waterloosi

The 5 Things a Private Investigator Can Find That Your Client Can't

Thu, 04 Jun 2026 02:19:15 GMT

1. Surveillance That Holds Up

Your client wants to help. They always do.

They've already Googled the opposing party, scrolled through social media, driven past the address, asked around through mutual contacts, and assembled a folder of screenshots they're convinced will change everything.

Some of it is useful. Most of it isn't. And occasionally, the way they gathered it creates problems you now have to manage.

There are five categories of intelligence that a licensed private investigator can develop that your client simply cannot — legally, practically, or both. Here's what they are and why they matter to your case.

Notices from the Fog | Waterloo Security Intelligence | TX PI License C-19041

Your client cannot conduct surveillance on the opposing party. Not effectively, and not safely.

The moment a client follows someone, photographs them, or documents their movements, they create exposure — harassment claims, restraining order applications, and in some cases, criminal complaints. Even if what they capture is accurate, the method poisons the evidence and creates a sideshow that distracts from your case.

A licensed PI conducts surveillance within a strict legal framework. We document location, time, equipment used, and chain of custody for every piece of recorded material. We produce reports written for evidentiary use. We can testify to what we observed.

Your client's cell phone video from a parking lot cannot do any of that.

In family law, surveillance of a spouse's lifestyle or undisclosed income activity is among the most powerful tools available. In criminal defense, surveillance of a complaining witness's behavior and movements can directly support your client's narrative. In civil litigation, documenting a plaintiff's physical activity when they've claimed debilitating injury changes settlement math instantly.

2. Witness Location and Pre-Interview Intelligence

Your client knows who the witnesses are. They do not know where they are, whether they're willing to talk, what they're likely to say, or what their background reveals about their credibility.

A licensed PI can locate witnesses who have moved, changed numbers, or are actively avoiding contact. We can conduct lawful pre-interview contact to assess willingness and get a read on their likely testimony before you commit resources to a formal interview or deposition.

We can also run background intelligence on witnesses — prior criminal history, civil litigation involvement, financial disputes, and public statements — that informs how you approach them and how you challenge their credibility if necessary.

Your client calling a witness directly creates a dozen problems. We handle the contact professionally, document everything, and give you intelligence you can use.

3. Asset and Entity Mapping

Your client suspects the opposing party is hiding money. They may even be right. But suspicion without documentation is just an allegation.

A licensed investigator builds the map. Public records, UCC filings, property records, business entity registrations, assumed name filings, vehicle and watercraft titles — layered together, these sources reveal a financial picture that self-reporting never would.

We identify real property held in related entities. We find business interests that weren't disclosed. We document the gap between claimed income and observable lifestyle. We trace asset transfers that happened before the litigation was filed.

Your client can find some of this with enough time and internet access. What they cannot do is compile it systematically, verify it against authoritative sources, and present it in a format that survives a challenge. We can.

4. Open-Source Intelligence Gathered and Preserved Correctly

Social media is public. Anyone can look at it. But there is a significant difference between a screenshot your client took on their phone and a properly documented OSINT report produced by a licensed investigator.

We capture and preserve digital evidence in a format that documents the source, the date, the method of collection, and the chain of custody. We use professional tools that create verifiable records. We know what metadata matters and how to preserve it.

A post your client screenshotted at 11 PM on a Saturday, from an account they may or may not have accessed through a mutual friend, is a problem waiting to happen. The same content gathered and documented correctly by a licensed PI is evidence.

Beyond social media, OSINT encompasses public forums, news archives, business review platforms, court databases, and professional networks. Properly conducted, it builds a comprehensive picture of a subject's activity, associations, and statements over time — all from lawful, publicly available sources.

5. Intelligence Gathered Under Privilege

This is the one your client absolutely cannot replicate.

When you engage WSI under a Kovel agreement, everything we produce is protected under your attorney-client privilege and work product doctrine. The leads we pursued. The dead ends we documented. The theories we explored and discarded. All of it stays inside your case strategy.

