving context, participants, dates and links to other sources.
- 03
Timeline linked to evidence
Each event in the reconstruction points to the file, message or log that supports it.
- 04
Independent and documented
Method and tools are recorded, so findings can be reviewed by the other side or a court-appointed expert.
Frequently asked questions
- Can you collect from employees' personal phones?
- Only with the legal basis and authorisation defined by counsel. Corporate devices and accounts are the usual starting point.
- Is chain of custody recognised in Brazil?
- The Code of Criminal Procedure defines chain of custody for evidence, and the same discipline strengthens evidence in civil and labour matters.
- Do you conduct interviews?
- Interviews are led by counsel or compliance; we prepare the technical facts and documents that support them.
- How do you handle privileged material?
- Potentially privileged items and personal data are flagged under the agreed review protocol. Counsel makes privilege decisions.
- Can you assess reports from our whistleblowing channel?
- Yes, technically: reports are classified by subject, urgency and available evidence, and routed to compliance. Decisions on each case stay with the company and its counsel.
- How is it charged?
- Per project with a fixed scope, or per volume when the collection is large. The proposal is in writing before work starts.
Contact
Tell us about the investigation.
Describe the context, available sources and deadline. We will confirm next steps and the appropriate channel for confidential information.