DataExpert is an independent partner for the teams that investigate, prevent, and resolve serious cybercrime. We work alongside national police, banks, regulators, and large enterprise across the EU — bringing the tools, the tradecraft, and the people that turn complex incidents into defensible outcomes.
Operators of EnCase, Cellebrite, Chainalysis, TRM Labs, Maltego, and more.
Choosing a forensics or cybersecurity partner is a decision you only get to make once per incident. DataExpert pairs the technical depth of a specialist lab with the operational reach of a regional firm — independent of the Big-4 advisory model, multi-jurisdictional across the EU, and accountable to the operators who actually run your case.
Every engagement is led by a practitioner who has done the work in the field. We are not part of a Big-4 advisory firm and we do not subcontract investigations to a partner network. The senior analyst who scopes your case is the same analyst who delivers it — and stands behind the findings.
With offices in the Netherlands, Sweden, and Denmark, DataExpert is built for investigations that cross borders. We know the legal frameworks, the data-sovereignty constraints, and the operational rhythms of EU regulators and law-enforcement agencies — and we work in English, Dutch, Swedish, and Danish across the same case file.
Investigations should not be limited by what one vendor sells. DataExpert is certified across Cellebrite, Chainalysis, OpenText, Maltego, TRM Labs, Magnet Forensics, and the wider EU forensics ecosystem. We deploy the tool that fits the case — not the tool that fits the contract — and we tell you clearly why.
We deliver investigations, and we train the next generation of investigators through the DataExpert Academy. That two-way exchange keeps our practitioners current and gives our clients a route to build the capability in-house. Buy the engagement, build the team, or do both — the choice is yours.
Our work supports organisations where the cost of being wrong is high — national police forces investigating organised crime, banks reporting on suspicious financial flows, and public-sector agencies protecting critical environmental and infrastructure data. The names below are public clients who have consented to be cited; many more remain confidential by mutual agreement.
OpenText EnCase Forensic deployment partner
DataExpert supplies and supports the OpenText EnCase Forensic platform used by Dutch National Police investigators for computer and storage forensics, including ongoing technical assistance, training, and case-level escalation pathways.
Compliance reporting under "Report as a Service"
Chaabi Bank engages DataExpert for "Report as a Service" — a recurring compliance-reporting capability that helps the bank meet its regulatory obligations without scaling an internal team of forensic accountants.
IBM analytics deployment for environmental-hazard detection
DCMR — the joint environmental-protection agency for the Rotterdam-Rijnmond region — works with DataExpert on IBM-software-based analytics that surface anomalies in industrial-emission and incident data.
Operating in regulated sectors means our methods, our chain of custody, and our reporting all have to hold up under scrutiny. DataExpert is audited against recognised security and forensics standards, and we maintain active vendor certifications across the toolchains our clients rely on most.
We will publish certificate references and audit dates here once final.
We share what we are learning in the field — at industry conferences, investigator workshops, and our own Academy sessions. If you are attending one of the events below, get in touch in advance and we will set aside time for a private briefing or a walk-through of the work we are doing in your sector.
We are between conference seasons. Follow us on LinkedIn for new event announcements, or get in touch to arrange a private session for your team.
Field notes, tooling reviews, and tradecraft pieces written by the operators who run our investigations. Topics range from mobile-forensics technique to cryptocurrency-laundering typologies — sanitised for publication and aimed at peers, not marketing audiences.
Field notes drop here as casework wraps and we get clearance to publish. In the meantime, the resources hub points at the rest of what we publish.
Tell us what you're working on — we'll route it to the operators who have done this kind of work before.
or call +31 (0)318 543173