In development

Case management for private investigators

One workspace for every case. Case files we can't read.

Cases, evidence, client updates, time and reports in one place, for solo PIs and small firms. Your case files are encrypted in your browser before they reach us, with keys we don't hold.

Take the 90-second surveySee how it works

In development, not yet open. The survey is how working investigators tell us what ships first, and how you'll hear when there's something real to try.

A case workspace for “Claim 4471 — slip and fall”, an insurance case in the Active phase. A five-step phase bar and tabs for overview, contacts, evidence, notes, time, reports and messages sit above the case summary and recent activity; beside them, a client-access panel lists one invited client and flags one unread message.
ScreenshotCase workspace · development build · Sep 2026 · fictional sample data

  • Encrypted in your browser

    Case content is encrypted before upload, with keys we don't hold.

  • Every file fingerprinted

    SHA-256 per file, linked into a chain for each case that you sign.

  • A private client portal

    Clients sign in to see status, download what you release, and message you.

Your operating system shouldn't be five unrelated tools.

Most investigators don't lack discipline. They lack software designed around the actual path from intake to evidence, client communication, reporting, and closure.

  • Case information is scattered

    Notes in email, photos in Drive, hours in a spreadsheet, the invoice somewhere else.

  • Evidence handling changes by case

    Files get renamed, copied and emailed. When someone asks what changed and when, there's no record to point to.

  • Delivery still means manual cleanup

    Reports assembled by hand, updates sent from a personal address, hours retyped into the invoice.

  • Email
  • Drive
  • Spreadsheet
  • Dropbox
  • Paper file

One case in PIToolkit

  • Case, contacts and notes
  • Evidence and its hash chain
  • Time entries
  • Reports and PDF export
  • Client portal and messages

Run the case. Protect the evidence. Deliver the work.

Each of these is built. The product page lists everything, including what's still planned.

Run the case

See the entire case without reconstructing it.

From intake to archive: case status and phases, the contacts on it and their roles, your timestamped notes, an automatic activity timeline, and a timer that follows you around the workspace.

  • Case lifecycle, phases and retention settings
  • Contacts linked to cases, with their roles
  • Timer and manual time entries, exportable
The case list in PIToolkit's development build. Filters for status, type, last activity and client sit above five case cards, among them “Claim 4471 — slip and fall” (Active), “Harbor Street matter” (Closed) and “Pre-hire check — T. Ellison” (Inquiry), each with its case number, case type and last activity.
ScreenshotCase list · development build · Sep 2026 · fictional sample data

Protect the evidence

Keep evidence with its integrity record.

Upload photos, video and documents. Each file is encrypted and fingerprinted in your browser, added to the case's signed hash chain, and kept with its original capture details.

  • Encrypted before it leaves your device
  • SHA-256 fingerprint and a signed hash chain for every case
  • Evidence package export with a verification report
  • Trusted third-party timestamping (RFC 3161) Planned
A case's evidence tab in list view: 15 files stored, each marked Encrypted, with its type, size, capture time, who it is shared with and a shortened SHA-256 fingerprint. A file-name search and type and sharing filters sit above the list.
ScreenshotEvidence vault, cropped · development build · Sep 2026 · fictional sample data
View the full screenshot

Deliver the work

Give the client a finished experience, not a folder link.

Build a report on your letterhead, export it as a PDF, and publish it to a client portal carrying your firm's name and colours. Clients sign in to see status, download what you release, and message you.

  • Structured reports with your branding and PDF export
  • Branded client portal, one sign-in across investigators
  • Encrypted messaging tied to the case
The report editor for a published “Final surveillance report”: Observations, Timeline and Subject description sections, each with a notes field and a Reference evidence button, one already citing a photo, and Rename, Preview PDF and Review & publish buttons at the top.
ScreenshotReport builder · development build · Sep 2026 · fictional sample data

Everything PIToolkit does, and what's still planned

We built PIToolkit so we can't read your case files.

