Capabilities
The operating system for investigators.
Ardence is an all-source investigation environment that brings data and specialist expertise into one place. Teams can move from an initial lead to a concrete finding they can explain and defend.

Ardence helps investigators.
Find
Surface the networks, organizations, and activity that matter
Understand
Connect the evidence and follow the wider network
Disrupt
Support action across freezes, subpoenas, and infrastructure takedowns
See an investigation in action.
See the same Ardence capabilities applied in different scenarios.
- Fraud Network
- Critical infrastructure threat
- Sanctions Evasion
Start with a question, account, organization, address, domain, or other lead


Review and approve the investigation plan

Save investigation prompts to reuse and share
Start with a question, account, organization, address, domain, or other lead
Review and approve the investigation plan
Save investigation prompts to reuse and share
Start with a question, account, organization, address, domain, or other lead
Review and approve the investigation plan
Save investigation prompts to reuse and share
Reach across sources.
Investigate using built-in tradecraft developed by TRM experts.

Bring all-source intelligence into one investigation.

Follow multiple leads at once.

Tap into the Ardence Data Network.
Ardence brings intelligence from TRM and specialized data providers into one investigation under a single Ardence contract.¹ Teams can follow connections across sources without negotiating separate provider contracts or assembling and maintaining the sources themselves.
¹ Note: Provider availability varies by customer and jurisdiction. Supplemental terms may apply.
Build the picture.
Resolve entities across sources and graph their connections.

Explore connections between entities.

Focus on the most relevant entities and connections.

Stand behind every finding.
Inspect the evidence behind each statement Ardence makes.

Trace evidence to its source, provider, retrieval time, and API response.

Compare evidence to see where sources agree, differ, or conflict.

Share the full investigation as a sourced report or graph data.

Put Ardence to work.
Schedule repeat investigations and receive only new or changed findings.
Run investigations in parallel.
Set tool approvals and available AI models.
Don’t just investigate.Disrupt.

Issue infrastructure takedown requests.
Send requests to take down domains, servers, accounts, and other infrastructure connected to the threat.
Draft legal process and review returns.
Prepare subpoenas and related requests, then receive and review returns in the investigation.
Issue asset-freeze requests.
Send requests to freeze connected assets with the supporting financial evidence attached.
Don’t just investigate.Disrupt.

Issue infrastructure takedown requests.
Send requests to take down domains, servers, accounts, and other infrastructure connected to the threat.
Draft legal process and review returns.
Prepare subpoenas and related requests, then receive and review returns in the investigation.
Issue asset-freeze requests.
Send requests to freeze connected assets with the supporting financial evidence attached.
Customer feedback
Why users love Ardence.
Explore all missions.
Get Started
