Documentation

Everything you need to get started with TracePoint.

Getting started

Create an account at /signup
Verify your email and complete your profile (license number recommended)
Create your first case or run a search directly from the dashboard
Choose a search type (person, email, phone, username, domain, image, breach)
Review results — each source is marked with confidence and verification status
Attach results to a case as evidence (SHA-256 hashed, timestamped)
Generate a PDF report with full chain of custody

Search types

Person

Aggregates people-search engines, public records, social profiles

Email

Breach checks, gravatar, DNS MX, associated accounts

Phone

Carrier lookup, line type, country identification

Username

40+ social networks scanned for profile existence

Domain

WHOIS/RDAP, DNS records, subdomain enumeration, HTTP probe

Image

EXIF metadata, reverse image search links

Breach

Have I Been Pwned integration for email/domain breach history

Chain of custody

Every piece of evidence collected through TracePoint is:

SHA-256 hashed at time of collection
Timestamped with UTC capture time
Attributed to the collecting investigator (name, email, license)
Stored in encrypted R2 object storage
Logged in an immutable audit trail
Exportable in PDF reports with full provenance

API access

Agency tier and above include REST API access. Authenticate with an API key:

curl -X POST https://secdh.com/api/v1/search \
  -H "Authorization: Bearer tp_xxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{"query":"john@example.com","type":"email"}'

Rate limit: 50 requests/minute on Agency tier.

Legal & compliance

TracePoint is designed for lawful investigation purposes only. Users must attest to lawful purpose at signup. All searches are logged with user identity and timestamp for subpoena response. Data retention is 90 days after subscription end, then hard delete. No biometric processing without documented consent.