The concept of an online forensic report generator raises an immediate question for any attorney or investigator: if you are uploading sensitive client data to a website, where does that data go? The answer with ExtractPhone is unusually straightforward. It goes nowhere. All processing happens inside your browser, on your machine, without any data leaving your device. This technical explainer breaks down exactly how that works and why it matters for legal professionals.
The Traditional Forensics Model and Its Problems
Traditional forensics tools are desktop applications running locally on a dedicated workstation. This solves data transmission concerns but introduces friction: install specialized software, manage hardware dongles and licenses, and work from a single dedicated machine. Cloud-based forensics platforms upload your evidence to their servers for processing. This creates a problem: your client’s privileged communications and personal data now reside on a third-party server. ExtractPhone resolves this tension with client-side processing.
How Client-Side Processing Works
When you navigate to extractphone.com/report-generator, your browser downloads the ExtractPhone application as JavaScript code. This code runs entirely within your browser sandbox. When you select a backup file, it is accessed directly by the JavaScript running in your browser and never transmitted to any remote system. Parsing, analysis, and report generation all happen locally. The final PDF is downloaded directly to your computer. No evidence data traverses the internet.
What ExtractPhone Can Parse
iOS iTunes Backups
iTunes backups store device data in a directory structure with a manifest file and thousands of individual files named by their SHA-1 hash. ExtractPhone parses the manifest to map filenames to original paths, then reads the relevant data files: the SMS database containing iMessages and SMS, the call history database, contacts, Safari history, and media files.
Google Takeout Archives
Google Takeout exports data as a ZIP archive containing JSON files organized by service. ExtractPhone processes JSON files from Gmail, Google Messages, Google Photos, Google Maps Timeline, and other services to compile a unified evidence report.
Android Backup Files
Standard Android backup files use a proprietary format storing app data, SMS databases, call logs, and contacts. ExtractPhone decodes this format and extracts the relevant evidence data.
Privacy Architecture Benefits for Legal Professionals
- Attorney-client privilege protection: Privileged communications never leave your machine, eliminating risk of inadvertent disclosure through data transmission.
- HIPAA compliance: Medical data in backups is not transmitted to any external system.
- No data retention risk: Since ExtractPhone never receives your data, there is no risk from their retention policies, government requests, or security breaches.
What the Report Contains
The generated forensic report is a structured PDF including: a cover page with case metadata; hash verification records (MD5 and SHA-256) of the source backup; a data summary with counts by category; full message thread contents with timestamps; call log listing with timestamps and duration; a contact directory; browser history; and a photo and video catalog with EXIF metadata.
Technical Limitations
Because ExtractPhone works from backup files rather than physical devices, it cannot recover data not included in the backup, cannot bypass encryption on end-to-end encrypted messages not backed up, and cannot recover data deleted before the backup was created. For cases requiring deleted data recovery or physical device analysis, a professional forensics lab like Octo Digital Forensics provides services beyond what any backup-based tool can offer.
FAQ
What happens to my data when I use ExtractPhone?
Nothing leaves your device. All file processing happens in your browser. ExtractPhone’s servers only serve the application code; they never receive your evidence files or generated reports.
How does ExtractPhone verify backup integrity?
ExtractPhone computes cryptographic hash values (MD5 and SHA-256) of the source backup file and includes them in the report, allowing you to verify at any later point that the backup analyzed has not been modified.
Try ExtractPhone free at extractphone.com/report-generator
For cases requiring physical extraction, deleted data recovery, or expert testimony, Octo Digital Forensics provides full-service forensic analysis. Call 858-692-3306 or book a free consultation.