Your client conducting their own investigation has no privilege protection whatsoever. Everything they find, every note they took, every person they contacted — potentially discoverable. In some cases, their investigation becomes a liability rather than an asset.

A licensed investigative firm operating under your direction and within a proper Kovel structure gives you the intelligence you need and keeps it where it belongs — in your hands.

Rob Colvin — (214) 728-8975 rcolvin@waterloosi.com Waterloo Security Intelligence | Addison, Texas | TX PI License C-19041

Notices from the Fog is a publication of Waterloo Security Intelligence. Content is for informational purposes only and does not constitute legal advice.

Talk to Rob Directly

(214) 728-8975 · rcolvin@waterloosi.com · calendly.com/rob-colvin

The Practical Bottom Line

Clients investigate because they're scared, they're motivated, and they want to contribute to their own defense or case. That instinct isn't wrong. The execution usually is.

The most effective thing you can do when a client arrives with a folder of self-gathered intelligence is review it quickly, take what's useful, and redirect their energy toward giving you the information a licensed investigator actually needs to do the job correctly.

The difference between client-gathered information and professionally developed case intelligence is the difference between a hunch and evidence.

Waterloo Security Intelligence provides licensed investigative support to criminal defense, family law, and civil litigation attorneys across DFW and statewide Texas. We operate under Kovel agreements, respond same day, and produce court-ready reports.

How the ARRT™ Intake Sequence Turns Investigation Costs Into a Profit Center for Your Firm

Thu, 04 Jun 2026 02:15:38 GMT

The Intake Problem Most Firms Don't Talk About

Most law firms treat investigative costs as a line item expense. They budget for it reluctantly, approve it case by case, and measure it against what it cost rather than what it produced.

The firms that have restructured their relationship with outside investigators — particularly around intake — have found something different. Done correctly, front-loaded investigative intelligence doesn't just cost money. It makes money.

Here's how.

Notices from the Fog | Waterloo Security Intelligence | TX PI License C-19041

Every case that walks through your door carries an unknown. You don't know what's actually there until you start digging — and by the time you've committed resources, scheduled depositions, and built a litigation strategy, you may be significantly invested in a case that the facts don't support.

This is not a failure of legal skill. It's a structural problem. The information needed to evaluate a case accurately often isn't available at intake — not because it doesn't exist, but because no one has gone to get it yet.

The result is a predictable pattern: cases that looked strong at intake consume resources until the facts emerge that change the picture. Cases that looked complicated at intake get under-resourced until late-breaking intelligence forces a strategy pivot. Both scenarios cost money that proper front-loaded intelligence would have saved.

What ARRT™ Is

The Attorney Rapid Response Toolkit — ARRT™ — is Waterloo Security Intelligence's structured intake intelligence protocol designed specifically for criminal defense, family law, and civil litigation practices.

It is not a menu of investigative services. It is a defined sequence of intelligence-gathering actions executed at the front end of a new matter, before significant legal resources are committed, that produces a foundational intelligence picture within 48-72 hours of engagement.

The sequence is calibrated to the matter type. A new criminal defense case triggers a different intelligence sequence than a new family law matter or a new civil litigation file. The outputs are formatted for integration into your case management system and designed to inform — not replace — your legal judgment about how to proceed.

The Economics of Front-Loaded Intelligence

Here is the math that changes how firms think about investigative costs.

Scenario A — No front-loaded intelligence: A criminal defense matter is taken on at intake based on the client's account. Three weeks of attorney time are invested before a background investigation on the complaining witness reveals a pattern of prior similar allegations that fundamentally changes the defense strategy. The work done in those three weeks isn't wasted, but a significant portion of it has to be redone with the new intelligence framework.

Scenario B — ARRT™ at intake: The same matter triggers an immediate background investigation on the complaining witness as part of the intake sequence. The pattern of prior allegations surfaces within 48 hours. The defense strategy is built correctly from the start. No rework. The investigation cost is $150-300. The attorney time saved is multiples of that.

The pattern repeats across matter types. In family law, early asset intelligence shapes discovery strategy. In civil litigation, early background intelligence on the plaintiff informs settlement decisions. In every case, what you know at the beginning determines how efficiently you work through the middle.

