Essential Trade Secrets Resources for Foreign Companies in China: Forensic Expert and Investigator Directory
Quick Navigation
- The Role of Forensic Experts in Trade Secret Cases
- Types of Forensic Experts and Investigators
- Directory of Forensic Service Providers
- How to Select and Engage the Right Expert
- The Forensic Investigation Process
- Digital Forensics: Special Considerations for China
- Engagement Checklist and Best Practices
In trade secret litigation, evidence is everything. But unlike physical assets, digital trade secrets — source code, customer databases, chemical formulas, manufacturing parameters — can be copied without leaving obvious traces. Detecting, preserving, and presenting evidence of digital misappropriation requires specialized technical expertise that goes well beyond what a typical law firm can provide. Forensic experts and investigators play a pivotal role in trade secret cases, from the initial detection of a breach to the presentation of expert testimony at trial. This resource provides foreign companies with a comprehensive directory of forensic service providers operating in China, along with practical guidance on how to select, engage, and work with these specialists.
1. The Role of Forensic Experts in Trade Secret Cases
Forensic experts serve several critical functions in trade secret disputes:
- Detection and identification: Determining whether a breach has occurred and identifying the specific information that was accessed, copied, or transmitted.
- Evidence preservation: Creating forensically sound copies of digital evidence (镜像文件) using write-blockers and hashing to ensure evidentiary integrity.
- Chain of custody documentation: Maintaining a complete and verifiable record of how evidence was collected, stored, and handled.
- Technical analysis: Comparing the allegedly misappropriated trade secret with the defendant’s product, process, or documentation to establish substantial similarity.
- Expert testimony: Presenting technical findings in court in a manner that judges and lay fact-finders can understand, including responding to cross-examination.
- Damage quantification: Assisting in calculating the economic value of the misappropriated trade secret and quantifying the harm caused by its disclosure or use.
The importance of using qualified, court-experienced forensic experts cannot be overstated. A poorly conducted forensic investigation can lead to evidence being excluded, chain-of-custody challenges, and ultimately, a failed case. In the Chinese legal context, where the burden-shifting provision of AUCL Article 32 makes the quality of initial evidence particularly critical, engaging the right forensic expert is a strategic necessity.
2. Types of Forensic Experts and Investigators
Digital Forensics Specialists (数字取证专家)
Digital forensics experts specialize in recovering and analysing data from computers, servers, mobile devices, and cloud platforms. In China trade secret cases, they are frequently called upon to:
- Image hard drives and SSDs using forensically sound methods
- Recover deleted files, emails, and chat histories
- Analyse system logs, access records, and file metadata
- Trace data exfiltration through USB devices, email, cloud storage, or remote access
- Identify anomalies in user behaviour that indicate misappropriation
Technical Subject Matter Experts (技术专家)
Technical SMEs are domain specialists who can assess whether a competitor’s product or process incorporates the complaining company’s trade secrets. Common categories include:
- Chemical engineers for formula or process trade secrets
- Software engineers for source code comparison and algorithm analysis
- Mechanical engineers for manufacturing process and design secret analysis
- Biotechnology specialists for cell line, genetic sequence, or assay trade secrets
- Materials scientists for advanced material composition and processing secrets
Private Investigators (私家侦探 / 调查公司)
Licensed private investigators in China can assist with:
- Background checks on suspected individuals (subject to privacy law limitations)
- Surveillance and documentation of suspicious activities
- Asset tracing to identify where misappropriated trade secrets are being exploited
- Witness location and interview
- Market investigation to identify unauthorized use of proprietary information
Important caveat: Private investigation in China is regulated by the Ministry of Public Security, and certain investigative methods (wiretapping, hacking, unauthorized surveillance) are illegal. Foreign companies must ensure that any investigative firm they engage operates within the bounds of Chinese law. Evidence obtained illegally will be excluded by Chinese courts and may subject the company to criminal liability.
