The catalog

66 reports. One contract. Zero guesses.

Every report below is registered in the engine — this page is the catalog, not a summary of it. Each one paginates, sorts, searches, drills to its records and exports with a Section 63(4) certificate in six formats sharing one result hash.

CDR — voice & SMS

includes the CDR events evidence grid

CDR Events (evidence grid)
Top Associates / Contact Frequency
Call Directionality & Initiation Balance
Tower (CGI) Geo-Mapping & Footprint
IMEI Change & Device-History Timeline
IMEI–IMSI Binding / SIM-Swap Detection
Temporal Heatmap & Daily Routine
Odd-Hour / Night-Activity Profiling
Call-Duration & Relationship Strength
SMS Sender-ID Classification / Digital Footprint
Network / Link-Chart Export
Movement / Travel-Path Reconstruction
Home / Work / Night-Anchor Inference
Co-Location / Meeting Inference
Service-Mix & VoWiFi-IP Analysis
Bursts, Silent Periods & Contact Lifecycle
Roaming Network & Circle Summary
Silent / Phone-Off Periods

Network & link analysis

multi-target CDR correlation

Inter-Suspect Contact Matrix
Shared Associates / Bridge Contacts
Rendezvous / Meeting Detector
Relay / Instruction Chains
Shared Anchor Towers
Shared Device / SIM Ring

Enrichment-backed

TAC, LRN and numbering-plan reference data

Device Intelligence (TAC)
B-Party Operator Attribution
International (ISD) Calls & SMS

IPDR — data sessions

includes the IPDR sessions evidence grid

IPDR Sessions (evidence grid)
CGNAT IP+Port → Subscriber Resolution
Per-Subscriber Activity / Top Talkers
Application / Protocol Classification
Session Timeline / Online Presence
Reverse Destination Lookup
Destination ASN / Org Attribution
Destination Geolocation / Foreign Comms
Suspicious-Protocol / Anomalous-Port Detection
VPN / Tor / Anonymiser Detection
DNS & NTP Behaviour Profiling
High-Duration / Bulk-Transfer Outliers
Device & SIM Fingerprinting Integrity
Roaming, Circle & CGI Location
Common-Destination Co-occurrence Clusters
Temporal Patterns, Bursts & NAT Allocation
Data Volume by Destination

Tower dumps

multi-operator police dumps; includes the evidence grid

Tower Dump (evidence grid)
Tower Presence / Cell Occupancy
Cross-Tower Recurring Numbers
Subscriber Activity Profile
Device / SIM Anomalies (IMEI ↔ number)
Contact Frequency (B-party)
Activity Over Time (hourly)
Co-Presence / Possible Associates

Fusion — CDR × IPDR

voice and data, one timeline

Unified Voice + Data Timeline
Device-Centric Identity Correlation
“Call-then-Connect” Correlation
Location Cross-Validation & Gap-Filling
VoWiFi → Broadband Bridge
360° Subject Dossier
Cross-Domain Anomaly & Risk Scoring
Channel-Migration / Encrypted-Comms Inference

Destination intelligence & OSINT

every attribution names its source and confidence

VoIP & Real-Time Communication Analysis
Virtual-Asset (Crypto) Destination Exposure
Dark-Web / Tor Infrastructure Exposure
Bulk IP Lookup
OSINT Entity Graph (subscriber ↔ infrastructure)
Banking & Financial Activity Footprint

18 + 6 + 3 + 17 + 8 + 8 + 6 = 66, including the three evidence grids. Adding a report — or swapping its engine — touches nothing else.

The case workspace

Six tabs per case

Dashboard

Headline volumes, QC health and the period covered. The QC tile turns red and says so when a file does not reconcile.

Evidence files

Uploads with SHA-256/MD5 on arrival, parse progress, QC report, ZIP expansion, and the column-mapping UI for unrecognised formats.

Reports

All 66 on one grid contract — server-side pagination, sort, search, params, saved views, drill-through, and the export format picker.

Map & graph

Offline geo plot with point/heat modes and a deterministic force-directed entity graph you can click to isolate a neighbourhood.

Insights

AI leads, labelled and method-noted; ask-the-case; case briefs from a template or a local model.

Activity

In-flight parses and exports plus this case's append-only audit trail. Called activity, not “live monitoring” — analysis is post-hoc by design.

Platform

Everything an investigator needs, and nothing an exhibit can't survive

Template registry & mapping UI

Built-in operator templates match by header signature; an analyst maps an unknown format once and it parses tenant-wide from then on. No code deploys for new layouts.

ZIP bundles & CSV intake

Bundles expand into individual hashed evidence files, with zip-bomb guards. CSVs parse through the same string-safe pipeline as workbooks.

Cross-case entity search

One number, IMEI, IP or CGI searched across every case you can see — with phone-format variants generated automatically.

One-click court dossier

A curated exhibit set rendered as certified PDFs, a cover index of every exhibit hash, and a bundle hash a re-run reproduces.

Graph export for your tools

GraphML, GEXF and CSV edge lists — the entity graph opens in i2 or Gephi, not just in TraceLens.

Saved views & drill-through

Any grid state can be named and kept; any aggregate row drills to the exact underlying records that produced it.

MFA & workspace policy

TOTP two-factor with per-tenant enforcement, IP allowlists, export watermarks, export approval and retention windows — all admin switches.

Object-level case access

Creator, team and workspace-admin visibility on every endpoint. A case you cannot see answers 404 — its existence is not disclosed.

Append-only audit

Every authenticated view, upload and export lands in the audit log. The activity tab shows a case's trail to the people cleared to see it.

Retention & destruction

A nightly sweep purges closed cases past the retention window, writing a tamper-evident destruction certificate first, in the same transaction.

Device & operator enrichment

TAC tables name the handset, LRN data attributes ported numbers, anonymiser feeds flag Tor and VPN ranges — loaded from files, air-gap friendly, honestly “not loaded” when absent.

Offline geo, opt-in tiles

The default map requests nothing — it draws the case's own coordinates with a graticule and scale bar. A basemap is a deliberate, deployment-level opt-in.

Try it on a real disclosure

The trial is the full platform — every report, every export format, the same certificates.

Start your free trial