Digital Forensics & Cybersecurity Incident Response, DFIR Plan

What we use your personal data for	Our reasons
Creating and managing your account with us	To perform our contract with you or to take steps at your request before entering into a contract
Providing products and/or services to you	To perform our contract with you or to take steps at your request before entering into a contract
Conducting checks to identify you and verify your identity or to help prevent and detect fraud against you or us	To comply with our legal and regulatory obligations
Enforcing legal rights or defend or undertake legal proceedings	Depending on the circumstances: — to comply with our legal and regulatory obligations — in other cases, for our legitimate interests, i.e. to protect our business, interests and rights
Customising our website and its content to your particular preferences based on a record of your selected preferences or on your use of our website	Depending on the circumstances: — your consent as gathered e.g., by the separate cookies tool on our website—see ‘Cookies and other tracking technologies’ below — where we are not required to obtain your consent and do not do so, for our legitimate interests, i.e., to be as efficient as we can so we can deliver the best service to you at the best price If you have provided such a consent, you may withdraw it at any time by changing the setting on the cookies tool (this will not affect the lawfulness of our use of your personal data in reliance on that consent before it was withdrawn)
Retaining and evaluating information on your recent visits to our website and how you move around different sections of our website for analytics purposes to understand how people use our website so that we can make it more intuitive or to check our website is working as intended	Depending on the circumstances: — your consent as gathered by the separate cookies tool on our website]—see ‘Cookies and other tracking technologies’ below — where we are not required to obtain your consent and do not do so, for our legitimate interests, i.e., to be as efficient as we can so we can deliver the best service to you at the best price If you have provided such a consent you may withdraw it at any time by clearing your cookie settings and rejecting when you revisit our website (this will not affect the lawfulness of our use of your personal data in reliance on that consent before it was withdrawn)
Communications with you not related to marketing, including about changes to our terms or policies or changes to the products AND/OR services or other important notices	Depending on the circumstances: — to comply with our legal and regulatory obligations — in other cases, for our legitimate interests, i.e., to be as efficient as we can so we can deliver the best service to you at the best price
Protecting the security of systems and data used to provide the services	To comply with our legal and regulatory obligations We may also use your personal data to ensure the security of systems and data to a standard that goes beyond our legal obligations, and in those cases our reasons are for our legitimate interests, i.e., to protect systems and data and to prevent and detect criminal activity that could be damaging for you and/or us
Statistical analysis to help us understand our customer base	For our legitimate interests, i.e., to be as efficient as we can so we can deliver the best service to you at the best price
Updating and enhancing customer records	Depending on the circumstances: — to perform our contract with you or to take steps at your request before entering into a contract — to comply with our legal and regulatory obligations — where neither of the above apply, for our legitimate interests, e.g., making sure that we can keep in touch with our customers about existing orders and new products
Disclosures and other activities necessary to comply with legal and regulatory obligations that apply to our business, e.g. to record and demonstrate evidence of your consents where relevant	To comply with our legal and regulatory obligations
Marketing our services to existing and former customers	For our legitimate interests, i.e., to promote our business to existing and former customers See ‘Marketing’ below for further information
The audit of our ISO certifications (to the extent not covered by ‘activities necessary to comply with legal and regulatory obligations’ above)	For our legitimate interests, i.e., to maintain our accreditations so we can demonstrate we operate at the highest standards
To share your personal data with members of our group and third parties that will or may take control or ownership of some or all of our business (and professional advisors acting on our or their behalf) in connection with a significant corporate transaction or restructuring, including a merger, acquisition, asset sale, initial public offering or in the event of our insolvency. In such cases information will be anonymised where possible and only shared where necessary	Depending on the circumstances: — to comply with our legal and regulatory obligations — in other cases, for our legitimate interests, i.e., to protect, realise or grow the value in our business and assets

