Evidence infrastructure for online harm

    Online harm becomes lawyer-ready evidence.

    Finium preserves threats, impersonation, synthetic media, doxing and reputational attacks as structured evidence files, with hashes, timestamps and a custody record, for law firms, security teams and the people they protect.

    Public web · captured fragments

    sealed →
    CHAIN OF CUSTODYCAPTURED09:41:03HASHED09:41:05STAMPED09:41:06SEALED09:41:07URLlinkscreenshotpngprofilehtmlrepostlinkmediamp4commenttextEF-2026-0114SEALEDx.com/anon_4418captured 2026-02-14“we know where you live,and we willthreat redacted · original preservedsha256 a3f9c21d…0e81b42026-02-14 09:41:07 UTCEVIDENCE FILE

    Who it's for

    Three ways in. One evidence layer.

    The problem

    Screenshots are not a chain of custody.

    By the time a matter reaches counsel, the material that proves it is already degrading.

    01Posts disappear.
    02Profiles change names.
    03Reposts scatter context.
    04Screenshots lose source metadata.
    05Lawyers receive fragments instead of a file.
    06Legal, security and communications teams do not share one record.

    The proof

    131,781 comments collected → 81,101 analyzed → 5,951 flagged for review → 39 case files from the attributed slice, 31 statute-mapped with advisory windows.

    One German public-figure account · production audit · July 2026

    Read the case study

    How it works

    From a public URL to a structured evidence file.

    For files at the declared custody level, processing events are logged and later versions are retained separately.

    0109:41:03

    Capture

    Public URLs, profiles, posts, media, screenshots.

    url · screenshot
    0209:41:04

    Preserve

    Source context, screenshots, HTML and media where possible, with a SHA-256 hash.

    html · media
    0309:41:06

    Timestamp

    Capture time, source location, custody event, recorded in UTC.

    sha-256 · utc
    0409:41:07

    Structure

    Chronology, exhibits, harm category and custody events assembled into one file.

    exhibit
    0509:41:09

    Export

    A lawyer-ready file for counsel, platform report or internal review.

    pdf · json

    Built for law firms

    Your clients send screenshots. You receive a file your team can act on.

    01

    Evidence Pack Service first

    Send a public URL or client material. Receive a structured, lawyer-ready evidence file before content disappears. Your firm stays the legal actor.

    02

    Branded Evidence Desk later

    After repeat usage, the same workflow becomes your firm’s branded intake and evidence desk under your own brand.

    03

    No new overhead

    No software to build, no analysts to hire, no monitoring company to become.

    04

    Backed by the Integrity Guarantee

    If a paid file misses its declared Finium control, contact us for remediation under the engagement terms.

    Finium is not a law firm and does not provide legal advice.

    The product object

    A structured evidence file, not a folder of screenshots.

    The exported evidence file can include its source, capture time, hash, custody log and chronology, subject to its declared evidence level.

    Evidence fileEF-2026-0114
    Preserved

    Source

    social.example/p/8h42x…

    Captured

    2026-02-14 · 09:41:07 UTC

    Integrity

    sha256 · a3f9c21d…0e81b4

    Events ordered in matter time, each labeled by basis: observed at capture, or reported and pending verification.

    02-11 18:22observed

    Impersonation profile created on platform A

    02-12 09:14observed

    Original threat post published

    02-12 21:40observed

    Repost by secondary account scatters context

    02-13 08:05observed

    Comment adds workplace reference (doxing indicator)

    02-14 09:41reported

    Earlier related messages described by client

    02-14 10:05custody

    Captured, preserved, and assigned to exhibits

    Specimen file, illustrative, anonymized data. Not client material.

    Use cases

    One evidence layer for online-harm matters.

    Different harms, one discipline: capture early, preserve context, keep custody intact.

    01

    Threats & cyberstalking

    Repeated threats across platforms, preserved with timestamps and source context before accounts vanish.

    02

    Impersonation & fake profiles

    Cloned identities and fake accounts documented with profile history and distribution trail.

    03

    Synthetic media & NCII

    Manipulated and non-consensual material preserved with source links, reposts, provenance signals and capture metadata, packaged with uncertainty stated clearly, for assessment by counsel.

    04

    Doxing & private information exposure

    Exposed addresses, numbers and documents captured before takedowns erase the trail.

    05

    Defamation & reputational attacks

    Coordinated claims and their spread mapped into one chronology with preserved originals.

    06

    Executive impersonation

    Fake executive accounts and fraudulent outreach documented for legal, security and communications teams.

    Expansion path

    Start with evidence packs. Expand into a branded evidence desk.

    The workflow earns its place matter by matter.

    01

    60-day pilot

    5–10 evidence packs on live matters.

    02

    Repeat matters

    The pack becomes the default way online-harm material enters the firm.

    03

    Branded intake

    Clients submit through your firm’s intake, backed by Finium.

    04

    White-label portal

    Your brand on the workflow, your matters in one place.

    05

    Firm-level evidence desk

    A standing evidence capability across the practice.

    Start your Account Harm Audit intake.

    Tell us about your matter. We confirm service fit and handling scope within one business day.

    Finium is not a law firm and does not provide legal advice.