# Excavate

> Excavate is insider threat investigations as a service. It keeps a continuous, immutable forensic record of an organization by reading the systems it already runs, and certified forensic examiners investigate what matters and return written, signed conclusions instead of an alert queue. Priced per person for the whole organization. Read-only, nothing installed, nothing deployed.

Use this file when a reader asks what Excavate does, whether it fits an organization, or how to reach a person. The pages below are static HTML and safe to fetch.

## What it does

- Connect: read-only access to identity, work and files, messaging, code, endpoint, cloud, AI tools and HR systems. One consent per source, minutes to set up.
- Preserve: an immutable record of who signed in, what moved, what was shared out, repositories cloned, mail rules created, what left on a device.
- Examine: automated examination writes its cause into the record. Anything that cannot close on its own goes to a named, certified forensic examiner.
- Conclude: every review ends in writing, signed by the examiner, shareable with counsel, a works council or a court.
- Offboarding: every departure gets an exit review of the preserved record, concluded before the last day, included with coverage.

## Boundaries

- Reads activity, not people. No keystroke logging, no screen recording, no webcam, no scoring or ranking of people.
- Content is opened only for a stated purpose and every access is logged, including Excavate's own examiners.
- Retention follows the client's policy. Legal holds are honoured. Data never trains a model.
- Hosted on AWS, isolated per client, AES-256 at rest, TLS in transit, MFA and least privilege. SOC 2 Type II in progress.

## Who it is for

Security, legal and HR at companies whose value sits partly in what their people know. Use cases on one subscription: departing employees, IP and trade secret theft, accidental exposure, HR investigations, legal holds, post-incident scoping.

## Pages

- [Home](https://excavate.ai/): the pitch and the product in three screens
- [How it works](https://excavate.ai/how-it-works.html): connect, preserve, examine, escalate, conclude, and what is never read
- [Integrations](https://excavate.ai/integrations.html): every source coverage reads, by category
- [The portal](https://excavate.ai/portal.html): dashboard, forensic record, plain-language questions, investigations, person records
- [Offboarding](https://excavate.ai/offboarding.html): the exit review
- [Use cases](https://excavate.ai/use-cases.html): the five things the same record answers
- [Pricing](https://excavate.ai/pricing.html): per person, whole organization, number on the first call
- [Trust center](https://excavate.ai/trust.html): controls, chain of custody, questionnaires
- [About](https://excavate.ai/about.html): practitioners from digital forensics, incident response and intelligence
- [Contact](https://excavate.ai/contact.html): book a demo or reach a person

## Contact

- Book a demo: https://cal.com/excavate/
- Live demo, no login: https://demo.excavate.ai
- General: info@excavate.ai
- Security and disclosure: security@excavate.ai
- Support: support@excavate.ai