Recipient	Processing operation (use) by recipient	Relevant categories of personal data transferred to recipient
Google	We use Google Analytics (GA4) cookies to collect data about the visitors to the site which includes the number of visitors, session duration, pages visited during the session etc. and whether visitors return. Google Analytics will assign a unique “ID” to a user of the boxxe website at the point they register an account with us for the purpose of tracking their activity on the boxxe website. This information is anonymous and cannot be used to identify you personally unless you end up becoming a boxxe customer. Google Analytics cannot use the ID to work out who you are.	Device’s IP address (processed during your session and stored in a de-identified form) geographic location (country only), and the preferred language used to display our website. Google Analytics stores this information on our behalf in a pseudonymized user profile.
Hotjar Ltd	We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices. Hotjar is contractually forbidden to sell any of the data collected on our behalf.	This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile.
Klevu	Klevu offers a machine learning algorithm which takes several parameters into account when establishing what a customer may like and eventually buy on the store. Javascript keeps track of what customers are searching for and visiting. These products visited by these customers and any recent search queries fired by them are used as a context to the search queries fired by them. Klevu perform semantic and statistical analysis of this data to identify the intent and to build multiple, product-noun (e.g. bag, shoe, chair) specific profiles of preferences. Klevu also employs a method called collaborative filtering, which involves analyzing the history of other customers who have or had performed similar searches and visited products similar to the products visited by the current customer. Only those products that are relevant to the current search query are picked up and analyzed to identify common factors within them.	Device’s IP address (processed during your session and stored in a de-identified form) geographic location (country only), and the preferred language used to display our website. Klevu stores this information on our behalf in a pseudonymized user profile.
Dotdigital	Dotdigital is a SaaS cross-channel marketing automation platform and services provider that helps brands devise successful, personalized marketing campaigns across multiple channels (e.g. email). Paired with its Microsoft Dynamics 365 CRM integration, boxxe is able to deliver tailored marketing to its customers.	Contact data (such as email address, contact number, name or other contact details), marketing preferences, IP address and usage information (including online navigation data, location data and browser data).

Recipient country	Recipient	Processing operation (use) by recipient	Lawful safeguard
Ireland	Hotjar	Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile.	Adequacy regulation further to paragraph 5(1)(a) of Part 3 of Schedule 21 to the Data Protection Act 2018 https://www.hotjar.com/legal/support/dpa/
USA	Stripe Inc	In order to facilitate online payments through boxxe’s ecommerce portal, where applicable, Stripe may Process Payment Account Details, bank account details, billing/shipping address, name, date/time/amount of transaction, device ID, email address, IP address/location, order ID, payment card details, tax ID/status, unique customer identifier, identity information including government issued documents (e.g., national IDs, driver’s licenses and passports).	UK Data Transfer Addendum https://stripe.com/gb/legal/dpa
EEA	Vaimo	Vaimo has access to certain categories of boxxe customer personal data (names, addresses, DOB, email, number, location, device and diagnostic data, connection data), by virtue of hosting the boxxe website.	Adequacy regulation further to paragraph 5(1)(a) of Part 3 of Schedule 21 to the Data Protection Act 2018. Vaimo also has a legally valid intra-group agreement in place and no data is transferred to any entity who is not a party to it.
EEA	Dotdigital	Boxxe will provide certain information about its customers to Dotdigital in order for it to be able to provide automated marketing services that are tailored to its specific customer interests.	Adequacy regulation further to paragraph 5(1)(a) of Part 3 of Schedule 21 to the Data Protection Act 2018. https://dotdigital.com/terms/data-processing-agreement/


Access to a copy of your personal data	The right to be provided with a copy of your personal data
Correction (also known as rectification)	The right to require us to correct any mistakes in your personal data
Erasure (also known as the right to be forgotten)	The right to require us to delete your personal data—in certain situations
Restriction of use	The right to require us to restrict use of your personal data in certain circumstances, e.g. if you contest the accuracy of the data
Data portability	The right to receive the personal data you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party—in certain situations
To object to use	The right to object: — at any time to your personal data being used for direct marketing (including profiling) — in certain other situations to our continued use of your personal data, e.g. where we use your personal data for our legitimate interests unless there are compelling legitimate grounds for the processing to continue or the processing is required for the establishment, exercise or defence of legal claims
Not to be subject to decisions without human involvement	The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you We do not make any such decisions based on data collected by our website
The right to withdraw consents	If you have provided us with a consent to use your personal data you have a right to withdraw that consent easily at any time You may withdraw consents by emailing ecommerce@boxxe.com Withdrawing a consent will not affect the lawfulness of our use of your personal data in reliance on that consent before it was withdrawn

