T3K LEAP
T3K LEAP, the Law Enforcement Analytics Platform from Austrian vendor T3K-Forensics, ingests mobile extractions and forensic images, classifies media with in-house AI classifiers to surface illicit content, and produces automated analytical reports for vetted investigative organisations.
What is T3K LEAP?
LEAP (Law Enforcement Analytics Platform) is one of four products built by T3K-Forensics GmbH in Vienna, alongside CORE, MEDETO and AIRA. The vendor describes it as an automated tool for quick analysis of data from a variety of devices such as mobiles: it provides automated media classification to detect illicit content, and it can analyse communication patterns, verify identities and countries of origin, and quickly screen persons of interest.
LEAP sits after the extraction stage of a forensic chain rather than replacing it. It is deliberately input-agnostic and ingests Cellebrite UFDR, MSAB Extended XML, Oxygen Forensics XML, Grayshift GrayKey ZIP, MobilEdit XML and UFDR, .E01 forensic images and raw disk images. Once a case is loaded, the media analysis engine screens thousands of images, videos and documents using deep learning classifiers that T3K develops and trains in house. Object recognition covers more than 20 specific classes, and the classifier range advertised by the company spans CSAM, weapons, terrorism, object detection, military content, narcotics, violence, extremism, war crimes, motor vehicles, nudity, sexism and racism, with bespoke classifiers possible in close cooperation with the customer.
The output is automated reporting plus aggregated data, meant to let an investigation set priorities without waiting for a full manual review. Access runs through a web GUI, so several workstations and platforms reach the same instance with no local client to install. The platform is fully containerised, which makes it adaptable to cloud and edge environments and allows both horizontal and vertical scaling. It nonetheless runs on the customer's own hardware: Ubuntu Linux 20.04 LTS, a CUDA-capable NVIDIA GPU and roughly 400 GB of storage.
The company's background explains the positioning. T3K started out as a digital forensics expert-witness practice and moved into AI as CSAM caseloads grew; its press kit claims a true positive rate above 90% for the T3K CSAM classifier and presents the company as a world leader in that field. Commercially, LEAP is a B2B licence: no public price, a quote obtained through the demo form, and the customer's credentials vetted before any licence is granted.
What it does
- Ingest mobile extractions and forensic images in the main industry formats
- Classify images, videos and documents automatically across more than 20 object classes
- Detect illicit content, including CSAM, terrorism, narcotics, weapons, violence and extremism
- Analyse communication patterns within the extracted data
- Verify identities and countries of origin
- Screen persons of interest quickly
- Generate automated analytical reports and aggregated data
When to use T3K LEAP / When not to
A quick filter to help you decide if T3K LEAP is the right fit.
When to use T3K LEAP
- Investigative units that routinely work through large volumes of seized media and need to know where to look first
- Teams handling child sexual abuse material, human trafficking, contraband, terrorism, immigration or fraud cases
- Digital forensics labs already running Cellebrite, MSAB, Oxygen Forensics, GrayKey or MobilEdit extractions and looking to triage the output
- Agencies able to host and administer their own GPU server on Ubuntu Linux, with roughly 400 GB of storage available
- Units trying to limit how long investigators are personally exposed to distressing material during a first pass
When not to use T3K LEAP
- Individuals and private users: a licence is only granted once the customer's credentials have been vetted, which the EULA allows up to four business days
- Anyone expecting self-service sign-up, a mobile app or a published price list, none of which exist
- Companies that simply want a media classification API: that is CORE, a separate product from the same vendor
- Organisations with no GPU infrastructure and no Linux administrator to run a server installation
- Any use outside a lawful framework: the EULA forbids illegal use and T3K's ethical declaration reserves the right to refuse or drop a customer
How to use T3K LEAP
A typical end-to-end flow, from setup to results.