Judicial Appraisal Institutions (司法鉴定机构)
China maintains a system of court-appointed judicial appraisal institutions (司法鉴定机构) that are officially accredited to provide expert opinions for litigation. For trade secret cases, the most relevant categories are:
- Electronic data forensics (电子数据鉴定): Accredited by the Ministry of Justice (司法部) for digital evidence analysis
- Intellectual property appraisal (知识产权鉴定): Specialized in technical comparison and IP-related analysis
- Accounting and financial forensics (会计司法鉴定): For damage quantification and valuation
Opinions issued by judicial appraisal institutions carry significant weight in Chinese courts. Foreign companies should strongly consider engaging a qualified judicial appraisal institution for the core technical analysis in their case, even if they also retain an independent forensic expert for strategic guidance.
| Expert Type | Primary Function | When to Engage | Typical Cost (RMB/day) |
|---|---|---|---|
| Digital Forensics Specialist | Evidence collection, preservation, and analysis | Immediately upon suspicion of breach | 3,000–8,000 |
| Technical SME | Technical comparison and expert opinion | During case preparation and trial | 5,000–15,000 |
| Licensed Private Investigator | Background investigation and surveillance | During pre-litigation investigation | 2,000–5,000 |
| Judicial Appraisal Institution | Court-admissible expert opinion | After case filing, before trial | 50,000–300,000 (per engagement) |
3. Directory of Forensic Service Providers
Digital Forensics and E-Discovery Firms
Beijing Digital Forensics Center (北京电子数据鉴定中心)
Type: Judicial Appraisal Institution (MOJ Accredited)
Location: Beijing
Specialties: Computer forensics, mobile device forensics, network forensics, data recovery
Engagement: Court-appointed or party-retained. Accepts commissions via Chinese law firms.
Languages: Chinese (English case coordination available through partner firms)
Shanghai Judicial Appraisal Institute — Electronic Data Division (上海司法鉴定科学研究院)
Type: Judicial Appraisal Institution (MOJ Accredited)
Location: Shanghai
Specialties: Electronic data forensics, IP infringement appraisal, technical comparison analysis
Note: Widely recognized by Chinese courts as one of the most authoritative appraisal institutions. Experience in trade secret cases involving manufacturing, pharmaceutical, and technology clients.
Guangzhou IP Forensic Center (广州知识产权司法鉴定所)
Type: Judicial Appraisal Institution
Location: Guangzhou, with service coverage across Guangdong Province
Specialties: IP infringement appraisal, trade secret technical comparison, software source code comparison
Note: Particularly experienced in manufacturing and electronics trade secret cases common in the Pearl River Delta.
International Forensic Firms with China Presence
Stroz Friedberg (part of Aon)
Type: International digital forensics and investigations firm
China Office: Shanghai (also serves clients via Hong Kong office)
Specialties: Digital forensics, e-discovery, data breach response, cyber investigations
Languages: English, Mandarin Chinese, Cantonese
Note: Strong reputation in cross-border trade secret cases involving multinational corporations. Experience working with Chinese courts and judicial appraisal institutions.
FTI Consulting
Type: International consulting firm with forensic and litigation support practice
China Office: Beijing, Shanghai, Hong Kong
Specialties: Digital forensics, e-discovery, data analytics, damage quantification, electronic evidence strategy
Languages: English, Mandarin Chinese
Kroll (part of Duff & Phelps)
Type: International risk consulting and forensic investigations firm
China Office: Beijing, Shanghai, Hong Kong
Specialties: Trade secret investigations, digital forensics, background checks, IP protection strategy, asset tracing
Languages: English, Mandarin Chinese, Cantonese
Note: Kroll has a long-established China practice and is well-known among international law firms for trade secret investigation support.
