Evidence Gathering and Preservation at Sea
Expert-defined terms from the Undergraduate Certificate in Maritime Fraud and Its Legal Aspects course at London School of Planning and Management. Free to read, free to share, paired with a professional course.
Admiralty Jurisdiction #
Admiralty Jurisdiction
Concept #
Legal authority of maritime courts over incidents occurring on the high seas or in navigable waters.
Explanation #
Admiralty jurisdiction determines which court can hear evidence of fraud, smuggling, or piracy. It applies when the vessel is on the high seas, when the incident involves a vessel flying a particular flag, or when the alleged fraud affects the commerce of a coastal state. Practically, investigators must identify the appropriate forum before collecting statements, because evidence admissible in a domestic criminal court may be excluded in an admiralty proceeding. Challenges arise in multi‑national incidents where overlapping jurisdictions create conflicts of law, and where the “forum shopping” by perpetrators seeks to exploit jurisdictional gaps. Effective coordination with foreign maritime authorities and clear documentation of the jurisdictional basis are essential to preserve evidentiary integrity.
Anchor Watch #
Anchor Watch
Concept #
Continuous monitoring of a vessel’s anchor line and position while at anchor.
Explanation #
An anchor watch provides the first line of defense against tampering with cargo or documents while a ship is stationary. By maintaining a log of watch personnel, time stamps, and any anomalies observed, investigators can later corroborate the chain of custody for seized items. For example, if falsified cargo manifests are discovered, the anchor watch log can confirm whether any unauthorized crew accessed the cargo hold during the anchorage period. The principal challenge is ensuring the watch is adequately staffed and that the log is contemporaneously signed, as gaps may be exploited to introduce fraudulent evidence. Training watchkeepers in evidence‑preserving protocols and using electronic monitoring devices can mitigate these risks.
Chain of Custody #
Chain of Custody
Concept #
Documentation that tracks the handling, transfer, and storage of evidence from collection to presentation in court.
Explanation #
Maintaining an unbroken chain of custody is critical to prevent allegations of tampering. In maritime fraud investigations, evidence may include cargo documents, electronic data from shipboard systems, and physical samples of contraband. Each transfer must be recorded with the date, time, personnel involved, and condition of the item. For instance, a seized container manifest should be sealed, labeled, and logged before being moved to a port forensic lab. Any break in the chain—such as an undocumented hand‑off—can render the evidence inadmissible. The main challenges stem from the fluid environment at sea, where evidence may need to be transferred between ship, shore, and multiple agencies, often under time pressure. Use of tamper‑evident seals, digital timestamps, and standardized forms helps preserve continuity.
Coastal Surveillance #
Coastal Surveillance
Concept #
Monitoring of maritime traffic and activities by shore‑based sensors and patrols.
Explanation #
Coastal surveillance provides the contextual backdrop for evidence gathering, enabling investigators to pinpoint suspicious vessel movements. AIS data, for example, can reveal a ship’s deviation from declared routes, which may indicate cargo substitution or smuggling. When an anomaly is detected, authorities can dispatch boarding teams equipped with evidence‑preserving kits. A practical application is the use of shore‑based radar to corroborate a vessel’s claim of being in a specific anchorage at a given time, supporting or refuting crew testimony. Challenges include gaps in AIS coverage, signal spoofing, and the need to integrate disparate sensor feeds quickly. Collaboration with national coast guards and the use of real‑time analytics improve the reliability of surveillance‑derived evidence.
Crew Testimony #
Crew Testimony
Concept #
Statements provided by ship personnel regarding observed events or conditions.
Explanation #
Crew testimony often forms the backbone of a fraud investigation, especially when documentary evidence is scarce. Interviewers must follow a structured protocol: obtain a written consent, record the interview (audio or video), and have the witness sign an affidavit confirming the accuracy of their statements. For example, a chief engineer’s account of a cargo pump malfunction can be juxtaposed with maintenance logs to detect falsification. The credibility of testimony depends on the witness’s opportunity, motive, and perception. Challenges include language barriers, fear of retaliation, and the “fog of war” effect where stressful conditions impair recall. Providing legal counsel, ensuring confidentiality, and using neutral interview environments enhance the reliability of crew statements.
Digital Forensics #
Digital Forensics
Concept #
Scientific analysis of electronic data to uncover evidence of fraud.