- Make contact through the Request A Demo form (name, email, job function, organisation, country, product of interest), through the Solutions Finder questionnaire, or by writing to sales@t3k.ai or office@t3k.ai
- Wait for your organisation's credentials to be vetted: the demo page states that a team member gets in touch once that check is done, and the EULA allows up to four business days
- Agree commercial terms: a signed Order plus a customer registration form, confirmed through a verification link (EULA 2.3)
- Ask about a trial version if you want to test first; its scope and duration are preconfigured by T3K at its own discretion (EULA 5)
- Provision the hardware yourself: an Ubuntu 20.04 LTS server, a CUDA GPU, the RAM matching your daily volume and around 400 GB of storage (EULA 3.2 and 4.5)
- Download the digital licence key supplied by T3K (EULA 4.1)
- Install the containerised platform on your own infrastructure, in the environment of your choice, including private cloud or edge
- Take the first-installation instruction from T3K or the reseller, covering how to use the technology, how to read its reports and what the hardware prerequisites are (EULA 4.2)
- Ingest an extraction or forensic image, let the classifiers run, then review the results through the web interface from any workstation
- Collect the automated reports and aggregated data, and decide case by case whether to apply new versions: updates are made available but installing them is not mandatory, and T3K is not obliged to develop them (EULA 4.3)
Pros & Cons
Pros
- Broad input coverage: the main mobile extraction tools on the market are supported, so LEAP slots into an existing forensic chain instead of replacing it
- Deployed on the customer's own infrastructure, so investigation data never leaves it
- Fully containerised, which allows private cloud or edge adoption and scaling in both directions
- Web interface with no per-workstation client to install or maintain
- Hardware requirements published in detail, which is rare in this market and lets a buyer size and cost the project before contacting the vendor
- Instruction at first installation is a contractual commitment, covering usage, report reading and hardware prerequisites (EULA 4.2)
- European vendor under the GDPR, with a named DPO, a dedicated compliance page, and a public ethical declaration written into the contract that reserves the right to refuse customers
Cons
- No public pricing whatsoever: the 18-URL sitemap contains no pricing page, and no order of magnitude is given anywhere
- Closed access: credentials are vetted before a licence is granted, which takes up to four business days, and there is no self-service trial
- Hardware is at the customer's expense: an NVIDIA GPU, 128 to 192 GB of RAM and around 400 GB of storage, with NVMe recommended
- Supported OS limited to Ubuntu Linux 20.04 LTS, with 22.04 announced as coming soon on a page whose last recorded modification dates from April 2026
- Software supplied AS IS with no warranty, no support and no indemnity obligation (EULA 9.1); T3K is not required to develop updates or provide maintenance (4.3) and may discontinue any version on three months' notice (4.4)
- Twelve-month initial term with automatic annual renewal and 90 days' notice to terminate (EULA 10.1)
- Anonymised data sent to T3K falls under a perpetual, irrevocable licence with no documented opt-out (11.4); the site also contradicts itself on the head office and DPO addresses, and publishes neither an interface language nor a sub-processor list
Pricing & Plans
There is no free plan and no published price point. The site's sitemap of 18 URLs contains no pricing page; the only page addressing the subject is titled "Request A Demo + Pricing" and holds nothing but a form, so every figure is set by quotation after the customer's credentials have been vetted. Use of the software is conditional on the License Payments and any other fees defined in the signed Order (EULA 6), for an initial term of twelve months renewed automatically for further one-year periods (10.1). Hardware is not included and must be acquired separately, at the customer's own cost and responsibility (3.2). A trial version may be provided, with scope and duration fixed by T3K at its sole discretion (5), but no permanent free tier exists.
- scope and duration preconfigured by T3K at its sole discretion
- supplied AS IS with no indemnity
- support or warranty (EULA 5 and 9.3)
- and only after the customer's credentials have been vetted
- no named or published plan
- License Payments
- scope and duration are set case by case in the signed Order
- with a twelve-month initial term and automatic annual renewal (EULA 6 and 10.1)
Data, GDPR & hosting
A consolidated view of how T3K LEAP handles your data.
GDPR overview
T3K runs a dedicated GDPR compliance page stating that it is "fully committed to ensuring that our practices meet the high standards set by this regulation". The programme described is concrete: a named data protection officer, data protection impact assessments, respect for data subject rights, a stated legal basis, technical and organisational measures, and standard contractual clauses for transfers outside the EEA. The Data Protection Notice sets out the rights of access, rectification, erasure, objection, restriction, portability and complaint, names the Austrian Data Protection Authority as supervisory authority, and promises a response within one month, extendable for complex requests. The EULA provides for an Article 28 processing agreement. Two gaps: no effective date is published for the policy, and three different addresses are given for the same data protection officer. No Article 27 representative is named, and none is needed, since the vendor is established in Vienna.
Who owns the data?
The software is licensed, not sold: T3K keeps every intellectual property right in the LEAP technology and reserves all rights not expressly granted (EULA 3.1 and 7.1). Case data stays with the customer, because LEAP is installed on the customer's own infrastructure from a downloadable licence key (4.1). Any data the customer does send to T3K must be anonymised first, and by sending it the customer grants T3K a perpetual, irrevocable, worldwide, transferable, royalty-free licence to use it to enhance its products (11.4). Feedback, suggestions and ideas become T3K's property outright, with no consideration (3.4). On termination, the customer must uninstall and then delete or return all files, licences, installers and documentation, and evidence this on request (10.2).
Reuse rights
Investigation data is processed inside the customer's own installation, so the customer keeps and reuses it without asking anyone. The one carve-out runs the other way: anything the customer transmits to T3K must be anonymised beforehand, and T3K may then use it "to enhance the functionality of its products" (EULA 11.4) - the purpose is stated, the word training never appears, and no opt-out is documented. Confidentiality is mutual and survives the relationship (11.1 and 11.3); an Article 28 GDPR data processing agreement is to be negotiated where one party processes personal data for the other (11.5); and the Data Protection Notice is incorporated into the EULA as an integral part of it (11.6). Website data is a separate matter: T3K acts as data controller for information gathered through site use, product purchases, trade fairs, office visits and enquiries, uses audience measurement cookies and Google Analytics, collects no special categories of data, and states that it will "only use your personal information for the purposes for which we collected it".