Home
Services & Solutions
Cybersecurity
Digital Forensics & Incident Response

Protect against data breaches with quality DFIR

With computer systems and cloud-based networks being used to store company information, businesses are at risk of damaging data breaches from cyberattacks. These incidents continue to make headlines as even large corporations with sophisticated security fall victim to cybercriminals.

Data breaches are costly in more ways than one. Failing to protect personal information per legal guidelines such as GDPR can lead to fines and compensation payments and stall your sales as time is devoted to finding fixes. Well-publicised leaks can damage your reputation indefinitely.

An effective security incident response is essential to protecting your company against significant breaches. Identifying and closing holes quickly means minimal damage and enables you to get back on your feet as soon as possible after an attack.

Following up with thorough digital forensics, to appreciate the extent of the breach and find weaknesses in your systems that need to be bolstered, is vital. Our sophisticated systems review the incident in full so that no stone is left unturned when upgrading your cybersecurity.

What do we offer as part of an incident response plan?

Trust boxxe’s comprehensive DFIR to help you recover and rearm rapidly following a cybersecurity incident. We understand that every minute matters when there is the potential for a data leak, and our Computer Emergency Response Team (CERT) work quickly and calmly to stop the attack in its tracks and re-secure your breached systems against future assaults.

Our specialised digital forensics software collects, preserves and analyses the evidence of the attack to paint a full, detailed picture of events. We'll translate these computer-speak forensics into clear-cut reports, so you understand who attacked you, how they got in, what the extent of the damage is and how to prevent attacks in the future.

Your cyber forensic analyst can also provide the evidence you need to press charges against the criminals who targeted your business or to support a cyber insurance claim.

Expert knowledge

Gain a clear understanding of incidents with expertise from a highly trained cyber forensic analyst.

Personalised insights

Get personalised insights into cyberattacks centred around your unique challenges and regulatory requirements.

Innovative approaches

Advance beyond ever-cleverer cybercriminals with our cutting-edge technology and innovative approaches.

Constant cover

Benefit from instant security incident response 24 hours a day, 7 days a week.

"This decade, we have seen a ransomware epidemic that shows no sign of slowing down. Companies of all shapes and sizes are at risk of attack, and the consequences can be severe.

Using intelligent cybersecurity solutions like digital forensics is the only way to stay ahead as attacks become increasingly advanced. Incident response strategies will be ineffective and leave you vulnerable unless guided by how and why cybercriminals target your company."

Andy Batty , Security Sales Specialist, boxxe

Why choose boxxe for DFIR and your wider cybersecurity?

Backed by 35 years of experience, our computer emergency response team are skilled in threat detection and resolution and they know that time is of the essence in emergency cyber situations. Trust us for fast and effective incident response and first-class digital forensics solutions tailored to you. Here are just a few of the factors behind our reputation for world-leading cybersecurity:

Personalised solutions: We take time to get to know the ins and outs of your business and wider industry so we can provide personalised solutions for your cybersecurity.
Accredited experts: We're ISO 27001-accredited experts in digital security, giving you the peace of mind that your data and reputation are safe in the hands of our team.
Leading partners: Our partnerships with industry leaders in IT solutions such as our award-winning Titanium status with Dell Technologies demonstrate our commitment to innovation and excellence.
Client testimonies: Don't just take our word for it; read our testimonials to discover why so many trust us to protect their data in the digital space.

Browse through our Case Studies

See how we've helped businesses big and small overcome challenges and optimise their cybersecurity with advanced computer forensics and dedicated 24/7 service.