Explanation #
Modern vessels generate extensive electronic records—navigation logs, engine performance data, and cargo management system entries. Digital forensics involves creating a bit‑for‑bit image of these systems, calculating hash values to prove integrity, and analyzing logs for inconsistencies. An example is extracting the ship’s ECDIS (Electronic Chart Display and Information System) data to verify whether a reported route aligns with the recorded track. Preservation challenges include volatile memory loss when power is cut, encryption that hinders access, and the need to follow strict chain‑of‑custody procedures for electronic media. Employing certified forensic tools, conducting on‑site imaging, and securing devices in tamper‑evident containers are standard practices to ensure admissibility.
Documentary Evidence #
Documentary Evidence
Concept #
Physical or electronic records that support or refute allegations of fraud.
Explanation #
In maritime fraud, key documents include bills of lading, cargo manifests, insurance policies, and shipping contracts. Investigators must verify authenticity by checking seals, signatures, and serial numbers, and by cross‑referencing with external databases (e.g., port authority records). For instance, a falsified bill of lading may list a higher cargo value to inflate insurance claims. Preservation requires that originals be stored in climate‑controlled environments, while copies are made using certified scanners that embed metadata indicating the date of capture. The main challenges are the ease with which paper documents can be altered, the prevalence of forged electronic PDFs, and jurisdictional issues when documents are stored offshore. Combining physical inspection with digital verification mitigates these risks.
Electronic Chart Display and Information System (ECDIS) #
Electronic Chart Display and Information System (ECDIS)
Concept #
Integrated navigation system that records a ship’s position, route, and related data.
Explanation #
ECDIS logs provide an immutable trail of a vessel’s movements, which can be crucial when assessing allegations of cargo misdeclaration or route deviation. By exporting the system’s log files, investigators can reconstruct the vessel’s exact track, speed, and course changes. An example of practical application is comparing the ECDIS route with the declared voyage in the bill of lading; discrepancies may indicate that cargo was off‑loaded at an unsanctioned port. Preservation challenges include proprietary file formats and encryption that may prevent immediate access. Promptly securing the ECDIS data, using manufacturer‑approved extraction tools, and generating hash values ensure that the evidence remains unaltered for court proceedings.
Flag State #
Flag State
Concept #
The country under whose laws a vessel is registered.
Explanation #
The flag state holds primary responsibility for enforcing maritime regulations, including the preservation of evidence gathered aboard its vessels. When evidence of fraud is discovered, the flag state’s maritime authority must be notified, and its officials may be required to assist in the seizure and transport of evidence. For example, a vessel flagged to Liberia but operating in European waters may be subject to both Liberian and EU enforcement actions. Challenges arise when the flag state lacks the capacity or willingness to cooperate, especially with flags of convenience that prioritize commercial interests. Leveraging international conventions (e.g., UNCLOS) and bilateral agreements can compel flag states to honor evidence‑preservation obligations.
Forensic Preservation Kit #
Forensic Preservation Kit
Concept #
Standardized set of tools and materials used to collect and protect evidence at sea.
Explanation #
A forensic preservation kit typically includes gloves, evidence‑grade bags, sealable containers, labeling materials, and a portable data logger. When boarding a suspect vessel, investigators use the kit to seal cargo samples, photograph documents, and record environmental conditions (temperature, humidity). For instance, a sealed bag containing a suspected counterfeit cargo can be logged with a unique identifier, ensuring that any later analysis can trace the sample back to the original seizure point. The primary challenge is ensuring that all kit components are compatible with maritime conditions—water‑resistance, durability, and compliance with customs regulations. Regular audits of kit contents and training on proper usage help maintain effectiveness.
Harbor Inspection #
Harbor Inspection
Concept #
On‑site examination of a vessel, its cargo, and documentation while docked.
Explanation #
Harbor inspections are often the first opportunity for authorities to gather physical evidence of fraud. Inspectors may verify cargo weight against the manifest, examine container seals, and photograph the vessel’s interior. A practical scenario involves discovering a discrepancy between the declared cargo weight and the actual weight measured by onboard scales; this can signal under‑declaration for tax evasion. Preservation demands that any seized items be immediately sealed, labeled, and transferred to a secure storage area under the supervision of a senior officer. Time constraints, high traffic volumes, and language barriers are common challenges. Coordinated scheduling with port authorities and the use of multilingual inspection checklists improve efficiency.