How Firms Are Billing ARRT™ Back to Clients

Here is where investigative costs stop being an expense and become a revenue line.

Many firms that have adopted front-loaded investigative protocols pass those costs through to clients as a standard intake service — not as a discretionary add-on, but as a defined part of the engagement. The intake investigative package is itemized in the engagement letter. The client understands and agrees to it at signing.

When the intelligence is delivered and the case strategy benefits from it — which is most of the time — the client sees the value directly. The conversation about investigative costs shifts from "do we really need this?" to "here's what we found in the first 72 hours."

Firms that bill ARRT™ through to clients typically recover the investigative cost entirely, and in many cases mark it up modestly as a case management service. The net result is that front-loaded intelligence costs the firm nothing and produces demonstrable value for the client.

That's not an expense. That's a service.

The Retainer Structure That Makes It Seamless

The firms that get the most value from ARRT™ are the ones that operate it on a retainer basis rather than case-by-case approval.

Case-by-case approval creates friction. The attorney has to stop, evaluate, request approval from the client, wait, and then initiate the investigation — by which time the 48-72 hour front-loading window has often passed.

A retainer relationship with WSI eliminates that friction. The engagement is pre-authorized for defined intake services up to a defined dollar amount per matter. When a new case comes in that meets the criteria, the intelligence sequence begins immediately. No approval delay. No missed window.

ARRT™ retainer engagements with Waterloo Security Intelligence are structured around your firm's volume, matter types, and intake protocols. The retainer covers a defined set of intake intelligence services per matter, with clear protocols for when additional authorization is needed.

Rob Colvin — (214) 728-8975 rcolvin@waterloosi.com Waterloo Security Intelligence | Addison, Texas | TX PI License C-19041

Notices from the Fog is a publication of Waterloo Security Intelligence. ARRT™ is a trademark of Waterloo Security Intelligence. Content is for informational purposes only and does not constitute legal advice.

Talk to Rob Directly

(214) 728-8975 · rcolvin@waterloosi.com · calendly.com/rob-colvin

What the Sequence Produces

A standard ARRT™ intake package for a criminal defense matter typically includes:

Background investigation on complaining witness or key adverse party
Criminal and civil records search on adverse parties
Social media and OSINT sweep on adverse parties
Address verification and current location confirmation for key witnesses
Preliminary asset overview where financially relevant
Formatted intake intelligence report delivered within 48-72 hours

The exact sequence varies by matter type and is calibrated in the initial retainer discussion. Every output is formatted for your case management system and produced under Kovel privilege protection.

The Conversation Worth Having

If your firm is currently approving investigative work case by case, late in the matter lifecycle, the conversation worth having is not about whether to use outside investigators. You're already doing that.

The conversation is about moving the intelligence earlier, structuring it consistently, and capturing the economic benefit of knowing more, sooner.

That conversation takes 15 minutes.

The Connected PI: How Technology-Driven Investigative Firms Deliver Faster, Better Intelligence

Thu, 04 Jun 2026 02:09:14 GMT

Intelligence Gathering Has Gone Digital — Investigations Should Follow

There is a version of private investigation that still operates the way it did in 1987.

A phone call comes in. Someone writes something on a notepad. A file folder gets created. An investigator drives somewhere, takes some photographs, types up a report on a word processor, and mails it or faxes it to the client. The client files it somewhere and hopes it's still findable when the case goes to hearing six months later.

That version still exists. It is slower, less accurate, harder to integrate with modern legal and claims workflows, and increasingly difficult to defend in court when opposing counsel asks pointed questions about documentation practices and chain of custody.

The investigative firms that are growing — and the ones that serious attorneys and SIU directors are choosing to work with — operate differently. Here is what that difference looks like in practice.

Notices from the Fog | Waterloo Security Intelligence | TX PI License C-19041

The subjects of investigations live significant portions of their lives in digital environments. Their financial activity, their social connections, their physical movements, their business relationships, their public statements — all of it leaves a digital footprint that didn't exist twenty years ago.

