Data Recovery for Police Forces & Law Enforcement — Forensic Procedures, Chain-of-Custody Handling

Trusted by UK police forces since 2002. We recover data from physically damaged, waterlogged, and fire-damaged devices with full chain-of-custody documentation from intake to delivery.

Trusted by UK police forces Established 2002 ICO-registered Cleanroom lab — Bury, Manchester Chain-of-custody documentation on every case
Do not power on a damaged device before submission. Switching on a waterlogged, fire-damaged, or physically compromised device can cause further damage to the storage media and may result in permanent data loss. If a device has been submitted as evidence and needs data recovered, contact us first on 0800 151 2207 before any attempt is made to access it.

What we do

Forensic hard drive imaging workstation at Data Clinic's Bury data recovery lab
Every case starts with a write-blocked forensic image and an immediate SHA-256 hash — so the integrity of the original device is preserved and documented from the outset.

Data Clinic provides specialist data recovery for UK police forces and law enforcement agencies. We receive devices that have been physically damaged, submerged in water, exposed to fire, or otherwise compromised — and we recover the data from them using forensic-grade procedures that preserve chain of custody throughout.

This is different from standard commercial data recovery. When a device forms part of a police investigation or is submitted as potential evidence, the way the data is recovered matters as much as the data itself. Our procedures — write-blocked imaging, hash verification, sealed evidence bag handling, and full chain-of-custody documentation — ensure that recovered data is handled in a way that maintains its integrity from receipt through to delivery back to the submitting force.

We also offer forensically sound mobile phone repair and reconstruction for devices that are too damaged to be imaged in their current state. Where a phone needs physical repair before data can be extracted, our lab team carries out that work under the same chain-of-custody controls. See our dedicated forensic phone repair for police forces page for detail on that service.

Devices we recover data from

Mobile phonesWater-damaged, physically broken, or fire-exposed smartphones — the most common submission we receive from police forces.
Hard drives & SSDsDamaged laptop and desktop drives, including drives that have been deliberately tampered with or subjected to physical force.
TabletsiPads and Android tablets with damaged screens, ports, or internal storage that prevents standard extraction.
USB drives & SD cardsFlash storage devices that have been snapped, submerged, or otherwise damaged. Chip-off recovery available where the casing is destroyed.
External hard drivesPortable and desktop external drives — including those that have been dropped, submerged, or show signs of deliberate damage.
Fire & severely damaged mediaDevices recovered from fire scenes or subjected to extreme physical force. We assess each case individually and advise on recoverability before proceeding.

Our forensic procedures

Every law enforcement submission is handled under the following procedures, regardless of the scale of the case:

Receipt and documentationThe device is assigned a unique case reference on arrival, photographed in its received condition, and sealed in a tamper-evident evidence bag. A continuity record is opened at this point.
Write-blocked forensic imagingWhere the device's storage media can be accessed, we create a forensic image using hardware write-blockers that prevent any data being written back to the original. The original device is never used as the working copy.
Hash verificationA SHA-256 hash is taken immediately after the forensic image is captured. This provides a cryptographic fingerprint that proves the recovered data is an exact copy of what was on the device at the time of imaging.
Recovery workData recovery is carried out on the verified forensic copy — not the original. For physically damaged devices, cleanroom work may be required to access the storage media directly before imaging can take place.
Delivery with documentationRecovered data is returned on encrypted media alongside a recovery report, hash log, and full chain-of-custody record. The original device is returned in its sealed evidence bag with its continuity documentation intact.

Why police forces use Data Clinic

We have been working with UK police forces since 2002, and data recovery for law enforcement is one of our longest-standing service areas. Our Bury, Manchester lab operates a cleanroom environment for physical device work, and our team has experience with the full range of device damage scenarios that police submissions typically present — waterlogging, fire damage, deliberate destruction, and physical impact.

We are ICO-registered and operate under strict data handling controls. All recovered data is handled in accordance with the force's requirements, and we can align our documentation to your force's specific continuity and integrity standards. For forces with established procurement frameworks, please contact us to discuss how we can be set up as an approved supplier.

For more information on our physical device capabilities and cleanroom facilities, see our advanced data recovery services page.

Start a case or get an assessment

Use the diagnostic tool below for an initial assessment, or call 0800 151 2207 directly to discuss a law enforcement submission.

Frequently asked questions

What types of devices can you recover data from for police and law enforcement submissions?

We work with all common device types submitted by police forces: water-damaged and physically damaged mobile phones, hard drives and SSDs from computers and servers, tablets, USB drives, SD cards, and external hard drives. We also handle fire-damaged and crush-damaged devices where conventional recovery tools cannot reach the media. Call 0800 151 2207 for a no-obligation assessment.

How do you maintain chain of custody throughout the recovery process?

Every device is receipted on arrival with a unique case reference, photographed in its received condition, and sealed in an evidence bag before any work begins. Write-blocking hardware is used during imaging so nothing is written back to the original device. A SHA-256 hash is taken immediately after capture. Chain-of-custody documentation is provided with every case, recording each person who handled the device and at what stage.

Can you recover data from severely damaged devices — waterlogged, burnt, or physically crushed?

Yes — this is our specialism. Many of the devices we receive from police forces have been deliberately damaged, submerged, or exposed to fire. We operate a cleanroom in our Bury, Manchester lab where we can access storage media directly, bypass damaged controller circuits, and recover data inaccessible to software-based tools. We assess each case before proceeding and will give you an honest view of recoverability.

What documentation is provided with recovered data?

Every case includes a chain-of-custody record, a recovery report documenting the device received, the methods used, and the data recovered, and a SHA-256 hash log verifying the integrity of the recovered image. Where a Streamlined Forensic Report (SFR) or continuity statement is required, we can provide this on request. Contact us to discuss your force's specific documentation requirements.

How do police forces submit devices to Data Clinic?

Devices can be submitted by secure courier, dropped off at our Bury, Manchester lab, or we can arrange collection for urgent cases. We recommend contacting us before sending a device so we can open a case reference, advise on packaging, and note any time-sensitive requirements.

What are the turnaround times for law enforcement cases?

Standard turnaround is 5–20 working days depending on the complexity of the damage and the recovery required. Priority turnaround (2–5 days) is available for time-sensitive cases. For urgent submissions — where a court date or charging decision is imminent — call 0800 151 2207 to discuss emergency options.