Incident Reporting System #
Incident Reporting System
Concept #
Formal mechanism for documenting maritime events, including suspected fraud.
Explanation #
An incident reporting system captures details such as date, time, location, parties involved, and initial observations. Prompt reporting is essential for preserving perishable evidence, such as volatile statements from crew or real‑time sensor data. For example, if a ship’s crew reports a suspected cargo substitution, the report triggers a chain of actions: notification of the flag state, activation of a forensic kit, and preservation of electronic logs. The challenge lies in ensuring that the system is used consistently across different vessels and that reports are not altered after submission. Implementing standardized electronic forms with audit trails and mandatory fields enhances reliability.
International Maritime Organization (IMO) Regulations #
International Maritime Organization (IMO) Regulations
Concept #
Global standards governing safety, security, and environmental protection of shipping.
Explanation #
IMO regulations provide the legal framework for evidence gathering, particularly through the ISPS (International Ship and Port Facility Security) Code, which mandates security plans and record‑keeping. Compliance with these regulations can be used as evidence of due diligence or, conversely, as proof of negligence when fraud occurs. For instance, failure to maintain a valid ship security plan may be cited to demonstrate lax oversight. Challenges arise from varying levels of enforcement among member states and the need to interpret complex technical provisions. Familiarity with IMO conventions and their national transposition is vital for investigators to assess the admissibility of regulatory compliance documents.
Joint Investigation Team (JIT) #
Joint Investigation Team (JIT)
Concept #
Collaborative group of agencies from multiple jurisdictions working together on a case.
Explanation #
In complex maritime fraud cases that span several ports and flag states, a JIT enables coordinated evidence collection, sharing of forensic expertise, and unified prosecution strategies. Members may include customs authorities, coast guard, maritime police, and the flag state’s maritime administration. A practical benefit is the ability to conduct simultaneous boardings of sister vessels, preserving evidence that might otherwise be destroyed. The main challenges are reconciling differing procedural rules, ensuring that evidence collected by one member meets the admissibility standards of all participating jurisdictions, and maintaining secure communication channels. Formal agreements outlining roles, responsibilities, and evidence‑handling protocols are essential for a successful JIT.
Logbook Preservation #
Logbook Preservation
Concept #
Safeguarding the ship’s official record of operations, including voyages, cargo, and crew activities.
Explanation #
The logbook is a primary source of factual information. Physical logbooks must be protected from moisture, fire, and unauthorized access; electronic logbooks require secure backups and encryption. When fraud is suspected, investigators compare entries with external data (e.g., AIS) to identify inconsistencies. For example, a discrepancy between the recorded cargo loading time and the port’s gate‑in record may indicate falsification. Preservation challenges include the potential for “logbook tampering” during voyages, especially when crew members are aware of ongoing investigations. Immediate sealing of the logbook upon seizure, along with a witness signature, helps maintain its evidentiary value.
Maritime Domain Awareness (MDA) #
Maritime Domain Awareness (MDA)
Concept #
The comprehensive understanding of anything associated with the maritime environment that could impact security, safety, economy, or the environment.
Explanation #
MDA provides the strategic backdrop for evidence gathering by highlighting patterns of suspicious activity, such as repeated short‑notice port calls or abnormal cargo declarations. Analysts use satellite imagery, AIS data, and port records to generate threat indicators. When a vessel is flagged for possible fraud, MDA data can be used to justify a boarding and to locate corroborating evidence (e.g., a photograph of an unauthorized cargo loading). The challenge lies in processing massive data streams in real time and filtering false positives. Integrating automated analytics with human expertise ensures that only credible leads trigger evidence‑preserving actions.
Maritime Insurance Claim #
Maritime Insurance Claim
Concept #
Request for compensation filed by a shipowner or cargo owner following a loss or damage.
Explanation #
Fraudulent claims are a common motive for maritime fraud. Evidence gathering focuses on verifying the occurrence and extent of the loss, as well as the authenticity of supporting documents. For instance, a claim for “storm damage” may be examined by cross‑checking weather reports, ship logs, and satellite imagery to confirm the storm’s presence. Preservation of the claimant’s original documents, photographs, and communications is essential for later litigation. Challenges include the claimant’s potential destruction of evidence once a claim is filed and the need to coordinate with insurers who may have their own investigative teams. Early involvement of forensic experts can secure critical evidence before it is altered or lost.