An investigative firm that isn't systematically accessing and documenting that footprint is leaving evidence on the table.

Open-source intelligence — OSINT — has become a core competency for serious investigative firms. Properly conducted OSINT produces documented intelligence from publicly available digital sources: social media platforms, professional networks, public records databases, news archives, court filings, business registration systems, and more. It can establish patterns of behavior, identify undisclosed relationships, locate subjects who have moved, and surface financial activity that contradicts sworn representations.

The difference between a firm that can do this and one that cannot is often the difference between a case that settles favorably and one that doesn't.

Data Integration Changes Turnaround Time

The best investigative firms today operate with integrated data access — multiple verified databases cross-referenced in real time to produce accurate, current intelligence quickly.

Locating a subject used to take days. With proper data integration, it takes hours or less. Mapping a subject's property holdings, business interests, and associated entities used to require manual searches across multiple county records systems. Integrated data access compresses that timeline dramatically.

For SIU departments working fraud investigations where timing is critical, this matters enormously. For attorneys working cases with discovery deadlines, it matters even more.

At Waterloo Security Intelligence, we maintain access to enterprise-grade data platforms that provide verified contact information, public records, business intelligence, and behavioral signals across the full spectrum of investigative needs. We don't rely on Google and a county clerk's website. We use the same data infrastructure that enterprise legal and insurance teams use — and we deploy it on your timeline, not ours.

Reporting Has to Work With Your Workflow

A detailed investigation that produces an unusable report is a failed investigation.

Modern attorneys and SIU professionals work in case management systems, litigation platforms, and claims software. They share documents electronically, collaborate with co-counsel and claims teams remotely, and need to integrate investigative reports into existing file structures without manual data entry or format conversion.

An investigative firm that delivers reports as PDFs attached to emails with no indexing, no metadata, and no integration capability creates administrative friction at every step.

Technology-driven investigative firms produce reports in formats designed for integration — clearly structured, electronically searchable, metadata-preserved, and formatted to fit standard legal and claims file structures. We also maintain secure digital file management for active matters, so nothing gets lost between assignment and hearing.

Communication Disciplines Are an Underrated Differentiator

One of the most common complaints attorneys and SIU directors have about outside investigative vendors is communication. Or rather, the lack of it.

Assignment placed. Silence for four days. A report arrives. No update on what was found or not found, no heads-up that the subject wasn't home on day one and the investigator was returning the following morning, no notification that the address of record appears to be outdated.

A technology-enabled investigative firm operates with defined communication protocols. Status updates at defined intervals. Immediate notification when material intelligence is developed or when an assignment encounters a complication that affects the timeline. A documented communication record that becomes part of the case file.

This sounds basic. In practice, it separates the firms that clients come back to from the ones they use once.

Security and Confidentiality in the Digital Environment

Investigative work is inherently sensitive. The intelligence a PI firm develops for an attorney involves privileged case strategy. The intelligence developed for an SIU department involves fraud investigations that, if disclosed prematurely, can compromise the entire case.

A PI firm that handles sensitive client intelligence carelessly — unsecured email, unencrypted file storage, shared platforms with inadequate access controls — is a liability, not an asset.

Technology-driven investigative firms invest in secure communications infrastructure, encrypted file storage, and defined data handling protocols. They can articulate how client intelligence is stored, who has access to it, and what happens to it when the matter closes.

If you've never asked your outside investigative vendor these questions, it's worth asking.

Rob Colvin — (214) 728-8975 rcolvin@waterloosi.com Waterloo Security Intelligence | Addison, Texas | TX PI License C-19041

Notices from the Fog is a publication of Waterloo Security Intelligence. Content is for informational purposes only and does not constitute legal advice.

Talk to Rob Directly

(214) 728-8975 · rcolvin@waterloosi.com · calendly.com/rob-colvin

The Bottom Line

The investigation itself — the surveillance, the records research, the witness location — is table stakes. Every licensed PI firm claims to do those things.

What separates firms in practice is the infrastructure around the investigation: how quickly intelligence is developed, how accurately it's documented, how cleanly it integrates with your workflow, and how reliably the firm communicates throughout the engagement.

