FAQ – data recovery and safety

Key questions before you submit a case

• 💰 Is standard diagnosis free and when do I pay?

  Yes. Standard diagnosis is free. After analysis we tell you the recovery chances, scope of work and final quote. Payment is due only after you approve the service.
• ⏱ How long does data recovery take?

  Standard turnaround is usually 2–5 business days. An express option is available for urgent cases, often within 24–48 hours depending on the media and failure type.
• 🔐 Is my data safe and can I request an NDA?

  Yes. Devices are stored in controlled conditions with no third-party access. We can also sign an NDA for confidential or business cases.
• 🚫 What should I do right after a device failure?

  Do not run scans, do not write new data and do not keep restarting the device. Contact the lab first and we will tell you the safest next step.
• 🛠 How do I report a problem?

  The fastest way is to call us, use the form or send a short email with the symptoms. For the first contact you only need basic details about the device and the problem.
• 📦 Can I send the device by courier or parcel locker?

  Yes. We accept cases from all over Poland. After the first contact we send packing and shipping instructions, or arrange personal drop-off in Warsaw.
• 💳 Can I get an estimated price before diagnosis?

  Yes — after you describe the symptoms we can usually give you a rough price range. The final quote is possible only after diagnostics of the actual device.
• 🧭 What happens after I submit the case?

  First we review the symptoms and choose the safest next step. Then we run diagnostics, send the quote and start the actual recovery only after your approval.
• 📍 Where is the laboratory located?

  The laboratory is in Warsaw, Bialoleka district, Jana Kowalczyka 1, unit 8, 2nd floor. Personal drop-off is available after prior contact.
• 💾 Can you recover data from a completely dead drive?

  In many cases yes. The chances depend on the type of damage, the device model and whether earlier attempts made the condition worse.
• 🧪 Can you first check whether recovery is realistic?

  Yes. That is exactly what diagnostics are for. We assess the condition of the device and the real recovery chances before full work begins.
• ⚠️ Is a cheap scan the same as safe data recovery?

  No. A simple scan is not the same as safe diagnostics and work on a sector-by-sector copy. On unstable devices, aggressive scans can reduce the chance of recovery.
• Why does professional data recovery cost more?

  It comes down to the process, the equipment and the technical risk. A professional lab: • diagnoses the media at hardware level, not with “software from the internet” • creates a safe bit-by-bit image • protects the original media from further damage.
• Do you provide an initial quote by phone?

  We can estimate the scope of work initially, but an accurate quote is only possible after device diagnostics. Every failure is different, and data recovery is a laboratory process — not a one-price-fits-all service.
• Can diagnostics make the device worse?

  Yes — that is why we perform diagnostics in safe mode. We avoid aggressive scans on the original device and first stabilise the read process and create a bit-by-bit sector image on lab-grade hardware. File-structure analysis and data selection are performed on the copy to minimise the risk of further damage.
• Do you recover data from USB-only drives?

  Yes, we specialise in such cases. USB-only drives are particularly sensitive — they require hardware imaging and error control. Ordinary software can permanently destroy the chance of recovering the data.
• How long do you keep my data after recovery?

  By default, 7 calendar days from completion of the job. After that, the data is permanently deleted. On request, we can offer secure extended storage in line with our privacy policy.
• Can I bring the device without arranging it in advance?

  Drop-off at the laboratory is possible after prior contact — by phone or email. This helps us maintain workflow organisation and the safety of laboratory procedures.
• Do you work with NAS and RAID systems?

  Yes, we recover data from NAS devices, RAID 0/1/5/6/10 arrays and servers, including cases of: multiple-drive failures, configuration errors, accidental rebuilds, and deleted volumes or folders.
• Can I watch the recovery progress live?

  For safety reasons and because of laboratory procedures, this is not possible. We keep you updated on the status of the job.
• What about TRIM? Does TRIM erase data permanently?

  TRIM tells the SSD that data in specific blocks is no longer needed and may be cleared. However, erasure does not always happen immediately — it depends on the SSD model, the controller, how full the drive is and how long it has been used after the deletion.
• Can data deleted from the Recycle Bin on an SSD be recovered?

  Yes, if you act immediately and the drive has not been used after the deletion. On an SSD, every write operation (installing software, Windows updates, games, internet browsing, temporary files) may overwrite deleted data.
• Can I try to recover the data myself?

  We do not recommend that for SSDs. Why? Running “recovery” software on the same device may: create temporary files, index the drive, overwrite free space and trigger TRIM / garbage collection more aggressively.
• What should I do when the drive clicks, disappears from the system or the computer freezes?

