Security & Access Standard
For WFIG, security is not a decorative claim. It is a set of controls around access, handling, disclosure, and continuity.
Controlled Access
Private client functionality is designed around invitation-based registration and authenticated access. Access should be provisioned to identified users, limited to the matter or function for which it is required, and revoked when no longer appropriate.
Credential Protection
Users should use unique credentials, protect password managers and recovery methods, and avoid sharing access through ordinary email or messaging. WFIG may require credential reset, re-verification, or additional controls where risk warrants.
Information Handling
Public forms are intentionally unsuitable for highly sensitive evidence. Sensitive material should move only through approved channels with handling rules appropriate to the matter. WFIG may establish matter-specific restrictions on file type, retention, access, and onward distribution.
Private Analytical Environment
Some matters are too sensitive to entrust to technology you do not control. WFIG's core forensic intelligence environment was privately developed for the work we do and operates offline and air-gapped for sensitive analytical workflows. Sensitive case information is not entrusted to public AI platforms simply because their technology is convenient.
Artificial intelligence is one tool within the process. No WFIG conclusion rests on what artificial intelligence says. It rests on what the record supports.
Logging and Review
Security-relevant access and activity may be logged to support continuity, incident review, account administration, and authorized matter oversight. Logging is intended to support accountability without turning the client environment into a broad surveillance system.
Infrastructure Principle
Production infrastructure should follow least-privilege access, encryption in transit, controlled administrative access, separated secrets, tested recovery procedures, and timely security updates. Specific controls may vary by deployment and matter requirements.
Security Reporting
If you believe an account, credential, document, or WFIG-controlled workflow has been exposed or misused, discontinue use of the affected credential and contact WFIG through an established trusted channel. Do not include sensitive exploit details in a public inquiry form.
No Absolute Security Claim
No internet-connected system can be represented as risk-free. WFIG therefore focuses on reducing exposure, limiting access, maintaining traceability, and responding deliberately when conditions change.