# Mobile Device Forensic Extraction The forensic recovery of data from mobile phones (and adjacent devices: tablets, drones, IoT) for use in criminal investigations. The product class breaks into two tiers — **on-device extraction** (the device is physically connected to a forensic workstation operating in the customer's facility) and **lab-based extraction** (the device is shipped to the vendor's lab, where the vendor unlocks devices the customer cannot unlock locally and returns the extracted data). [[Cellebrite]] is the dominant vendor in both tiers at LRPD. ## How it appears in the corpus The [[CLR-2026-778]] production documents both tiers at LRPD via parallel 2024 procurements: | Tier | Document | Procurement vehicle | Annual cost | |---|---|---|---| | On-device | [[Cellebrite Inseyets-UFED Purchase (Carahsoft Quote 49570615)]] | OMNIA EDU R191902 (cooperative) | $20,709.42 | | Lab-based | [[Cellebrite Advanced Services Agreement]] | Arkansas exemption #44 (sole source) | $21,136.06 (3-year term: $63,408 over 36 months) | The two together total approximately **$41,845** for LRPD's 2024-2025 Cellebrite spend across both tiers. ## LRPD operator base The Cellebrite-renewal memos in the corpus identify LRPD's certified Cellebrite operators as of August 2024: > "Currently Detectives William High and Detective Loni Lichti are certified operators. As stated, the Department has been using the Cellebrite UFED Touch2 Mobile Device, however after six (6) years, Cellebrite will no longer support updates to this device and have moved to an Online Computer based extractions format and will no longer have a stand-alone device." (Tier-1 corpus, [[CLR-2026-778]], Dept. Approval Memo_2024.pdf, 2024-08-06 memo by Sgt. Stephanie Whitaker) The transition from UFED Touch2 (a standalone hardware device) to **Inseyets Online Pro** (cloud-based extraction) is the technology shift the 2024 procurement documents. ## Use cases at LRPD (per the corpus) The August 2024 Whitaker memo names the LRPD units that use Cellebrite extractions: > "Cellebrite has been a valuable asset to the entire Department as it has been used to assist Homicide, Robbery, Financial Crimes, Property Crimes, Narcotics, Vice, Juvenile Intelligence and Violent Crimes Units. This tool is the only in-house tool that the Department currently has to extract data and analyze data from cellular devices." (Tier-1 corpus, same) The use-case breadth — from Homicide and Violent Crimes through Property Crimes and Financial Crimes — indicates Cellebrite extractions are a routine investigative tool, not a special-circumstance capability. ## The cloud-unlock model The Carahsoft Quote 49570615 ([[Cellebrite Inseyets-UFED Purchase (Carahsoft Quote 49570615)]]) provisions **40 cloud unlocks per year** as a separate line item ($10,890 of the $20,709 total — about half the cost). The cloud unlocks are for devices LRPD's local Inseyets tools cannot unlock; the device is sent to Cellebrite's cloud service where Cellebrite's proprietary tools attempt unlocking. Beyond the 40-unlock cap, LRPD presumably escalates to the **Advanced Services** lab agreement, where the physical device travels to a Cellebrite lab for unlocking. This is the tier covered by [[Cellebrite Advanced Services Agreement]]. ## Contractual notable provisions The [[Cellebrite Advanced Services Agreement]] contains several provisions worth flagging in this concept context: - **§5.5** — authorizes Cellebrite to "intercept communications" and "circumvent measures designed to prevent unauthorised access." - **§5.7** — obliges the customer to "mitigate the risk" that its own employees will report Cellebrite's services to law enforcement. - **§6.4** — treats Cellebrite's unlocking "Sources and Methods" as non-disclosable trade secrets. - **§10.3** — permits extracted Personal Data to be "transferred or stored outside the EEA or the country where Customer is located." These provisions are commercially routine within the digital-forensics industry but represent meaningful extensions beyond what a standard software license describes. Specifically: §5.5 contemplates active interception of communications; §5.7 imposes an unusual customer obligation regarding the customer's own employees; §6.4 limits the customer's ability to audit Cellebrite's methods; and §10.3 permits cross-border data transfer. ## Foreign-headquartered context [[Cellebrite]] is incorporated in **Israel** (Petah Tikva); the Endpoint SaaS Terms §14.4 of the corpus contract subjects the service to **Israeli export controls** alongside US (EAR) and EU controls. The corpus produces no evidence that data extracted from LRPD's devices has ever traveled internationally, but the contract permits it. This is the analytic distinction between Cellebrite and [[NICE Systems]] (also Israeli, also at LRPD): NICE Investigate is explicitly US-resident; Cellebrite Advanced Services contractually permits cross-border transfer. ## Stakeholders - **LRPD detectives certified as Cellebrite operators** (William High, Loni Lichti, as of 2024). - **LRPD finance** ([[Latreasa Mullins-Sanders]]) — routed the LRPD-side procurement. - **City procurement** ([[Lisa King]]) — approved both the Cellebrite Inseyets-UFED purchase and the Advanced Services Agreement under their respective procurement tracks. - **Cellebrite Inc.** (US sales subsidiary) and **Cellebrite DI Ltd.** (Israeli parent) — vendor. - **Carahsoft Technology Corp.** — public-sector reseller on the OMNIA EDU contract. ## Timeline - **2018:** LRPD acquired Cellebrite UFED Touch2 (the standalone device); the original purchase is referenced in the 2024 memo but not in the corpus. - **2018-2022:** Annual UFED Touch2 renewals at ~$3,700-$6,290 per year. - **2022-2023:** Brief Inseyets transition period; $4,880. - **2023-2024:** Inseyets continued; $6,450. - **2024-08-06:** Sgt. Whitaker memo proposes the Inseyets Online Pro + 40-unlock upgrade. - **2024-10-07:** Advanced Services General Terms and Conditions DocuSign-executed (Cellebrite DI Ltd.). - **2024-10-14:** Mullins-Sanders signs the Line 44 sole-source exemption for the Advanced Services. - **2024-10-17:** Lisa King approves. - **2024-10-28:** Carahsoft Quote 49570615 reroutes the on-device-software procurement from direct Cellebrite Inc. to the OMNIA EDU R191902 cooperative contract. - **2024-09-18 → 2025-09-17:** Inseyets Online Pro subscription period. - **2024-10-07 → 2027-10-06:** Advanced Services Agreement 36-month term. ## Notes - See [[Cellebrite]] for the vendor org page (deep-dive corporate identity context). - See [[Cellebrite Inseyets-UFED Purchase (Carahsoft Quote 49570615)]] for the on-device subscription source page. - See [[Cellebrite Advanced Services Agreement]] for the lab-extraction agreement source page. - See [[Foreign-Headquartered Surveillance Vendors]] for the cross-border-data-transfer analytic context. - The corpus does not document a usage report against the 40-unlock cap. Whether the 40 unlocks were consumed in the 2024-2025 cycle is not in the corpus — a successor FOIA could ask LRPD's Cellebrite logs.