Cyber security activity on laptop

We need to understand if a former employee has deleted any files that were present on his company laptop and possibly restore the files, as well as having proof of the deletion activity. The work should be done completely remotely, so you should log into the company PC remotely. Since it is an official action, I need a person who has all the requirements and certifications required by European cybersecurity.