Extended GRC
MeshForensic
Compartmentalized investigations, with evidence under chain of custody and access restricted by case, out of the AI's reach.
- MeshForensic
- Cases
| Case | Status |
|---|---|
| INV-2027-009 | Under investigation |
| INV-2027-007 | In review |
| INV-2027-004 | Concluded |
If your investigations still work like this
- An investigation in a shared folder?Anyone with access to the folder sees evidence that should be restricted.
- Evidence without chain of custody?When it's time to take the case further, no one can show the file hasn't changed.
- An interview recorded in Word?Without date, participants and validation, the statement loses weight.
- An AI tool reading what it shouldn't?Assistants that index everything also index what is confidential.
What MeshForensic does
Compartmentalization by case
Each investigation is isolated. Anyone outside the case doesn't know it exists.
Evidence with chain of custody
Hash on intake, a record of every access and every movement.
Investigation interviews
Script, record and validation, to the same standard as MeshInterview, inside the case.
Case timeline
Facts, evidence and decisions in order, ready for the report.
Traced origin
Cases opened from reports, audit findings or monitoring exceptions.
Out of the AI's reach
No investigation data enters the Mesh Intelligence index. It is an architecture rule, not a setting.
Every piece of evidence shows who touched it.
Evidence is hashed on intake, and every view, download or movement is recorded. The final report points to the original evidence.
- MeshForensic
- INV-2027-009
- Evidence
- 03/14Collected by Investigationsha-256 3b7e…c90f
- 03/15Viewed by Investigator 2
- 03/16Integrity checkedApprovedHash matches the one at collection
Anyone outside the case doesn't know it exists.
The case doesn't appear in search, dashboards or reports outside the team. Not even platform administrators see the content unless assigned.
- MeshForensic
- INV-2027-009
- Team
- Lead investigator
- Investigator 2
- Legal (read only)
This case doesn't appear in searches or dashboards outside this team.
Illustrative screens with fictitious data.
Ready to take further
Chain of custody and access records designed to support the case before internal and external bodies, with ISO/IEC 27037 practices for collecting digital evidence.
The AI stays out
By design, no investigation data is indexed or read by Mesh Intelligence. Investigation is work for people.
Fits with
- MeshSignalA reporting channel on an isolated domain and infrastructure, with a protocol so the reporter can follow the case without identifying themselves.
- MeshInterviewInterviews and walkthroughs transcribed and organized. From them, Mesh Intelligence proposes controls, risks, flows and findings to the other modules, and the auditor decides what goes in. Forensic interviews are isolated from the start.
Questions from investigators
Does the platform administrator see investigations?
No. Only people assigned to the case see the content.
Can I use evidence collected outside the platform?
Yes. Evidence is hashed at upload, and the chain of custody starts there.
How does a report become an investigation?
MeshSignal triage refers the case, and it starts compartmentalized in MeshForensic, with its origin recorded.
See MeshForensic with a case from your industry
The demo is led by the founder, who has seven years of internal and external audit experience.
Modules are licensed separately. The platform comes with all of them.