Prove the file you hand over is the file you collected.
EMP Intake is a local Windows case workspace for security investigations. Build one record around the files, people, vehicles, places, assets, notes, findings, maps, and timeline events in a case. EMP preserves originals, records integrity at intake, and exports a package the recipient can verify without EMP.
Verify a sample export·Run the live tamper test·Compare Workstation and Teams
For corporate security, loss prevention, campus safety, healthcare security, and investigative teams working across video, access, alarm, and business records
SHA-256 hashes captured at intake, preserved source files, and an audit trail of supported case actions. EMP records those actions as you work.
Defensible by design, not by discipline.
From raw files to a package anyone can verify.
A Windows app you run on your own machine. Intake, build the case, export: one defensible chain of custody. And here’s the actual software, not a mockup.
Bring the files into a case.
Drag files in and EMP imports a copy of each into the case, computing a SHA-256 fingerprint at intake. That hash becomes the file’s baseline and any later change shows the moment the file is re-hashed.
Reconstruct what happened.
Build the incident timeline, plot locations on a map, and connect people, evidence, places, and devices in a link-analysis graph. As you work, supported case, evidence, and reconstruction actions are recorded in the audit log.
Hand off a package they can verify.
Produce a verifier-ready export package: a documented format with a SHA-256 manifest. Opposing counsel, a court, or an auditor can verify it without EMP Intake installed, and nothing is ever uploaded.
Standardize names before files become evidence.
Use a consistent naming convention for evidence files. File-integrity checks belong in the export manifest, not the filename. Reviewers should not need to decode a folder full of random camera names, screenshots, and renamed copies.
See the file naming standardTrack the people, vehicles, places, and assets behind the files.
Enterprise platforms manage investigations. EMP proves the evidence package you hand over is the one you collected. Evidence does not explain itself. EMP builds a structured case workspace around it. Add people, vehicles, places, assets, loss and impact, comments, tasks, findings, and file notes once, then reuse them across incident maps, heat maps, the timeline, link analysis, and the export.
EMP Intake Workstation is available today. The EMP Teams pilot is planned for 2027.
EMP Intake starts with a 14-day trial: no card, no sales call. EMP Teams is recruiting a small pilot cohort for 2027; the apply link is the same conversation.