Magnet Axiom is the analysis platform from Magnet Forensics, used by examiners to parse and interpret the data that acquisition tools (Cellebrite UFED, GrayKey) extract. Acquired Grayshift in 2023, consolidating two of the three dominant US-market forensic vendors under one corporate roof. Customer base: federal and state law enforcement, corporate forensic firms, civil-litigation e-discovery providers.
What it means in practice
The acquisition tool produces the forensic image; Axiom produces the report. The platform parses iOS and Android databases (Messages, WhatsApp, Signal, Telegram, Snapchat, dozens of others), reconstructs deleted records where possible, builds timelines across multiple data sources, correlates locations from photos and app-data, and produces the courtroom-ready report formats (PDF reports, KML files for mapping, CSV for further analysis). The interpretive layer is where most evidence becomes useable: an examiner without Axiom (or comparable: Cellebrite Reader, MOBILedit, Oxygen Forensic) has a pile of bytes; an examiner with Axiom has reconstructed conversations and behavioral patterns.
Who uses it, and against whom
Operated by: every US federal forensic lab, most large state police digital-forensic units, the major corporate-forensics firms (Stroz Friedberg, Kroll, FTI, Kivu), and the civil-litigation e-discovery sector handling high-asset divorces and corporate disputes. Against whom: anyone whose device produced a forensic image. Family-court forensics (the growing market segment) often involves Axiom analysis of phones surrendered under court order, with the resulting timeline becoming evidence in custody and asset-division proceedings. Predaxia’s editorial frame: Axiom is the tool that turns “we have the device” into “we have the case”; understanding what it reconstructs determines what the user should not have left on the device.
What you can change today
The structural defense is content minimization. End-to-end encrypted messengers with disappearing messages on (the conversation that does not exist on the device cannot be reconstructed by Axiom), cloud-storage of sensitive material with local copies wiped after each session, photo libraries that do not retain a forensic timeline of every place visited (review and curate routinely). For high-conflict-divorce or custody scenarios specifically: assume the phone you carry today may be in a forensic lab in 12 months; the operational planning works backward from that assumption. The lawyer’s privilege protects the conversation with the lawyer; it does not protect the photo of the new apartment that landed in the camera roll the same week.