01 Secure Enquiry

Initial contact is made via secure@custodire.ai, Threema, or PGP-encrypted message. No case details, principal names, or identifying information should be included. A secure out-of-band channel is established before any substantive communication begins.

02 NDA Execution

A mutual non-disclosure agreement is executed before any briefing. This protects the principal, their associates, and the integrity of any subsequent forensic process. No exceptions.

03 Threat Assessment

A confidential briefing is conducted with the principal or their designated representative. We establish the nature of the threat, the timeline, the distribution footprint, and the evidential requirements. This determines the appropriate response posture.

04 Retainer Agreement

Custodire operates on retainer. This ensures continuous monitoring, priority response, and a standing forensic capability that can be activated without delay. Retainer terms are agreed following the threat assessment.

05 Operational Deployment

Monitoring, forensic analysis, removal enforcement, and legal support are deployed in parallel. The principal and their team receive regular intelligence reports through a secure channel. All documentation is maintained to courtroom standard.

06 Ongoing Coverage

Threats evolve. Our retainer service provides continuous coverage — not a one-time response. New threat signatures, platform migrations, and dark-channel activity are monitored as a standing commitment.