Skip to content
Skip to main content
Mobile Extractions Technical Explainer

What does a timestamp prove about when a person acted?

It anchors a system event; attributing a human action at that moment requires evidence about the event cause, client and operator.

Define event and precision

Creation, submission, delivery, access, modification, measurement and synchronisation are distinct. A seconds display may derive from rounded, batched or lower-precision data, and a correct stored value can reflect a wrong device clock. Provider time may be stable while recording a later stage.

Connect the event to a person

Establish account and originating device, then test manual interaction, automation, linked clients, sharing and remote access. Unlocks, app use, local composition, CCTV, payments and witnesses may bridge the human link. Use a supported range when clock or event precision does not justify an exact instant.

Key takeaway

State what the system timed and how precisely before attributing the event and its timing to a person.

Reference: MEX-038Mobile Extractions