Marine Surveyor #
Marine Surveyor
Concept #
Professional tasked with inspecting vessels and cargo to assess condition, compliance, and value.
Explanation #
Surveyors play a pivotal role in gathering physical evidence. Their reports—detailing cargo condition, seal integrity, and equipment status—are often admissible in court. A practical example is a surveyor’s certification that a container’s seal was intact upon arrival, contradicting a fraudster’s claim of tampering. Surveyors must follow standardized inspection protocols, document findings with photographs, and sign reports under oath when required. The primary challenge is ensuring the surveyor’s independence; parties with vested interests may attempt to influence findings. Selecting accredited surveyors and maintaining a clear chain of custody for their reports mitigate bias concerns.
Concept #
Recorded data of a vessel’s course, speed, and position over time.
Explanation #
The navigation log, whether paper‑based or electronic, provides a chronological account of a ship’s movements. When fraud allegations involve misdeclaration of routes or cargo transshipment, the log can confirm or refute such claims. For example, a discrepancy between the declared route on the bill of lading and the navigation log can indicate intentional deception. Preservation entails securing the original logbook or exporting the electronic file with a hash checksum. Challenges include the possibility of manual alteration in paper logs and the risk of data loss if electronic systems are powered down. Prompt backup and secure storage of the navigation record are therefore essential.
Port State Control (PSC) #
Port State Control (PSC)
Concept #
Inspection authority of a coastal state that examines foreign vessels for compliance with international regulations.
Explanation #
PSC officers may discover evidence of fraud during routine inspections, such as falsified cargo manifests or illegal modifications to ship structures. When a deficiency is identified, the officer issues a report, photographs the evidence, and may seize documents for further analysis. A practical application is the PSC’s ability to detain a vessel until fraudulent documentation is corrected, preserving the status quo for investigators. The challenge is that PSC inspections are often brief and may lack specialized forensic expertise. Integrating PSC teams with dedicated maritime fraud investigators enhances the depth and quality of evidence collected.
Qualified Evidence #
Qualified Evidence
Concept #
Evidence that meets the legal standards of relevance, authenticity, and reliability for admissibility.
Explanation #
In maritime fraud cases, qualified evidence includes original documents, certified copies, and properly authenticated electronic data. The investigator must demonstrate that the evidence was collected in a manner that prevents alteration, that it directly relates to the alleged fraud, and that it is reliable. For instance, a seized cargo invoice must be shown to be the original, not a photocopy, unless a legitimate reason for the copy’s use is established. The main challenge is meeting differing evidentiary thresholds across jurisdictions—some courts may accept electronic signatures, while others require notarized originals. Meticulous documentation of collection methods and preservation steps ensures that evidence qualifies for trial.
Remote Sensing Data #
Remote Sensing Data
Concept #
Information gathered from satellites, drones, or aircraft to monitor maritime activities.
Explanation #
Remote sensing can capture visual proof of cargo handling, vessel positioning, and illicit activities. High‑resolution satellite images may reveal a container being off‑loaded at an unapproved dock, supporting allegations of cargo diversion. Investigators download the imagery, geotag the coordinates, and embed metadata to preserve authenticity. Challenges include cloud cover obstructing images, the time lag between image capture and analysis, and the need for specialized software to interpret data. Coordinating with commercial satellite providers for near‑real‑time imagery and maintaining a secure repository for raw files enhances the evidentiary value of remote sensing data.
Seizure Protocol #
Seizure Protocol
Concept #
Legal procedure for taking possession of suspected fraudulent items or documents.
Explanation #
A seizure must be authorized by competent authority and executed following strict guidelines to prevent claims of unlawful taking. The protocol includes announcing the seizure, inventorying items, photographing the scene, and providing a receipt to the vessel’s master. For example, when a customs officer seizes a container suspected of containing contraband, the officer must document the seal number, container condition, and chain of custody. The main challenges involve ensuring that the seizure does not impede the vessel’s safe navigation and that all actions are recorded to defend against procedural challenges. Use of standardized seizure forms and immediate digital logging aids compliance.
Shipboard Evidence Collection #
Shipboard Evidence Collection
Concept #
Process of gathering physical and electronic items from a vessel for forensic analysis.
