Document Integrity Verification

Job ID: 40515913

Budget: £250 – £750 GBP

Position: Freelance Expert Witness – Microsoft Word Document Forensics

Engagement: One-time independent technical verification of three Microsoft Word document versions

This project requires independent technical verification of multiple Microsoft Word document versions arising from an alleged deliberate alteration of a Subject Access Request (SAR) submitted by Parmjit Singh Flora to Carlisle College (NCG) on 25 February 2025 at 12:54.

Documents for Analysis:

Original (orig): The applicant's final SAR (dopdocument4.docx, 292.8 KB), containing inclusion language requesting data "that pertain to my health, behaviors, and ethnicity."

Version 1 (v1): 2025-02-25 SAR Clarification.docx (31.7 KB), sent by Rajan Takhar at 15:09 on 25 February 2025, containing yellow-highlighted text reversing Section 7 from inclusion to exclusion.

Version 2 (v2): 2025-02-25 SAR Clarification.docx (29.8 KB), sent by Mal Gorajek at 10:31 and again at 11:17 on 10 March 2025, containing green strikeout formatting through the applicant's original words.

Untitled MIME Metadata Files: System-generated email export files (61.2 KB) preserving cryptographically authenticated email headers, DKIM signatures, TLS encryption records, and creation/modification timestamps.

Forensic Issues to Address:

Semantic reversal – Verify the 180-degree change from inclusion to exclusion in Section 7.

Review Pane anomaly – Confirm that Section 7 has no annotation in Microsoft Word's Review Pane despite visible body-text highlighting, indicating the audit trail was bypassed.

File size discrepancy – Explain the 5.7% reduction (31.7 KB to 29.8 KB) between versions where neither contains an image.

Metadata authentication – Verify that the preserved MIME metadata confirms the email chain's authenticity, internal DPO-to-DPO routing, and a ~10-minute active modification window on 10 March 2025.

Colour change – Analyse the strategic transformation from yellow highlighting (25 February) to green strikeout (10 March).

Confirm whether the temporal information from the metafile supports the tampering of the original SAR.

Deliverable: A detailed forensic report summarising findings on text content, metadata integrity, annotation trails, file-size anomalies, and any signs of deliberate tampering, suitable for use in Employment Tribunal and Information Commissioner's Office proceedings.