Product guides for Workstation and Teams

Pin the evidence and mark the scene on a map tied to your case. Each pin can link to the case records it represents, so the geography and the evidence stay one record.

Drop logs, exports, and video onto one timeline, link each item to the evidence behind it, and produce a reconstruction a reviewer can verify, with every source preserved and hashed at intake.

Build a hand-off package from selected originals, reports and retained artifacts. Include the manifest so a recipient can check the packaged files against their recorded SHA-256 values.

Each imported file has a recorded SHA-256 baseline and preserved original. Supported changes and handling events retain their actor and time, so a reviewer can check the file and follow its recorded history.

EMP Intake Teams is NIST-aligned, not certified: file hashing, an append-only audit log enforced at the API, and a deployment that runs entirely on infrastructure you control, never ours.

Pin evidence and draw scene shapes on a shared map. EMP shows map-section presence when another investigator is editing. Locations attach to case objects, so the map stays part of the case record, with supported map actions attributed in the audit trail.

Plan a Teams deployment on infrastructure you control. Confirm the supported host, evidence storage and network requirements for your pilot.

Export selected originals and reports with file checksums and recorded team activity. Recipients can review the hand-off without an EMP installation.

The Workspace API handles shared-case access and records supported actions with the acting user. The database stays on infrastructure you control.

Investigators contribute to one shared incident timeline, with changes attributed to the acting user. Logs, exports, and video land on a shared timeline, each change attributed to who made it, with the originals preserved and hashed as they come in.