Forensic · Fraud · Investigation
Forensic engagements
with chain-of-custody evidence
Engagement subtype 'Forensic / Investigation' with restricted access, chain-of-custody evidence retention, anonymous-tipster intake, and findings flagged for legal privilege. Built for ACFE-style fraud examinations and internal investigations.
Investigation workflow
- Engagement subtype 'Forensic'
- Restricted access — investigators only
- Tipster / whistleblower intake (anonymous)
- Interview log with witness sign-off capture
Chain-of-custody evidence
- Tamper-evident evidence log
- Hash retention on uploaded artefacts
- Custody transfer audit trail
- Evidence retention beyond engagement close
Fraud schemes register
- ACFE fraud-tree taxonomy (asset misappropriation / corruption / fraudulent statements)
- Red-flag library mapped to controls
- Recovery + restitution tracker
- Repeat-fraud analytics across periods
Legal privilege + reporting
- Findings flagged for attorney-client privilege
- Restricted-distribution Audit Pack
- Regulator / prosecutor disclosure tracker
- Fraud loss reporting to insurance / regulators
Forensic engagement workflow on Day 1
Forensic subtype + chain-of-custody + restricted access on Business + GRC Enterprise tiers.