Technology-driven investigative firms don't just work faster. They produce intelligence that's more defensible, more integrated, and more useful — from assignment through verdict.

Waterloo Security Intelligence operates with enterprise-grade data infrastructure, defined communication protocols, and reporting formats designed for legal and claims integration. We serve criminal defense, family law, civil litigation, and insurance SIU clients across DFW and statewide Texas.

What Can a Private Investigator Legally Tell You About Your Opposing Party's Finances?

Thu, 04 Jun 2026 02:03:32 GMT

What a PI Can Legally Access

It's one of the most common questions attorneys ask when they first engage a licensed investigator:

"My client believes the opposing party is hiding assets. What can you actually find?"

The answer depends on three things: what's legally accessible, how the information is gathered, and how it will hold up if challenged. As a licensed Texas PI firm working alongside criminal defense, family law, and civil litigation attorneys across DFW and statewide Texas, we get this question regularly. Here's a straight answer.

By Rob Colvin, Chief Intelligence Officer — Waterloo Security Intelligence | TX PI License C-19041

The most reliable financial intelligence comes from public records, and there's more available than most attorneys realize:

Real property records — County appraisal district data shows owned real estate, purchase prices, deed transfers, and mortgage liens. If someone claims they have no assets, property records often tell a different story.
UCC filings — Uniform Commercial Code filings reveal secured interests in business assets, equipment, and inventory. A business owner claiming insolvency while carrying $500,000 in pledged equipment shows up here.
Court records — Judgments, bankruptcies, and civil case histories reveal prior financial disputes, creditor claims, and patterns of financial behavior.
Business entity records — Texas Secretary of State filings show ownership interests, registered agents, and entity status. Shell companies and related-party transactions often surface through careful entity mapping.
Vehicle and watercraft registrations — Title records reveal ownership of vehicles, boats, RVs, and other high-value personal property.
Assumed name filings (DBA records) — Reveals business names operating under an individual's identity that may not appear in standard searches.

What a PI Cannot Do — And Why It Matters

A licensed PI cannot access private financial records without consent or a court order. Bank account balances, credit reports, tax returns, and brokerage statements are not accessible through investigative means — they require subpoena, discovery, or voluntary disclosure.

Any investigator who tells you otherwise is either uninformed or willing to break the law — and either option creates serious problems for your case. Evidence obtained through illegal means is not only inadmissible; it can expose you and your client to sanctions.

At Waterloo Security Intelligence, every investigation is conducted within the bounds of Texas law and applicable federal statutes. We produce court-ready reports that can withstand scrutiny because we build them that way from the start.

The Kovel Advantage — Protecting What We Find

For attorneys who engage WSI under a Kovel agreement, everything we produce is protected under attorney-client privilege. Our work product cannot be subpoenaed, cannot be compelled in discovery, and is disclosed only at your direction.

This matters enormously in asset investigations. When we're building a picture of a party's financial position — mapping entities, documenting lifestyle, tracing asset transfers — that intelligence belongs to your case strategy, not to opposing counsel.

If you're not currently engaging your investigative team under a Kovel structure, it's worth a conversation with your malpractice carrier.

How This Applies to Your Cases

Family Law: Hidden assets in divorce proceedings are among the most common investigative requests we receive. Business interests, real property held in related entities, and lifestyle surveillance are all legitimate tools available to your client.

Civil Litigation: Judgment creditors trying to collect against a party claiming insolvency, or plaintiffs trying to establish a defendant's true financial capacity — these cases benefit significantly from the public record and surveillance work described above.

Criminal Defense: Financial investigations in criminal defense contexts often involve tracing the source of funds, establishing legitimate business activity, or documenting financial patterns that support your client's narrative.

What to Do Next

If you have a case where financial intelligence could change the outcome, a 15-minute conversation with our team costs you nothing and may save your client significantly.

Waterloo Security Intelligence serves criminal defense, family law, and civil litigation attorneys across DFW and statewide Texas. We operate under Kovel agreements, produce court-ready reports, and respond same day.

