Evidence Vault

Proof That Holds Up in Court.

SHA-256 verified photographs, timestamped GPS, and a tamper-evident evidence chain — captured remotely, without touching the device.

<5s
Photo Capture Time
SHA-256
Evidence Hashing
30d
Standard Retention
GPS
Location at Capture

Evidence You Can Hand to Law Enforcement

STEP 01

Issue Snapshot Command

Click Snapshot in the Sentinel dashboard. The command is signed with the device's JWT token and queued for delivery — no user action needed on the device.

STEP 02

Camera Activates Silently

The agent activates the front or rear camera silently. The device owner sees no indication. A photo is taken within 5 seconds of command delivery.

STEP 03

Evidence Hashed & Stored

The photo is uploaded alongside a SHA-256 hash of the file content, GPS coordinates, timestamp, and device ID. The hash proves the file has not been tampered with since capture.

STEP 04

Chain of Custody Locked

Every evidence entry is immutable. The chain can be exported as a report for insurance companies, law enforcement, or internal investigations.

EVIDENCE CHAIN — SNTNL-KE-00142 — Case #2026-0041
E-001
Snapshot — Front Camera 2026-06-25 09:14:32 UTC  ·  GPS: -1.2921°S, 36.8219°E (Nairobi CBD)  ·  resolution: 2048×1536
VERIFIED
E-002
Snapshot — Rear Camera 2026-06-25 09:14:47 UTC  ·  GPS: -1.2921°S, 36.8219°E (Nairobi CBD)  ·  resolution: 4032×3024
VERIFIED
E-003
GPS Location Log 2026-06-25 09:15:01 UTC  ·  Accuracy: ±12m  ·  Network: Safaricom 4G
VERIFIED
E-004
Device Lock Executed 2026-06-25 09:15:08 UTC  ·  Operator: admin@company.ke  ·  Message: "Call police: 0800723456"
VERIFIED

From Police Reports to Insurance Claims

Police Report Evidence

A photo of the thief's face and their GPS location, taken seconds after the phone was stolen. Walk into any police station with hard evidence, not just a description.

Law Enforcement

Insurance Claims

Insurers require proof of theft, not just a declaration. A hash-verified photo with GPS and timestamp satisfies the burden of proof for device insurance claims.

Insurance

Internal Investigations

Suspected data theft by an employee. Take a snapshot of the screen to document what was visible. Time-stamped, hash-verified — admissible as evidence in a disciplinary hearing.

HR & Legal

Remote Site Verification

Verify that a remote office device is physically present and in use. A scheduled snapshot tells you whether a device has been moved or abandoned without sending someone on-site.

Asset Management

Tamper-Evident by Design

Hash Algorithm
SHA-256 computed server-side on receipt. Hash is stored separately from the file — any modification of the photo breaks the hash match.
Metadata Captured
Every evidence entry records: timestamp (UTC), GPS coordinates, device ID, operator, network type, battery level.
Storage
AES-256 encrypted at rest. 30-day standard retention. Flagged stolen-device cases: indefinite retention until case is marked resolved.
Access Control
Evidence accessible only to the account holder and, with a court order, to law enforcement via a formal request process. Never shared with third parties.
Capture Types
Front camera photo, rear camera photo (Android). Screenshot (Windows, Linux). GPS coordinate log.
Silent Activation
The camera activates with no user-visible notification. No shutter sound. No app switching. Designed for use when the device is in unauthorized hands.
Get Started

Build Evidence Before You Need It

When a device is stolen, every second counts. The Evidence Vault is already running — you just need to issue the command.

Chat with us