Chinese Forensic Technology Companies
MeiYa PwC (美亚普华 / Meiya Pico)
Type: Chinese digital forensics technology company
Location: National presence, headquartered in Beijing
Specialties: Digital evidence collection tools, forensic software, mobile forensics, cloud forensics
Note: Widely used by Chinese law enforcement and courts for digital evidence analysis. Their forensic tools are considered the de facto standard in Chinese legal proceedings. Foreign companies may need to ensure that evidence collected by international forensic tools can be converted to a format compatible with Meiya Pico’s analysis platforms.
Xiamen Meiya (厦门美亚柏科 / Meiya Pico Information)
Type: Listed forensic technology company (Shenzhen: 300188)
Location: Xiamen, with offices nationwide
Specialties: Computer forensics, mobile forensics, data recovery, network forensics, cloud forensics. Industry leader in China’s digital forensics market.
Note: Provides both forensic tools and forensic investigation services. Often engaged by Chinese courts as the technical appraisal institution.
4. How to Select and Engage the Right Expert
Key Selection Criteria
- Court experience in China: Has the expert or their organization previously provided testimony or appraisals in Chinese courts? Do they have experience with the specific court where your case will be heard?
- Relevant technical expertise: Does the expert have domain-specific knowledge relevant to your trade secret (e.g., chemical engineering, software development, biotechnology)?
- Judicial appraisal accreditation: Is the expert’s institution listed on the Ministry of Justice’s registry of accredited judicial appraisal institutions? This significantly enhances admissibility.
- Bilingual capability: Can the expert work with English-language evidence and communicate with your international legal team while also providing Chinese-language reports admissible in court?
- Independence and neutrality: Does the expert have any conflicts of interest? Have they ever been engaged by the opposing party or their affiliates?
- Track record in trade secret cases: How many trade secret cases has the expert handled? What was the outcome?
💡 Strategic Recommendation: Dual-Expert Approach
For high-stakes trade secret cases, consider engaging two experts:
- A strategic forensic advisor (typically an international firm like Stroz Friedberg or Kroll) to guide evidence collection strategy, maintain international best practices, and coordinate with your global legal team.
- A court-appointed judicial appraisal institution (like the Shanghai Judicial Appraisal Institute) to produce the formal expert opinion that will be submitted as evidence in Chinese court.
This dual approach ensures that your evidence strategy meets both international standards and Chinese court requirements. The strategic advisor can help “translate” between the two systems while the judicial appraisal institution provides the legally recognized opinion.
5. The Forensic Investigation Process
Phase 1: Triage and Initial Response (0–72 hours)
Time is critical. Within the first 72 hours of discovering a potential breach:
- Preserve volatile data (memory, running processes, network connections)
- Isolate affected systems without destroying evidence
- Document the initial detection and all subsequent actions taken
- Engage forensic counsel and retain a qualified expert
- Begin chain-of-custody documentation
Phase 2: Evidence Collection (1–4 weeks)
Systematic collection of all relevant evidence:
- Forensic imaging of all relevant devices (computers, laptops, mobile phones, servers)
- Collection of cloud-based evidence from platforms like WeChat Work (企业微信), DingTalk (钉钉), Feishu (飞书), and enterprise email systems
- Preservation of network logs, VPN logs, and access control system records
- Notarization of relevant digital evidence
- Documentation of physical security measures and access logs
Phase 3: Analysis and Comparison (2–8 weeks)
Technical analysis to build the case:
- Keyword search and data recovery across collected evidence
- Timeline analysis to establish when and how the alleged misappropriation occurred
- Technical comparison between the trade secret and the defendant’s materials
- User behaviour analysis to identify suspicious patterns
- Forensic artifact analysis (USB insertion logs, file access timestamps, data transfer records)
Phase 4: Reporting and Testimony (2–4 weeks before trial)
Preparing the evidence for court:
- Drafting expert reports in Chinese meeting the requirements for judicial appraisal evidence
- Preparing visual aids and demonstrative exhibits for trial
- Rehearsing expert testimony, including cross-examination preparation
- Coordinating with legal counsel on evidence strategy
- Addressing any opposing expert’s counter-analysis
6. Digital Forensics: Special Considerations for China
WeChat and Local Platform Forensics
WeChat (微信) and its enterprise counterpart WeChat Work (企业微信) are ubiquitous in Chinese business communications. In trade secret cases, WeChat chat records often contain critical evidence of misappropriation — employees discussing the transfer of confidential information, sharing files, or coordinating with competitors. However, WeChat forensics presents unique challenges:
- Encryption: WeChat uses end-to-end encryption for certain communications. Forensic experts may need to rely on device-level acquisition rather than network interception.