Call Rob Colvin directly: — (214) 728-8975 Email: rcolvin@waterloosi.com TX PI License C-19041

Waterloo Security Intelligence is a licensed Texas private investigative firm based in Addison, Texas. This blog is for informational purposes only and does not constitute legal advice.

Talk to Rob Directly

(214) 728-8975 · rcolvin@waterloosi.com · calendly.com/rob-colvin

Public Records — The Foundation of Any Financial Investigation

Surveillance and Behavioral Intelligence

Social Media and Open-Source Intelligence (OSINT)

When a party claims financial hardship — reduced income, inability to pay support, business losses — surveillance can document a lifestyle that contradicts those claims. A subject driving a late-model vehicle, dining at high-end restaurants, or operating an undisclosed business while claiming poverty is observable, documentable, and court-admissible when properly gathered by a licensed investigator.

Publicly available social media is a legitimate and increasingly valuable source of financial intelligence. Vacation photos, business announcements, new purchases, and professional network activity can all corroborate or contradict financial representations made in legal proceedings. We document this systematically and preserve it in a format suitable for evidentiary use.

Skip Tracing and Asset Location

When a party has relocated assets, transferred property, or is otherwise attempting to obscure their financial footprint, licensed investigators use lawful skip tracing techniques to locate individuals, identify connected addresses, uncover related entities, and map asset movements across jurisdictions.

What Is a Kovel Agreement and Why Should Every Criminal Defense Attorney Use One?

Thu, 04 Jun 2026 01:55:44 GMT

The Threat Has Become More Personal

The threat landscape for legal professionals has changed.

Attorneys have always operated in an adversarial environment — that's the nature of the work. But the incidents making headlines in recent years represent something different in character and frequency. Attorneys shot in parking garages. Judges targeted at home. Staff threatened in waiting rooms. Clients of opposing counsel showing up unannounced and escalating.

This is not a coastal problem or a big-city problem. It is a Texas problem. It is a DFW problem. And it is a problem that most law firms are not adequately prepared for.

This post is not about creating fear. It is about creating a realistic picture of current threat patterns and practical steps that protect your people, your clients, and your practice.

Notices from the Fog | Waterloo Security Intelligence | TX PI License C-19041

Criminal defense attorneys have always carried some level of personal risk — the nature of the client base creates exposure that other practice areas don't face. But the current climate has broadened that risk profile significantly.

Family law attorneys are increasingly targeted by clients or opposing parties whose lives are being restructured by proceedings they experience as catastrophic. The combination of financial stress, custody loss, and perceived injustice creates a threat profile that was once rare and is now routine.

Civil litigation attorneys involved in high-stakes matters — particularly those representing plaintiffs against well-resourced defendants, or defendants against passionate advocacy organizations — face threats that originate outside the traditional client relationship entirely.

And the political environment has created a category of threat that most law firms have never had to think about: targeted harassment and physical intimidation connected to the causes a firm's clients represent, regardless of the specific legal matter.

The Gaps Most Firms Have

A realistic assessment of physical security at most small and mid-size law firms reveals consistent vulnerabilities:

No threat assessment protocol. Most firms have no formal process for evaluating whether a new client or matter carries elevated physical risk — not legal risk, physical risk. The intake process that screens for conflicts of interest rarely screens for behavioral indicators that suggest a client or opposing party may become dangerous.

Inadequate access control. Waiting rooms accessible from street level with no screening, reception staff with no protocol for escalating concerning behavior, and office layouts that give distressed individuals direct access to attorney work areas are common even in established practices.

No personal protection planning. High-profile attorneys in contentious practice areas often have no protocol for how they move to and from the office, how they handle threats received by phone or email, or what constitutes a reportable incident versus background noise.

Digital exposure feeding physical risk. Attorney home addresses, vehicle information, and daily movement patterns are often easily accessible through public records and social media. A determined individual can develop a detailed picture of an attorney's personal life and routine without leaving their house.

A Practical Framework for Law Firm Security

Security planning for a law practice doesn't require a corporate-grade security program. It requires a realistic assessment of your actual risk profile and proportionate measures that address the genuine vulnerabilities.