  Most importantly: turn the computer or device off immediately. Do not power the drive up again, do not scan it with repair tools and do not open the casing yourself. The fewer “force it to work” attempts you make, the greater the chance of a full recovery in the laboratory.
• Does data recovery void the manufacturer warranty? It depends on the case. If recovery requires intervention in the device, for example opening an HDD, electronics repair or cleanroom work, the manufacturer may refuse warranty coverage. If the device is still under warranty, tell us before we start.
• How should I pack a drive, USB flash drive or memory card for shipping? Protect the device against shocks and electrostatic discharge. Wrap it in several layers of bubble wrap, place it in a rigid box and fill the empty space so the media cannot move during transport.
• Can data be recovered after a virus or ransomware attack? Often yes, but it depends on the type of incident and what was done after the attack. Most importantly: disconnect the device from the network, do not install software, do not restore from random backups and secure the evidence first.
• Can I continue using a damaged drive after recovery? We do not recommend it. If the drive shows instability symptoms such as clicking, disappearing from the system or major speed drops, continued use may deepen the damage and lead to another loss of data.
• What exactly will I receive after data recovery is finished? You will receive the recovered data on the chosen destination device (for example a new drive or SSD), together with a list or report describing the result of the recovery process.
• ✅ Customer summary

  It is best to disconnect the drive and not boot the system until diagnostics are performed.
• How much does CCTV footage recovery cost?

  The cost of footage recovery depends on the recorder type, the condition of the device (HDD / SSD), the capacity and whether overwriting has occurred. Simpler cases may start from a few hundred PLN, while complex reconstructions (for example overwrites, damaged file systems or unusual recording formats) cost more. Each case is priced individually after diagnosis. We first create a safe image of the device whenever possible and verify what range of recordings can still be recovered. After diagnosis, you receive a concrete quotation and information about the time range of recordings that may still be recoverable.

RAID/NAS and servers

• Data recovery from RAID 0/1/5/6/10 — how long does it take and what do you need? The time depends on the number of drives, the RAID level, the type of damage and the amount of data. We usually need all drives from the array, or at least a complete, stable set of clones.
• Recovery from a Synology / QNAP NAS — do you need to provide all drives?

  In most cases, yes — the configuration and data are distributed across the drives. Providing the full set minimises the risk of an incorrect reconstruction and speeds up the work. If you are unsure, describe the NAS model and bay layout and we will tell you what to prepare.
• Company file-server failure — how to minimise downtime?

  The key is to disconnect the server / media and stop any “live repair” attempts. We can work in parallel: we create images of the media while you rebuild the environment on replacement hardware. In critical cases, we can also help plan the safest recovery path. In urgent cases, an express workflow can help recover critical shares and data faster.
• Do you need RAID configuration parameters (stripe size, disk order)?

  It helps a lot, but it is not always necessary. The parameters can often be reconstructed from metadata, analysis of the data layout and reconstruction tests. If you have controller screenshots, NAS configuration data or labels showing the drive order — attach them to the case.
• Do you recover data from RAID controllers and SAS drives? Yes — we work with server arrays based on SAS and SATA drives and with business RAID controllers. The usual procedure includes imaging every disk and reconstructing the array layout from metadata and file-system analysis.
• Failed RAID rebuild or drive replacement — is anything still possible? Often yes, but time is critical because a rebuild can overwrite data. Stop further operations on the array and do not start additional rebuilds, consistency checks or resets.
• Do you recover data from EXT4, Btrfs, XFS or ZFS volumes used in NAS and Linux servers? Yes — recovery depends on the condition of the media and the consistency of the file-system metadata. With Btrfs and ZFS, snapshots and metadata analysis can be crucial.
• Can you work on clones or images instead of the original server drives? Yes — and very often this is the best practice. If you already have images, we can analyse them; otherwise we can create them in the lab under controlled conditions.
• The NAS enclosure no longer works, but the drives seem fine — can you still recover the data? Usually yes. The enclosure itself is often not needed if the drives are complete and readable. The key is reconstructing the array configuration correctly.