Explanation #
Effective shipboard collection requires a systematic approach: (1) identify and isolate evidence, (2) document the location and condition, (3) package using tamper‑evident containers, and (4) label with unique identifiers. Items may include cargo samples, sealed documents, electronic devices, and witness statements. A practical scenario is the collection of a crew member’s personal computer after a suspected phishing fraud; the device is powered down, sealed, and logged. Challenges include limited space on board, environmental hazards (salt spray, humidity), and the need to maintain the vessel’s operational status. Training crew in basic evidence preservation and having pre‑positioned forensic kits mitigate these constraints.
Ship’s Logbook #
Ship’s Logbook
Concept #
Official record maintained by the ship’s master documenting voyages, cargo, and significant events.
Explanation #
The logbook is a cornerstone of maritime evidence, often referenced to verify timelines and cargo handling. When fraud is alleged, investigators cross‑check logbook entries against external data sources such as port records and AIS. For instance, a logbook entry stating “cargo loaded at Port A” can be validated by checking the port’s gate‑in timestamps. Preservation entails sealing the logbook in a protective sleeve, photographing each page, and creating a digital copy with hash verification. The principal challenge is the potential for retrospective alteration; therefore, any sign‑off by the master must be witnessed and documented contemporaneously.
Ship Security Plan (SSP) #
Ship Security Plan (SSP)
Concept #
Document outlining security measures a vessel must implement under the ISPS Code.
Explanation #
The SSP details procedures for access control, surveillance, and emergency response. In fraud investigations, the SSP can reveal whether proper safeguards were in place to prevent unauthorized cargo handling. For example, a missing or outdated SSP may indicate negligence that facilitated a smuggling operation. Preservation requires retaining the original SSP, any amendments, and records of drills or security breaches. Challenges include the frequent updating of SSPs and the possibility that crews retain only electronic copies, which may be altered. Maintaining both hard‑copy and secure electronic versions, along with timestamps, ensures the plan’s evidentiary integrity.
Ship Surveillance Camera Footage #
Ship Surveillance Camera Footage
Concept #
Video recordings from onboard cameras monitoring cargo areas and access points.
Explanation #
Surveillance footage provides visual confirmation of who accessed cargo holds, when seals were broken, or if unauthorized personnel entered restricted zones. Investigators retrieve the footage, extract relevant clips, and preserve them with a hash checksum. A practical example is using camera footage to identify a crew member who opened a container door after hours, supporting a charge of fraud. The main challenges are limited storage capacity, potential overwriting of older footage, and ensuring that the video file’s metadata remains intact. Implementing a retention policy aligned with legal requirements and backing up footage to secure external media are essential steps.
Ship’s Voyage Data Recorder (VDR) #
Ship’s Voyage Data Recorder (VDR)
Concept #
“Black box” device that records navigational and operational data for accident investigation.
Explanation #
The VDR captures data such as bridge audio, radar images, and engine parameters. Although primarily used for accident analysis, the VDR can contain evidence of fraudulent activities, such as intentional misrouting or falsified engine performance to conceal cargo damage. Retrieval must be performed by certified technicians, and the data must be copied with hash verification to prove integrity. Challenges include encryption, limited access ports, and the risk of data loss if the VDR is damaged during a seizure. Coordinating with the vessel’s flag state to obtain the necessary technical support ensures successful extraction and preservation.
Statutory Declaration #
Statutory Declaration
Concept #
Written statement of fact sworn before an authorized officer, used as evidence.
Explanation #
In maritime fraud cases, a crew member may provide a statutory declaration describing observed irregularities, such as falsified paperwork or cargo substitution. The declaration, signed in the presence of a notary or consul, carries weight because it is made under penalty of perjury. Practical use includes submitting the declaration to customs authorities as part of a seizure dossier. The challenge is ensuring that the declarant fully understands the implications and that the declaration is not coerced. Providing access to legal counsel and confirming the declarant’s voluntary participation enhance the credibility of the statement.
Statutory Inspection #
Statutory Inspection
Concept #
Mandatory examination of a vessel required by national or international law.
Explanation #
Statutory inspections may uncover evidence of fraud, such as discrepancies between declared cargo and actual loading. Inspectors document findings in official reports, which become part of the evidentiary record. For instance, a routine safety inspection that discovers a missing cargo manifest page can lead to a fraud investigation. Preservation involves securing the inspection report, photographs, and any seized documents. Challenges include the limited scope of some inspections, which may not target fraud-specific indicators, and the potential for inspectors to lack forensic training. Integrating fraud detection criteria into standard inspection checklists improves evidence capture.