Start With a Threat Assessment

Before spending money on hardware or staffing, understand your actual risk. What practice areas create the highest exposure? Which current or recent matters involve parties with behavioral indicators — prior threats, history of violence, documented instability? What does your physical environment look like from an adversary's perspective?

A licensed security professional can conduct a formal threat assessment of your practice environment that identifies vulnerabilities you've likely stopped seeing because you walk past them every day.

Physical Access Control

The goal is not to make your office feel like a courthouse. The goal is to ensure that distressed or threatening individuals cannot access your attorneys, staff, and clients without a point of intervention.

Practical measures include:

Controlled entry with staff screening before waiting room access
Clear sightlines and communication protocols between reception and attorney work areas
Video surveillance at entry points with documented retention policies
Secondary exit options from attorney offices in high-risk practice areas
Secure parking protocols for attorneys in elevated-risk matters

Rob Colvin — (214) 728-8975 rcolvin@waterloosi.com Waterloo Security Intelligence | Addison, Texas | TX PI License C-19041

Notices from the Fog is a publication of Waterloo Security Intelligence. Content is for informational purposes only and does not constitute legal advice or a guarantee of security outcomes.

Talk to Rob Directly

(214) 728-8975 · rcolvin@waterloosi.com · calendly.com/rob-colvin

Personal Security Awareness

High-profile attorneys in contentious matters benefit from basic personal security awareness that most have never been trained in:

Varying daily routines to reduce predictability
Awareness of surveillance indicators — being followed, photographed, or monitored
Protocols for handling direct threats received by phone, email, or in person
Home security baseline assessment for attorneys in matters that generate personal targeting

Digital Footprint Management

Executive Protection for High-Risk Matters

Staff Training and Incident Protocols

The easiest threat mitigation available to most attorneys costs nothing: reducing the publicly accessible personal information that enables targeting.

Opt-out processes for data broker sites, privacy settings on personal social media, and careful management of what appears in public records about home addresses and vehicle information meaningfully reduce the intelligence available to someone seeking to target an attorney personally.

This is not paranoia. It is basic operational security that most attorneys have never thought to apply to themselves.

Your staff are your first line of awareness. A receptionist who knows what behavioral indicators to watch for, how to communicate a concern to an attorney without alerting the subject, and when to call law enforcement versus when to de-escalate — that's a security asset.

Most law firm staff have received no training of this kind. A half-day investment in threat awareness training changes that.

For attorneys in matters that generate direct, credible threats — high-profile criminal defense, contentious custody disputes involving wealthy and volatile parties, civil litigation against organized interests — executive protection is no longer an unusual consideration.

Waterloo Security Intelligence provides licensed executive protection services for attorneys and legal professionals in Texas. This is not bodyguard theater. It is discreet, professional close protection by licensed operators who understand the legal environment and can integrate into your professional life without disruption.

If you are currently involved in a matter where you have received threats, where the opposing party has a documented history of violence, or where the public profile of the case has generated external attention — the time to have this conversation is before an incident, not after.

The Security Assessment Conversation

Most attorneys who read this will recognize at least one vulnerability in their current practice environment. Most will not act on it because the day-to-day demands of a legal practice make it easy to defer security planning indefinitely.

The incident that changes that calculus is the one you don't want to wait for.

Waterloo Security Intelligence conducts law firm security assessments, implements physical security solutions, provides staff threat awareness training, and offers executive protection services for legal professionals across DFW and statewide Texas.

The assessment conversation takes 30 minutes. What you do with it is up to you.

Securing Your Practice: What Every Attorney Needs to Know About Physical Security in Today's Climate

Thu, 04 Jun 2026 01:50:11 GMT

The Origin

Most criminal defense attorneys know what a Kovel agreement is. Far fewer use one consistently — and that gap is costing their clients.

If you're bringing outside investigators, forensic accountants, or technical experts into your cases without a Kovel structure in place, the work product those professionals produce is potentially discoverable. Everything they find, every report they write, every communication they have with you about the case — exposed.

