Seven categories of forensic evidence
Our analysis pipeline examines photos and videos across seven distinct evidence layers — each with real-world privacy and authenticity implications. Cases demonstrating each category are being published now.
GPS Location & Movement Data
Smartphones embed precise latitude and longitude into every photo they capture. A single image can silently expose a home address, workplace, or the location of a private meeting — often without the photographer ever knowing it is there. Our analysis resolves GPS coordinates to named locations and flags proximity to sensitive sites.
Camera & Device Fingerprinting
JPEG files contain quantisation tables (DQT) unique to each camera model, sensor, and firmware revision. By matching these signatures against a database of thousands of devices, we detect mismatches between the claimed camera and the actual encoder — exposing re-encoding, software conversion, and AI-generated imagery masquerading as a real photograph.
Error Level Analysis — Splice Detection
Re-saving a JPEG after editing alters the local compression entropy in mathematically detectable ways. ELA maps these compression-level differences across the image, highlighting pasted regions, inserted objects, removed elements, and text overlays that carry a different error signature from the surrounding original content.
Metadata & Identity Leaks
Photo editing software embeds author names, computer usernames, email addresses, and editing timestamps directly into image file headers. These fields frequently survive social media re-uploads and can reveal the real identity of an anonymous poster, the complete editing history of a manipulated image, or the organisation that produced it.
Encoding Anomalies & Signal Mismatches
Inconsistencies between encoder fingerprints, quantisation profiles, colour spaces, and EXIF data indicate post-processing, format conversion, screenshot capture, or AI generation. Each mismatch type carries a specific forensic implication — from social media re-compression to deliberate metadata stripping — with a calibrated severity rating.
Steganography — Hidden Content Detection
Steganography conceals data inside ordinary images or videos, hiding the very existence of the payload rather than just its meaning. Our proprietary detection engine identifies statistical anomalies consistent with LSB and frequency-domain hidden payloads — including Vaultify-encoded content — even when the file passes all standard format validation checks.
AI Generation & Face Authenticity
Multiple independent signals identify AI-generated images and video: frequency-domain patterns unique to AI image generators, C2PA provenance declarations from tools like DALL-E and Midjourney, absent camera metadata, and motion gradient statistics that deviate from real-camera physics for AI-generated video. When faces are present, each face is examined independently for signs of AI face-swapping and digital manipulation — surfacing alterations that survive visual inspection.