PUBLISHED STANDARD
Code of Ethics and Business Conduct
A forensic examiner’s ethics are not a marketing page.
Enetsec is a digital forensics laboratory in Boca Raton, Florida, founded in 1999 by Wanderson Castilho. This code governs how we accept work, examine evidence and state findings. Our conclusions follow the evidence, not the party paying for it. Castilho has given 40 depositions in the past four years.
They are the first thing opposing counsel will test, and the last thing a jury will weigh.
This code is published so that anyone considering retaining us, and anyone preparing to cross-examine us, can read the standard we hold ourselves to before the engagement starts. It applies to every examiner in the laboratory and to every matter, whether the client is a law firm, a company, a law enforcement agency or a family.
ARTICLE 01
Independence of Findings
Our conclusions follow the evidence, regardless of who is paying for the examination.
We are retained to examine, not to confirm. If the evidence supports the client’s position, we say so. If it does not, we say that too, in the same words, in writing, and as early as we know it. A client who receives an unwelcome finding from us early has options. A client who receives it for the first time in a deposition has none.
We will not adjust a conclusion because of who retained us, what the fee is, or what outcome the client prefers. We accept work from both plaintiff and defence, and from both sides of the same subject matter across different cases, because an examiner who only ever reaches one kind of conclusion is an examiner with a pattern. In the 6,000+ cases we have analysed since 1999 (Source: Enetsec case record, 2026), the reports that held up were the ones that stated the limits of the evidence as plainly as the findings.
ARTICLE 02
Evidence Integrity and Chain of Custody
We work on verified forensic images, never on originals. Every item is logged on receipt, imaged, hash-verified, and sealed. Every transfer of custody is signed and timestamped, and the custody log is delivered with the report.
We do not alter evidence. We do not omit artifacts that are inconvenient to the retaining party. Where an examination is limited by encryption, physical damage, missing data or a restricted scope, the report states the limitation rather than working around it. Our full handling and retention procedure is published on our policies page, and the workflow is described on the digital forensics laboratory page.
ARTICLE 03
Conflicts of Interest
We run a conflict check before we accept a matter, against the parties, counsel, and the subject of the examination.
If we have previously examined evidence for an adverse party in a related matter, we decline and say why, without disclosing anything confidential about the earlier engagement. If a conflict emerges after an engagement begins, we notify the client immediately and withdraw where withdrawal is the right answer. We do not take a contingent fee on any matter where we may testify, because a fee that moves with the outcome is a fee that opposing counsel will hold up in front of the jury, and it should be.
ARTICLE 04
Competence and Method
We take work that falls within our demonstrated competence and we decline work that does not.
Every examination is conducted with validated tools, documented by version, and recorded so that another qualified examiner could reproduce the result from the method section. Reproducibility is not an academic virtue here. A finding another examiner cannot reproduce is a finding that will be excluded, and rightly.
When we examine a phone, the first thing we check is whether the acquisition method we intend to use will alter anything on the device. If it would, we find a different method or we document the change before we make it. That habit is the whole discipline in one step.
ARTICLE 05
What We Will Not Do
This section is the part of the code that matters most, and it is written in the negative on purpose.
REFUSAL 01
We do not access devices or accounts the client does not own or lawfully control. No exceptions, no matter who is asking, no matter how sympathetic the reason. If you do not own the phone and you do not have lawful authority over it, we cannot examine it and we will tell you what your lawful options are instead.
REFUSAL 02
We do not accept engagements whose object is unlawful surveillance. We do not install tracking software on another person’s device, we do not intercept another person’s communications, and we do not recover another person’s account credentials. Detecting stalkerware on a device you own is forensic work. Placing it on someone else’s is a crime, and we will not be part of it.
REFUSAL 03
We do not state conclusions beyond what the evidence supports. No inferred intent that the artifacts do not show. No attribution to a named individual where the data supports only a device or an account. No opinion offered outside our area of competence.
REFUSAL 04
We do not promise outcomes. We do not claim a success rate, we do not predict what a court will do, and we do not guarantee that any specific data is recoverable before we have examined the device. Any examiner who does is describing something they do not control.
REFUSAL 05
We do not disclose client matters. Not the findings, not the identity of the client, not the existence of the engagement, during or after.
ARTICLE 06
The Person Who Signs the Report
SIGNED BY THE EXAMINER
A code of ethics is only as credible as the examiner who signs under it. Ours is signed by Wanderson Castilho, founder of Enetsec, a physicist with 21 years in practice, Cellebrite, AccessData and CCE certified, and a member of the Association of Certified Fraud Examiners (Source: SEAK Expert Witness Directory, 2026). He has given 40 depositions in the past four years, which means this standard has been tested under cross-examination rather than written for a website. See how it applies in litigation on the digital forensics expert witness page.
ARTICLE 07
Hold Us To It
If you are evaluating an examiner, ask them to publish this. If you have retained us and believe we have fallen short of anything on this page, tell us directly. Call the Boca Raton laboratory at (561) 846-9010 Monday to Friday, 8:00 AM to 5:00 PM, or contact us at 3651 FAU Boulevard Ste 400, Boca Raton, FL 33431.