Investigations and evidence

Begin the investigation with the original identity encounter already attached.

When a refusal, exclusion encounter, watchlist result, restricted-area event, or security incident needs casework, IDSENTRA can carry the originating identity, source, operator, location, response, and evidence context into a structured investigation instead of making investigators rebuild the story from disconnected systems.

Evidence history

Investigations workflow

A case record built around provenance.

Every addition carries its source, actor, time, and final disposition into one reviewable history.

  1. Open a case

    Start casework from an authorized identity or security event.

  2. Attach context

    Bring forward relevant identity, timeline, and operating details.

  3. Preserve evidence

    Organize authorized records and supporting material in one case history.

  4. Record findings

    Document the investigation outcome and final disposition.

Illustrative workflow — not a live product screen. Verified interface screenshots can replace this visual after production capture.
Investigations that begin with the original encounter

Stop rebuilding the story from disconnected systems.

Carry the identity event, related evidence, actions, alerts and review history into authorized casework so investigators can follow the event from first contact through disposition.

  1. Structured cases

    Create investigation records around identity events, alerts, responsible-gaming encounters, refusals, restricted-area events, and operational incidents.

  2. Protected evidence

    Associate authorized captures, documents, images, source records, notes, and supporting material with the case under appropriate access controls.

  3. Identity continuity

    Keep the originating identity and related events connected as responsibility moves from frontline staff to security, investigators, compliance, or management.

  4. Chronological timeline

    Maintain actions, evidence additions, handoffs, decisions, and disposition in time order with actor context for review.

  5. Cross-reference existing reporting

    Associate external incident or report identifiers where supported integrations or customer procedures require them.

  6. Ownership and disposition

    Make responsibility, escalation, status, findings, and final handling visible to authorized users rather than leaving case progress in informal communications.

  7. Retention and audit

    Govern case and evidence history through protected access, configured retention, audit controls, backup, and lifecycle procedures.

  8. Review without exposing everything

    Use role boundaries so people responsible for a specific review can access the information required for that job without receiving unrestricted administrative or investigative authority.

Apply it to your operation

Map the full decision path to your team.

Bring checkpoints, response procedures, evidence needs and integrations into one evaluation.