View all case studies

Case Study

DeMontfort Fine Art - Where Culture meets Cybersecurity

Security

Case Study

Protas Managed Threat Detection and Response

Security

Case Study

Didcot Railway Centre IoT CCTV

Security

Case Study

Thirteen Group - Keeping Microsoft 365 Data Safe from Accidental Deletion and Ransomware

Security

Case Study

UK Central Government - Fully Managed IT and 24/7 Security

Security

Case Study

ETL - Collaboration and Security

Platform

Case Study

Ministry of Defence - Flagstone Enhanced Data Encryption

Security

What our clients have to say

Discover why so many trust us for their digital safety and effective incident response when under threat of cyberattack.

“Verisec has for several years aided UK municipalities with secure logins and solutions. The opportunity to contribute to the University’s digitisation is a great success for us. The new agreement became a reality by the assistance of one of our British partners. We look forward to being able to attract more universities and institutions in the public sector, in both the UK and other countries, in the future.”

Johan Henrikson , CEO, Verisec

“I know that no matter what the challenge might be, I can go to boxxe and say, ‘I’ve got this issue here. What are your thoughts about it?’ and get a solid answer back. I’ve never had to go back and question them.”

John Allan , IT Team Manager, Clackmannanshire Council

“NextWave partners play a critical role throughout the customer lifecycle, from the initial qualifying stage to ultimately ensuring successful deployment and adoption of our technology. As a NextWave Platinum Innovator, boxxe is a cybersecurity advisor our customers can trust.”

Tom Evans , VP of Worldwide Channel Sales, Palo Alto Networks

“Our customers require cyber experts that can help them achieve better security outcomes, protecting them from today’s sophisticated threats. Our Platinum Innovator NextWave partners have deep Palo Alto Networks expertise to help solve complex security challenges with robust solutions and services. As a NextWave Platinum Innovator, boxxe is helping redefine what it means to be secure.”

Patricia Murphy , VP EMEA & LATAM Ecosystems at Palo Alto Networks

“The installation of the Verkada camera system was simple and well supported by the team at Verkada and boxxe. Within days of installation, the cameras have proved their worth by identifying three intruders onto our site and proving the non-arrival of contractors on a day, thereby settling a dispute instantly.”

Clive Hetherington , CEO, Didcot Railway Centre

"We will likely experience a ransomware attack, and how we recover is going to be testament to our character and the controls we now have in place. Druva is a key part of that recovery plan. There are a lot of systems we could do without, but not Microsoft 365. It’s the heart of our business, and Druva ensures that data is secure so our company can continue serving our customers."

Hassan Bahrani , Head of IT, Thirteen Group

"We embarked on this partnership with boxxe based on a compelling combination of two crucial factors: A proven track record of successful project deliveries, and competitive pricing which demonstrates their commitment to delivering value without compromising on quality. Their meticulously crafted onboarding process and documentation paved the way for a seamless and timely onboarding experience, and our ambitious timescales were achieved. We eagerly anticipate forging a mutually rewarding partnership."

Matthew Sherwin , Head of IT, DeMontfort Fine Art

"Working with boxxe has been a fantastic experience, they saw my vision and brought it to life, adding their own innovative and forward-thinking ideas. It’s paved the way to Thirteen Group being Microsoft-first in our future developments."

Jayne Allport , Head of Service, Systems & Application Improvement, Thirteen Group

Digital forensics and incident response FAQs

What is the difference between EDR and DFIR?

EDR (Endpoint Detection and Response) tools can be built into your security software to flag potential attacks instantly. These automated tools are useful for identifying issues but are otherwise limited.

DFIR solutions go further. Digital forensics enables you to find the root cause of the problem following a cyberattack and establish effective system upgrades to safeguard against similar situations in the future.

What are the benefits of DFIR?