SSD/NVMe and flash memory

• Why does SSD/NVMe recovery differ from HDD recovery and why is it often harder? SSD/NVMe devices rely on controllers, translation layers (FTL), compression and mechanisms such as TRIM and garbage collection, which can quickly change or erase data after deletion.
• After an SSD/NVMe failure — what should you do so you do not make it worse? Stop using the computer, power it down and do not boot the operating system again “just to test”. Do not install recovery software and do not run repairs.
• Do you recover data from NVMe (M.2) drives taken from laptops and workstations — what should you send? Ideally the NVMe drive itself, or the whole machine if disassembly is difficult or the storage is soldered to the board.
• SSD/NVMe encryption (BitLocker / SED / TCG Opal) — can data still be recovered? In many cases yes, but you need the correct authentication data: a password, recovery key or keys managed by the company account / IT department.
• Is partial recovery from an SSD possible and how do you report the result? Yes — in damaged SSD cases, recovery can be partial because some blocks may be unreadable or overwritten. We report the outcome honestly and indicate what was recovered intact.

Ransomware and encryption

• What should a company do right after a ransomware attack? Disconnect infected workstations and servers from the network, create forensic copies or images, secure logs and the ransom note, and do not run random “repair” tools.
• Can ransomware-encrypted data be recovered without paying the ransom? It depends on the ransomware family, the encryption method and whether copies or previous versions of the files exist. We never promise 100%, but in many cases there are safer options than paying criminals.
• BitLocker: the computer asks for a key after a failure — can you help and what do you need? Yes, if you have the recovery key, password or keys managed by corporate IT (AD, Azure AD, Intune and similar systems).
• What does the “chain of custody” procedure and security look like for B2B clients?

  We can work in a confidential mode with restricted access, media logging, work on copies and controlled handover of data. On request, we sign an NDA and document the steps taken, including who worked on the case and when, which helps with IT audits or internal investigations. This also minimises the risk of modifying the original evidence.

Databases, virtual machines and operating systems

• Database recovery (SQL Server / PostgreSQL / MySQL) — do you recover whole databases? First we recover the database files and logs (for example MDF/LDF, WAL and similar files) in the best possible condition. Then logical repair may be required.
• Recovery of virtual machines (VMware / Hyper-V) — VMDK / VHDX files. Is it possible? Yes — we often recover both the virtual disk files and the datastore structure or host configuration. The key is to secure the media first.
• Recovery of company mail archives: Outlook PST/OST — is it possible? Often yes, even when the PST/OST file is damaged or cannot be opened. What matters most is to stop further “repairs” that could overwrite the data.
• Windows Server / Linux after a failed update or file-system error — can you help? Yes — we recover data after failed updates, damaged partitions and file-system errors. The rule is the same: stop work and secure the storage first.

Business data and accounting

• Recovery of accounting data (Symfonia / Comarch Optima / enova365) — what should you send? Ideally the device with the database (server or workstation), copies of the program folders and, if possible, information about the database engine.
• Do you recover financial archives and JPK files, and how do you preserve integrity? Yes — recovery covers both documents and databases or archives. Wherever possible, we verify integrity, for example by checksums or test opening the files.
• Confidentiality for companies: NDA and GDPR/RODO — how does it work in practice? We can sign an NDA and work with restricted access to data. The data is handled according to the principle of minimisation and controlled access.

Photo, video and creative projects

• Recovering RAW photos from memory cards (SD / CF / CFexpress) — what should you do after deletion or formatting? Stop using the card immediately — every new write may overwrite deleted files. Do not run “repairs” in the camera or computer.
• Lightroom / Capture One — do you recover catalogues and links to photos? Yes — catalogues such as .lrcat and sidecar databases can often be recovered as long as they were not overwritten. The key is recovering the original media and catalogue files together.
• Premiere / DaVinci Resolve — do you recover projects, media and cache files? We recover both project files and source media, as well as cache or proxy folders if they were stored on the same device. In practice, the source media remains the top priority.

CAD/BIM

• Recovery of CAD/BIM projects (DWG / RVT / STEP) — do you restore the project structure? Yes — the goal is to recover both the main files and their dependencies such as xrefs, libraries, families and textures.
• How should you protect CAD/BIM projects after a failure so that dependencies are not lost? Do not move individual files at random and do not save anything on the damaged device. First secure a bit-by-bit image of the whole media.

Pricing, turnaround time and express mode

• Invoice and B2B settlement — how does it work? We handle corporate orders with formal intake confirmation and a clear scope of work. Settlement depends on the type of damage and the service mode selected.
• Express / priority mode — when does it make sense for a company? When downtime creates a real cost or the data is mission-critical, for example a file server, production environment or accounting system. Priority mode speeds up the start of work, but we still begin with diagnosis.