- Deletion: Users can delete individual messages within a chat, and the sender’s copy is also removed. Third-party tools claiming to recover deleted WeChat messages should be carefully vetted for admissibility.
- Notarization: WeChat evidence should be preserved through notarized evidence preservation procedures at a Chinese notary public office. Simply taking screenshots is insufficient for court purposes.
- Identity verification: WeChat accounts may not be linked to real names. Establishing the identity of the person behind a WeChat account can require additional investigative steps.
China-Specific Cloud Platforms
Chinese companies frequently use domestic cloud platforms such as Alibaba Cloud (阿里云), Tencent Cloud (腾讯云), and Huawei Cloud (华为云). Evidence preservation on these platforms requires coordination with the cloud service provider, which may need to be compelled through court orders. Foreign forensic tools may have limited compatibility with these platforms.
Data Export and Cross-Border Considerations
Foreign companies face a critical strategic decision: whether to carry out forensic analysis in China or export data for analysis abroad. Under China’s Cybersecurity Law, Data Security Law, and Personal Information Protection Law (PIPL), cross-border transfer of data — including forensic evidence — is subject to significant restrictions:
- Data containing personal information may require a security assessment or certification before export
- Trade secret information itself may be subject to China’s technology export controls if it falls within regulated categories
- Criminal cases involving “state secrets” (a broadly defined category) impose additional restrictions
Recommendation: Conduct primary forensic analysis within China whenever possible, using local experts and local tools. The international forensic advisor can provide strategic guidance remotely and review conclusions without needing direct access to raw data.
7. Engagement Checklist and Best Practices
✅ Forensic Expert Engagement Checklist
- Conflict check: Verify the expert has never worked for the opposing party or their affiliates
- Confidentiality agreement: Execute a China-specific NDA before sharing any confidential information
- Scope of work: Clearly define the forensic scope, deliverables, and timeline in a written engagement letter
- Fee arrangement: Agree on fee structure (hourly vs. fixed fee), payment terms, and expense reimbursement policies
- Chain of custody protocol: Establish a documented procedure for evidence handling before work begins
- Legal privilege: Structure the engagement to maximize the protection of attorney-client privilege and work product doctrine where applicable
- Language and reporting: Specify the language(s) for reports and whether bilingual deliverables are required
- Court readiness: Confirm the expert’s availability and willingness to provide testimony, including for potential appeals
- Data handling and destruction: Agree on protocols for data retention, destruction, and return upon engagement completion
- Cross-border coordination: Establish communication protocols between the China-based expert and your international legal team
Forensic experts and investigators are indispensable partners in trade secret protection and enforcement in China. By understanding the types of experts available, how to select them, and how to manage the investigative process, foreign companies can build the strongest possible evidentiary foundation for their trade secret cases. The directory and guidance provided in this resource should serve as a starting point for identifying and engaging qualified forensic professionals — but as with all aspects of trade secret litigation, the involvement of experienced Chinese legal counsel throughout the process is essential.
Disclaimer: This article provides general informational resources and does not constitute legal advice or endorsement of any listed service provider. Contact information, accreditation status, and service availability may change. Foreign companies should conduct independent due diligence before engaging any forensic expert or investigator and should consult qualified Chinese legal counsel throughout the engagement process.
