CaseAgent
ProductSolutionsSecurityPricingResources
Sign inTry CaseAgent
§ Solutions

Built for the people
who own the file.

Five roles, one product. CaseAgent is opinionated about the canonical record and quiet about everything else — so investigators, administrators, legal, executives, and IT & security teams all work from the same file without stepping on each other.

Try CaseAgent Talk to sales
Index — by role5 of 5
01
Investigator
The case file does the paperwork.
02
Administrator
Run the function, not the queue.
03
Legal
Defensible by default.
04
Executive
The picture, not the noise.
05
IT & Security
Defensible from the IdP to the audit log.
§ 01 — Investigator

The case file does
the paperwork.

You're the one running the matter — interviews, evidence, leads, the next call. CaseAgent keeps the canonical record current as you work, so the file is always closure-ready and you stop re-typing what already happened.

  • Leads, evidence, and notes attached to the matter as you go — not at the end
  • Triage intake into a case in one panel; no copy-paste between tools
  • Activity log writes itself — chain of custody from first tip to final decision
Try CaseAgent
Case fileCA-2041
Open · investigate
Procurement vendor irregularity — Q1 audit
EvidenceLeadsPeopleActivity
  • EmailAug 12 thread — vendor POsha256 verified
  • DocPO discrepancy worksheet.xlsxsha256 verified
  • NoteWitness interview — A. Pereiralogged 2h ago
  • LeadBadge logs — bldg 3 weekendL-7198
§ 02 — Administrator

Run the function,
not the queue.

You see across every matter and every investigator. CaseAgent gives you the operational picture — who owns what, what's behind on its due date, where the bottleneck is — without weekly status calls to compile it.

  • Live view of every open matter, owner, and due date; no spreadsheet rebuild
  • Reassign workloads, configure templates, and set access policies in-product
  • Metrics that drill: click any number to see the cases driving it
Try CaseAgent
Operations
last 30 days
Open cases
47
Past due date
6
Awaiting approval
4
Workload by ownerowner · open · at risk
  • M. Kapur
    9 · 2
  • R. Patel
    7 · 1
  • J. Liu
    5 · 0
  • A. Tate
    4 · 1
§ 03 — Legal

Defensible
by default.

When the regulator, the auditor, or opposing counsel asks how you handled a matter, the answer should already be in the file. CaseAgent gives you the chain of custody, the access record, and the legal hold without having to reconstruct anything.

  • Tamper-evident activity log — who saw what, when, and why, hash-chained and verified daily
  • Issue legal holds in-product; artifacts frozen, custodian acks tracked
  • Per-case access policies; nothing leaves the system without audit
Try CaseAgent
Chain of custody
Hold active · 4 acks
CA-2041 · Procurement vendor irregularity
18 artifacts frozen · counsel-only access
  • Today 10:42M. KapurIssued legal hold · 4 custodians
  • Today 09:15R. PatelAcknowledged hold notice
  • YesterdayJ. LiuViewed evidence E-19 · sha256 verified
  • 2d agoA. TateRestricted access — counsel only
§ 04 — Executive

The picture,
not the noise.

You don't need every case detail. You need to know the function is healthy, the risk is contained, and the numbers you'll quote to the board are defensible. CaseAgent surfaces the operational truth without you having to ask for it.

  • Board-ready dashboards: volume, time-to-resolve, due-date adherence, reopen rate
  • Sign-offs routed to you with the full case context, not a summary email
Try CaseAgent
Board view
quarter to date
Time-to-resolve
9.4d−1.2d
On-time rate
94%+3%
Reopen rate
2.1%−0.4%
New matters — 14 day+18%
§ 05 — IT & Security

Defensible from
the IdP to the audit log.

You don't make investigation decisions — you make sure the system the investigators use stands up to your auditors, your regulators, and your incident response playbook. CaseAgent gives you the identity hooks, the tamper-evident evidence trail, and the controls procurement asks for in week one.

  • SAML SSO and SCIM 2.0 provisioning with Okta and Microsoft Entra ID; directory sync reconciles daily
  • Custom roles built from a 50+ permission registry, mappable to your IdP groups
  • Customer-managed encryption keys (BYOK) via AWS or GCP KMS — every decrypt logged with user, action, and case
  • Outbound signed webhooks (HMAC-SHA-256, retry-aware, secret rotation) into your SIEM or SOAR
  • Off-site immutable backups with object lock; quarterly restore drills
  • API tokens, break-glass access, and an action-type audit log with 100+ tracked operations
Try CaseAgent
Identity & access
Provisioned · 142 users
IdP
Okta · Entra
SCIM events (30d)
4,318
KMS decrypts (30d)
12,407
  • Today 11:08SCIMOkta · created user m.lee@acme.com · group: Investigators
  • Today 10:54RoleMapped group "Compliance-Leads" → CaseAgent role "Compliance Approver"
  • Today 09:42KMSAWS KMS decrypt · case CA-2041 · actor a.wilson · evidence E-19
  • YesterdayBreak-glassExecutive-approved CASE_READ · 30-min scope · all access logged
  • YesterdayWebhookINTAKE_SUBMITTED → siem.acme.net · 200 · signed delivery
§ 05 — vs. status quo

How investigation work runs without us.

Most teams cope with the tools they already have. They make it work — until they don't.

Capability
Status quo · spreadsheets, inboxes, shared drives
CCaseAgent
Single record per matter
Lives across spreadsheets, inboxes, shared drives
One canonical case record, intake → closure
Multi-channel intake
Hotline + web form + email all land separately
All channels into one triage queue, deduped
Approvals & sign-offs
Email threads; decisions hard to reconstruct
Routed against the case; decision + rationale logged
Operational metrics
Quarterly reports compiled by hand
Live dashboards; click any number for the cases behind it
Access & confidentiality
Folder permissions; people copy files to their desktop
Per-case access policies; nothing leaves the system without audit
Legal Holds
Email notice; hope nothing gets deleted
Hold issued in-product; artifacts frozen, acks tracked
Audit trail
Reconstructed after the fact, if at all
Tamper-evident activity log from first intake to closure
Time-to-defensible-record
Days of stitching evidence and email threads together
Always live — the record IS the case

See it on your own data — without the sales call.

Apply for a 14-day trial. Reviewed by a person, typically within 24 hours.

Try CaseAgent nowTalk to sales
CaseAgent

Secure case management for investigative teams. Without the complexity of legacy enterprise systems.

Product
OverviewHomeIntakeLeadsCasesEvidenceInterviewsApprovalsMetricsReportsAdvanced SearchLegal HoldsPricingSecurity
Solutions
InvestigatorAdministratorLegalExecutiveIT & Security
Resources
Documentation
© 2026 CaseAgent. All rights reserved.PrivacyTermsSecurity