Our approach
We turn a scattered digital archive — discontinued systems, old servers, unsupported databases, PCs, e-mail, spreadsheets and documents — into a single, complete and searchable database, and from it we produce the assessments the demand requires.
Principles
All collection is read-only; every transformation happens on copies, traceable to the source file and its hash.
SHA-256 hash computed at source, checked at destination and recorded in a manifest.
Duplicates, corrupted files and absurd dates are preserved and listed — never silently “cleaned”.
Every load is validated against the source manifest. Zero discrepancies is the acceptance criterion.
No heavy extraction in production outside agreed windows; a support machine on the local network does the work.
No password in repositories, reports or e-mail. Every access granted is reverted at the end.
Each client has its own environment, storage, database and keys; nothing is shared.
In corporate groups, all companies are in the database, but each query is run for the specific company's CNPJ.
Infrastructure as code and versioned scripts: the environment and the database can be rebuilt from retention.
Phases
Collection, recovery, loading and validation run in parallel per source. Each stage ends with a deliverable and a decision of yours.
Know, before promising anything, where the data is, in what condition, and which demand must be answered.
Questionnaire and technical conversation with the partner and the client; read-only, low-impact network scan; classification of every device and every data source, including forgotten ones.
OutputSource inventory, risk map and numbered open items.
Collection priorities driven by the demand, a strategy per source, target architecture and a schedule within the client's windows. A sample of key tables confirms that the data covers what must be proven.
OutputCollection plan, target architecture and recovery budget.
Make a faithful copy of each source and make it readable outside the original system.
Collection record signed by the client; native dumps and exports with minimal load; SHA-256 of every package and every file at source; check at destination and a record of who, when, from where and to where.
OutputPackages, hash manifests, logs and collection record.
In-house playbooks for Oracle, Progress/OpenEdge, SQL Server, Firebird, Access/DBF, PST/OST/DBX mailboxes, Office and PDF documents, workstations and NF-e, CT-e and NFS-e XML — without depending on the vendor.
OutputData in open formats, data dictionary and per-source report.
Managed, encrypted, private database, with one schema per source system and the data intact, an integration schema by CNPJ and period, and full-text search over XML, PDF and e-mail.
OutputConsolidated database, data dictionary and query manual.
Physical integrity, completeness per table and per file, key quality and consistency across sources: payroll × accounting, invoices × books, bank × ledger. Independent sampling against original documents.
OutputValidation reports with zero or explained discrepancies.
Answer exactly what the pleading, the subpoena or the tax audit asks for.
Reading of the pleading and extraction of its parameters; a written calculation guideline approved by the partner before calculating; scenarios when the legal theory is contested; reconciliation with ledgers, tax slips and bank statements.
OutputCalculation workpapers, technical report and versioned SQL queries.
PDF/A package with report, workpapers, validation, manifests and chain of custody, digitally signed with an ICP-Brasil certificate and timestamped by 5 international authorities (RFC 3161).
OutputPackage verifiable by third parties in the official validator.
Preserve the evidence and keep the memory alive for the next questions.
Originals, packages and deliveries in immutable storage in compliance mode: not even the account administrator can alter or delete them. The denied-deletion test is recorded as evidence.
OutputRetention report with a retention date per batch.
Recurring queries without reopening the project: former clients, period reports, specific documents — requested by the client and carried out by the CALMO team, with the agreed indicators and every query logged.
OutputHistory searchable by CNPJ, period or any information.
Deliverables
Every figure in the workpapers points to the source table, record or document.
Spreadsheet with analytical, reconciliation, open-items and sources tabs.
PDF/A with ICP-Brasil signature and timestamps from 5 authorities.
The queries that reproduce every figure, at any time.
Collection record, hash manifests and validation reports.
Responsibilities
Findings report within 5 business days after access to the infrastructure. Recovery and assessment timelines are set out in each proposal.
How can we help?
The diagnostic is the first step — and tells you whether it is worth going further.