Data retention & training
Hosting summary
Two things must be kept apart. Investigation data processed in LEAP is not hosted by T3K at all: the platform is installed and run on the customer's own infrastructure, from a downloadable licence key and on hardware the customer buys and maintains. Because the solution is fully containerised, the customer picks the environment, cloud or edge, and therefore the jurisdiction. No data centre and no hosting country is named for the product. Personal data held by T3K itself, meaning website visitors, contacts and customers, falls under the Data Protection Notice, which states that "unless otherwise expressly stated herein, we do not transfer your personal information outside the European Economic Area (EEA)". IT providers and professional advisers are described as EEA-based, and the Austrian Data Protection Authority is named as a possible recipient. Still, no specific country is given. Two caveats concern the website only, not the product: Google Analytics sends visitors' IP addresses to a Google server in the United States, and the site itself runs on Wix behind an anycast node geolocated in the United States.
Things to keep in mind
Risks and trade-offs to weigh before adopting T3K LEAP.
- Automation bias is the main practical risk: LEAP ranks and flags, it does not conclude. The EULA (9.2) itself insists that reading a report calls for a technical and statistical understanding of the criteria as well as an ethical reading, so treating a flag as proof, or an empty result as innocence, misuses the tool
- The technology is supplied AS IS, with no warranty of any kind and no obligation or liability towards the customer, including no indemnity and no support obligation (EULA 9.1) - an investigative dependency on software the vendor is not contractually required to keep working
- T3K is not obliged to develop updates or provide maintenance (EULA 4.3) and may discontinue any version on three months' notice (4.4), which can force a migration on someone else's timetable
- The contract renews itself for a further year unless terminated 90 days before the end of the term (EULA 10.1): a missed diary entry commits the budget for another twelve months
- Anonymised data transmitted to T3K carries a perpetual, irrevocable, worldwide and transferable licence to enhance its products, with no documented opt-out (EULA 11.4), and any feedback, suggestion or idea becomes T3K's property with no consideration (3.4)
- The customer alone answers for the choice, installation, maintenance and performance of the hardware (EULA 4.5) and T3K gives no warranty that the environment is suitable (9.5); the customer must also comply with UN and EU sanctions and Austrian foreign trade rules (12.1.2), while T3K may terminate immediately for misuse and reserves the right to investigate suspected breaches (8.3)
- Check the paperwork before signing: the site gives two different head office addresses (imprint: Lothringerstrasse 16, 1030 Vienna; privacy notice and EULA: Ernst-Melchior-Gasse 24, 1020 Vienna) and three different contact addresses for the same data protection officer
Setup & Integrations
Technical difficulty
High for the rollout, low for daily use. LEAP is a server installation on your own infrastructure, not an online sign-up: Ubuntu Linux 20.04 LTS, a GPU for object recognition, and around 400 GB of storage, NVMe preferred. A small site (5 to 10 medium extractions a day) needs 128 GB of RAM and a Quadro RTX 4000 or better; mid to large sites need 32 cores, 192 GB and an RTX A6000. Containerisation eases cloud and edge adoption, and T3K or the reseller instructs your team at first installation. Hardware choice and performance stay your responsibility.
Deployment
Integrations
Behind T3K LEAP
Fundraising
Social
Resources
All the official URLs gathered for verification and reference.
Frequently asked questions
What is T3K LEAP?
Which extraction formats does it accept?
How much does it cost?
Can I try it before buying?
Who is allowed to buy it?
Where is the data hosted?
Does T3K use customer data?
What hardware does it require?
Is there an API or a mobile app?
Who publishes LEAP?
Should you pick T3K LEAP?
T3K LEAP is a niche tool and makes no secret of it. It is an investigation platform sold to vetted organisations, not a product anyone can sign up for, and the whole purchase path reflects that: a demo form, a credentials check of up to four business days, a quote, then a twelve-month licence. If you are not a law enforcement, intelligence or security body, or a forensics team working for one, the question answers itself.
For those who are in scope, the strengths are concrete. LEAP reads the output of the main extraction tools, so it fits into an existing chain rather than forcing a new one. It runs on your own hardware, which keeps investigation data inside your infrastructure, and its containerisation makes private cloud or edge deployment realistic. The published hardware requirements deserve their own mention: sizing and budgeting a project before contacting a vendor is rare in this market. The GDPR compliance page, the named DPO and the public ethical declaration written into the contract round out a serious European posture.
The reservations are mostly contractual and worth reading before signing. Pricing is entirely opaque. The software is supplied AS IS, with no warranty, no support obligation and no duty to maintain or update it, and any version can be discontinued on three months' notice. Anonymised data you send to T3K falls under a perpetual, irrevocable licence with no documented opt-out, and feedback becomes the vendor's property. The engagement renews itself annually unless you give 90 days' notice. Add a site that contradicts itself on its own head office and DPO addresses, and the picture is of solid engineering wrapped in paperwork that puts almost every risk on the customer. Read the EULA in full, and price the server alongside the licence.
- Choosing a selection results in a full page refresh.
- Opens in a new window.