Especially if you haven't yet experienced a cyberattack, you might question the importance of digital forensics in solving security problems. However, there are many benefits to including this extra step in your incident response plan:

Understanding the why and how of a cyberattack as well as the what
Evaluating the endpoint found by cybercriminals to uncover why it was exploited
Improved solutions to reduce the chance of future cybersecurity breaches
Meeting and exceeding regulatory compliance which demands detailed reports

Contact us

Set up your digital forensics and incident response plan today

Regain control of spiralling situations with DFIR solutions and services from boxxe. We'll act quickly to get your business back up and running while finding and closing security vulnerabilities. Call us on the number below or complete the form and we will be in touch.

0330 236 9429

First name

Last name

Contact number

Email address

Company name

Sector

Institute

Message (optional)

I would like to receive news and updates:

by email

by SMS

Cybersecurity services to protect your business

boxxe exists to make your business successful and our services are designed to provide fast, reliable, resilient support, so wherever and however we can help, your systems, data and reputation are safe in our hands.

Cybersecurity Risk Assessment

Our cybersecurity experts can give you the insights you need to prevent, detect and respond to threats. Book a free cybersecurity assessment today.

security

Cybersecurity Risk Assessment

Managed Threat Detection and Response

Managed threat detection responds to and counters cybersecurity risks, ensuring proactive protection and rapid incident resolution.

security

Managed Threat Detection and Response

Managed Endpoint Protection

Protect your endpoints from cyber attacks with endpoint security manager from boxxe, a leader in the cybersecurity industry.

security

Managed Endpoint Protection

Security Solution Deployment

Protect your organisation from malicious attacks, website spoofing and corrupt files with our deep understanding of cybersecurity in all aspects of solution deployment and the whole development lifecycle

security

Security Solution Deployment

Vulnerability Management, Detection & Response

We identify your exposure to security vulnerabilities, safeguard your IT infrastructure and relieve the workload on your IT teams

security

Vulnerability Management, Detection & Response

Digital Forensics & Incident Response

Recover rapidly from cyberattacks with effective incident response and digital forensics from boxxe, a world leader in cybersecurity.

security

Digital Forensics & Incident Response

Managed Firewall Services

Our cybersecurity experts monitor, manage and maintain your firewalls, freeing up your time to concentrate on helping your business thrive. Get in touch today.

security

Managed Firewall Services

Secure Managed Email Gateway

Protect your business network from advanced threats and known risks, using security controls to manage information flowing in and out of your organisation

security

Secure Managed Email Gateway

The boxxe Shop

Top brand hardware & accessories, with next day delivery

General

Types of data we collect

If you fail to provide personal data

How your personal data is collected

How and why we use your personal data

Marketing

Who do we share your personal data with

Who do we share your personal data with - in more detail

Overseas transfers and sharing personal data with sub-processors

Transferring your personal data out of the UK - in more detail

How long your personal data will be kept

Data Security

Cookies and other tracking technologies

Your Rights

Policy Changes

Contact Us

Windows 11 - Not your average upgrade

Windows 11 - Not your average upgrade

Explore our bestselling computers

Explore our bestselling accessories

Latest Case Studies

Helpful Insights

The boxxe Community

Already a customer?

Already a customer?

Digital Forensics & Cybersecurity Incident Response

Fast digital forensics solutions so you can detect and manage security incidents quickly and effectively.

Protect against data breaches with quality DFIR

What do we offer as part of an incident response plan?

Expert knowledge

Personalised insights

Innovative approaches

Constant cover

Why choose boxxe for DFIR and your wider cybersecurity?

Browse through our Case Studies

What our clients have to say

Digital forensics and incident response FAQs

What is the difference between EDR and DFIR?

What are the benefits of DFIR?

Contact us

Set up your digital forensics and incident response plan today

Cybersecurity services to protect your business

Cybersecurity Risk Assessment

Managed Threat Detection and Response

Penetration Testing

Managed Endpoint Protection

Secure Content Delivery Service

Security Solution Deployment

Vulnerability Management, Detection & Response

Digital Forensics & Incident Response

Managed Firewall Services

Secure Managed Email Gateway

The boxxe Shop

Create a business account and start shopping