Most case-management software encrypts your data with keys the vendor holds. PIToolkit is built the other way round: your cases, evidence and messages are encrypted in your browser, with keys we don't hold.

  1. Your browser

    Your key is made here from your password. Case content is encrypted before upload.

    Ciphertext only

  2. PIToolkit servers

    Store ciphertext we can't open, plus the operational details listed below.

    Encrypted to their key

  3. People you share with

    Clients get their own keys. What you release to them is encrypted to their key.

What our servers can read

Operational details the product needs to run your account.

  • Your account basics: sign-in email, plan, and when you accepted the terms
  • Your firm branding and workspace defaults
  • Details about records, not their content: types, dates and file sizes
  • Time entries' dates, durations and billing rates. Encrypting these is Planned
  • Client email addresses, so invitations can be delivered
  • Sign-in and security records, with no case content
  • Product usage, with no analytics company or tracking script
  • Anything you write in a support request
  • What every web service sees: your IP address, and the size and timing of uploads and downloads

What our servers can't read

It never reaches us unencrypted.

  • The names of your clients, subjects and contacts
  • Case names, descriptions and notes
  • Evidence files, their filenames and their fingerprints
  • Where, when and on what device evidence was captured
  • The text of your reports
  • Your messages with clients
  • Your password, your recovery key, or any of your keys

PIToolkit has no third-party audit or certification, and the security page lists the limits of this design as well as its strengths.

Read the full disclosure and its limits

For investigators, and the clients they report to.

Priced for working investigators, not enterprise procurement.

These are our prices. Nothing is for sale yet, because PIToolkit isn't open; the survey below is how to hear when it is.

  • Free

    Real casework, no countdown

    $0forever

    Enough to run real cases without a trial clock running down.

    • 25 active cases
    • 3 client portal clients
    • 5 GB encrypted evidence storage
    • Reports with a small “Prepared with PIToolkit” credit
    Start free

  • Solo

    One investigator

    $29per month

    For a solo PI running active casework, client delivery and reporting from one workspace.

    • Unlimited active cases
    • Unlimited client portal clients
    • 250 GB encrypted evidence storage
    • Full reports, no PIToolkit credit

    Not on sale until PIToolkit opens.

    Is $29 right for you? Tell us in the survey

  • Professional

    More storage, faster answers

    $59per month

    Everything in Solo, with room for a video-heavy caseload.

    • Everything in Solo
    • 1 TB encrypted evidence storage
    • Priority support
    • Trusted timestamping (RFC 3161) Planned

    Not on sale until PIToolkit opens.

    Is $59 right for you? Tell us in the survey

Security is never an upgrade. Browser-side encryption, the evidence hash chain and two-factor authentication come with every plan, Free included.

Full pricing and FAQs

Clear about what exists and what comes next.

The roadmap will change as working investigators test the product. That's the point of opening the process early.

  1. Built

    The core workspace

    • Browser-side encryption foundation
    • Accounts, authenticator-app two-factor and recovery keys
    • Cases, contacts and notes
    • Encrypted evidence with a signed hash chain
    • Time tracking and export
    • Branded reports and PDF export
    • Client portal and secure messaging
  2. In development

    Hardening before anyone else uses it

    • Fixes from our own internal security review
  3. Planned

    Opening the doors

    • Security keys and more two-factor methods
    • Hosting, then a small private Beta
    • Invoicing inside PIToolkit
    • Online invoice payments
    • Trusted third-party timestamping
    • A mobile app for field capture

Founding group

Help shape the tool you'd actually use.

Join for development updates, early access, and an invitation to test the parts of PIToolkit most relevant to your practice. The goal is to put the secure core in front of working investigators and change the workflow based on how real cases are run.

PIToolkit is built by CitrusCS LLC, a small security-focused software company, with input from working investigators.

  • Email is the only required field.
  • No case names, client details or licence numbers.
  • No newsletter or drip sequence. What we do with your data.
Take the 90-second survey

Prefer email? Write to hello@pitoolkit.com. A working PI telling us we've misunderstood the job is worth more than a hundred signups.