Stakeholder Interview #
Stakeholder Interview
Concept #
Structured conversation with parties who have an interest in the maritime operation (e.g., shippers, insurers, agents).
Explanation #
Stakeholder interviews provide contextual information that can corroborate or contradict documentary evidence. An insurer’s interview may reveal unusual claim patterns, while a shipping agent’s testimony can clarify discrepancies in bill of lading details. The interview must be recorded, transcribed, and the interviewee’s signature obtained on an affidavit. A practical challenge is managing conflicting accounts and ensuring that interviewees are not influenced by ongoing investigations. Conducting interviews in neutral settings, providing assurance of confidentiality, and documenting all questions asked help maintain the integrity of the information gathered.
Statistical Anomaly Detection #
Statistical Anomaly Detection
Concept #
Analytical method for identifying outliers in maritime data that may indicate fraudulent activity.
Explanation #
By applying statistical techniques to cargo declarations, freight rates, and route frequencies, investigators can flag transactions that deviate significantly from normative patterns. For example, a sudden spike in declared cargo value for a specific route may trigger a deeper audit. Once an anomaly is detected, evidence collection focuses on the flagged transaction, preserving all associated documents and electronic records. Challenges include false positives, which can waste resources, and the need for high‑quality data inputs. Integrating anomaly detection tools with existing customs databases and training analysts to interpret results improve the efficiency of evidence‑focused investigations.
Subsea Inspection #
Subsea Inspection
Concept #
Examination of underwater parts of a vessel, such as hull plates and ballast tanks, for signs of tampering.
Explanation #
Fraudsters may alter ballast tanks to conceal contraband or modify hull markings to misrepresent vessel specifications. Subsea inspection using remotely operated vehicles (ROVs) captures video and photographs, which are then archived with timestamps. Evidence of unauthorized modifications can support charges of fraud or violation of safety regulations. Preservation requires securing the video files, sensor data, and the ROV’s mission logs. The primary challenge is the logistical complexity and cost of deploying ROVs, especially in rough seas. Scheduling inspections during routine maintenance periods and coordinating with classification societies can reduce operational impact while still gathering critical evidence.
Suspicious Activity Report (SAR) #
Suspicious Activity Report (SAR)
Concept #
Document filed by financial institutions or maritime operators when they detect potential illicit behavior.
Explanation #
A SAR may flag unusual cargo declarations, inconsistent payment patterns, or rapid changes in vessel ownership. When a SAR is received, investigators assess its credibility, request supporting documentation, and may initiate a seizure if warranted. For instance, a bank’s SAR indicating a sudden increase in freight payments to a new shell company can lead to a deeper probe of the associated shipping documents. Preservation involves retaining the original SAR, any accompanying evidence, and communications with the reporting entity. Challenges include balancing confidentiality requirements with investigative needs and ensuring that the SAR is not dismissed as routine. Prompt analysis and inter‑agency cooperation enhance the SAR’s value as a source of evidentiary leads.
Tariff Classification #
Tariff Classification
Concept #
System for categorizing goods for customs duties based on the Harmonized System (HS) codes.
Explanation #
Misclassification of cargo is a common fraud technique used to evade duties. Evidence gathering focuses on comparing the declared HS code with the actual product characteristics. Physical inspection of the cargo, laboratory analysis, and review of product specifications help establish the correct classification. For example, a shipment labeled as “industrial machinery” may actually contain high‑value electronic components, leading to underpayment of duties. Preservation of the original invoice, packing list, and any laboratory reports is essential. Challenges include the technical complexity of HS codes and the potential for intentional ambiguity. Engaging customs experts and using detailed product descriptions reduce the risk of misclassification and strengthen the evidentiary basis for enforcement action.
Technical Documentation #
Technical Documentation
Concept #
Engineering drawings, specifications, and certificates related to a vessel’s equipment and cargo handling systems.
Explanation #
Technical documents can reveal whether equipment was modified to facilitate fraud, such as installing hidden compartments. Investigators examine schematics, compare them with the vessel’s actual configuration, and document any discrepancies. Preservation includes securing original drawings, digital files, and any revision histories. A practical example is discovering that a cargo hold’s liner was removed to create a void for illicit goods, contradicting the ship’s class certificates. The main challenge is that technical documents may be proprietary and stored offshore, making access difficult. Requesting documents through flag‑state channels and ensuring confidentiality agreements can aid in obtaining and preserving this evidence.