Forensic technology


Forensic technology

Forensic technology is a key component in investigations involving digital evidence. The widespread use of digital devices (computers, servers, smartphones, etc.) can create a wide variety and substantial amount of digital evidence. Processing evidence from a wide range of devices and handling significant amounts of data can only be done correctly by using the appropriate tools and processes.

Therefore, in today's digital environment, practitioners must have a perfect understanding of how information can be retrieved, securely stored, and processed. This allows practitioners to build the best possible case, whilst complying with applicable laws and regulations.

By harnessing the array of technology available in our worldwide network of computer forensics labs, our professionals can recover a wealth of information from computer hard drives and other devices, including active, deleted, hidden, lost or encrypted files; file fragments; and even files that were merely viewed but never saved (memory forensics).

We offer the following forensic technology services that are fully optimized for Luxembourg:  

Technology support for forensic investigations (IT-forensics and e-Discovery)

Our suite of technology support services includes:


IT-forensics investigations allow a specific and identified incident and its consequences to be better understood. It generally involves a limited number of artefacts. Some examples include:

  • Unauthorized access and/or industrial espionage investigations;
  • Misuse of the internet and/or misuse of corporate data and email accounts;
  • Intentional or unintentional data leakage;
  • Assistance for data extraction in cases such as fraud/misrepresentation;
  • Sensitive data and email recovery.

First, all identified assets, which may potentially be linked to the case, are imaged and then sealed (chain of custody). Then, the assets are investigated as a priority to understand the incident and its timeline.


Most e-discovery investigations involve substantial amounts of data/assets and/or exhaustive output results. e-Discovery can either be the starting point of an investigation or follow an IT-forensics investigation. It allows complex cases to be understood, “needles in a haystack” to be found, and provides evidence sets (called a production) for use in court.

Some examples include:

  • Analysis of data leakage, classification, review of impacts and possible mitigation measures;
  • International investigations required by authorities;
  • Production of evidence for a court; or
  • Provision of technical assistance to counsel.

Depending on the case size, a review platform may be necessary to allow a team of reviewers (which may be comprised of client counsel or Deloitte review teams) to examine the artefacts and select the most relevant ones.

Our service offering

Our team uses cutting-edge software and infrastructure, including best-of-breed commercial and internally developed tools, to identify relevant artefacts in a variety of ways—from simple keyword searches to assisted reviews involving the latest machine learning algorithms (AI).

We can help you analyze different types of data such as files, emails, phone calls, databases, and financial transactions (e.g., SWIFT). We take care of pre-processing activities such as language recognition, optical character recognition (OCR), identification of encrypted/corrupted items, (near-)duplicates, embedded items, etc.

If e-Discovery is required, our infrastructure is scalable based on your needs and the project’s size. We develop or set up tools depending on the case’s complexity and your requirements.

We can host infrastructure locally in our Luxembourg offices, at your premises or at your counsel’s site, as applicable. Hosting can include secure remote access (with two-factor authentication, monitoring, etc.) to the case files and review platform.

All our projects include evidence management and comply with forensic best practices.

Any incident that needs forensic investigation may result in legal action, which requires the data and evidence to be collected and stored in a manner that will be admissible in court. Our forensic professionals can help manage the entire process from evidence collection to legal support (storage, legal case preparation and presentation, etc.).

Data mining and intelligence

The integrity of data is a key issue for all businesses. To identify fraud risks and any abuse of corporate financial assets, our team can quickly and cost-effectively assess the accuracy and integrity of system data, using sophisticated data interrogation and analysis, statistical sampling, and regression techniques.


Roland Bastin

Roland Bastin

Partner | Risk Advisory & Forensic

Roland is a partner within the advisory and consulting department and joined the Risk Advisory practice of Deloitte in 2001. He is responsible for IT audit, IT security, IT regulatory compliance, Data... More

Gunnar Mortier

Gunnar Mortier

Director | Forensic & Risk Advisory

Gunnar joined Deloitte as Manager in 2006 and is presently a Director of Risk Advisory services and CISO for Deloitte Luxembourg. He has more than 30 years of experience in IT and holds and a Master i... More

Maxime Heckel

Maxime Heckel

Partner | Forensic & Financial Crime

Maxime is Partner in our Forensic & Financial Crime practice. He has been with the firm since 2006 and has more than 15 years of experience within the Financial Services Industry. Upon completion of h... More

Nicolas Marinier

Nicolas Marinier

Partner | Forensic & Financial Crime

Nicolas is Partner in Forensic & Financial Crime practice at Deloitte Luxembourg. He has more than 15 years of working experience acquired in Luxembourg and Singapore in the private banking sector and... More

Insert CSS fragment. Do not delete! This box/component contains code needed on this page. This message will not be visible when page is activated.