This post is about closing that gap.

Notices from the Fog | Waterloo Security Intelligence | TX PI License C-19041

In 1961, the Second Circuit Court of Appeals decided United States v. Kovel, establishing that attorney-client privilege could extend to third-party professionals hired by an attorney to assist in rendering legal advice. The accountant in that case — Louis Kovel — was employed by a law firm and communicated with clients about tax matters the attorneys needed to understand.

The court's reasoning was straightforward: just as an interpreter doesn't waive privilege by translating a client's words, a professional hired to help the attorney understand complex subject matter doesn't waive privilege by doing their job.

The doctrine has since been applied broadly — to forensic accountants, financial analysts, expert witnesses, and increasingly, to licensed private investigators.

What a Kovel Agreement Actually Does

A properly structured Kovel agreement establishes that the third-party professional — in this case, your investigative firm — is being engaged by you, the attorney, to assist you in providing legal representation to your client.

The work product that professional produces is then protected under your attorney-client privilege and attorney work product doctrine. It cannot be subpoenaed by opposing counsel. It cannot be compelled in discovery. It is disclosed only when and if you choose to disclose it.

Without that structure, a private investigator's reports, surveillance logs, witness interview notes, and communications with you are potentially fair game.

Why It Matters More Than You Think

Consider a criminal defense scenario. Your client is charged with financial fraud. You hire an investigator to trace the flow of funds, document business activity, and locate witnesses who can support the defense narrative.

Without a Kovel agreement, opposing counsel could potentially subpoena your investigator's entire file — every lead followed, every dead end documented, every theory explored and discarded. Your entire investigative strategy is now visible.

With a Kovel agreement in place, that file belongs to your work product. Your strategy stays yours.

The same logic applies in cases involving surveillance of complainants, background investigations of government witnesses, social media intelligence, and asset tracing in financial crime matters.

How to Structure It

A Kovel agreement doesn't need to be complex. At its core it needs to:

Establish that the investigative firm is being retained by the attorney, not the client directly
Specify that the purpose of the engagement is to assist the attorney in rendering legal advice and representation
Make clear that all work product flows to the attorney and is subject to privilege
Include appropriate confidentiality provisions

The retainer or engagement letter between the attorney and the investigative firm should reflect this structure. Billing should flow through the attorney's trust account or be billed directly to the attorney rather than the client.

If you're unsure whether your current investigative engagement agreements accomplish this, have your malpractice carrier or ethics counsel review them. The exposure from getting this wrong is significant.

WSI and Kovel-Protected Engagements

Waterloo Security Intelligence routinely operates under Kovel agreements for criminal defense attorneys across DFW and statewide Texas. Our engagement structure is designed to support privilege protection from the outset — the retainer, the reporting chain, and the billing structure all reflect the Kovel framework.

When we're working your case, what we find stays in your hands.

Surveillance on a complaining witness. Background intelligence on a government informant. Financial tracing in a fraud defense matter. Witness location and pre-interview intelligence. All of it protected — disclosed only at your direction.

Rob Colvin — (214) 728-8975 rcolvin@waterloosi.com Waterloo Security Intelligence | Addison, Texas | TX PI License C-19041

Notices from the Fog is a publication of Waterloo Security Intelligence. Content is for informational purposes only and does not constitute legal advice. Attorneys should consult qualified ethics counsel regarding privilege structures in their jurisdiction.

Talk to Rob Directly

(214) 728-8975 · rcolvin@waterloosi.com · calendly.com/rob-colvin

The Bottom Line

A Kovel agreement is a one-page structural decision that protects everything that follows. If you're engaging investigators without one, you're leaving your work product exposed and your client underserved.

If you'd like to discuss how WSI structures Kovel-protected engagements for criminal defense matters, the conversation takes 15 minutes.

Why Insurance SIU Departments Are Turning to Licensed PI Firms for Surveillance Support

Thu, 04 Jun 2026 01:35:19 GMT

The Capacity Problem Is Real

The pressure on Special Investigations Units has never been higher.

Fraud losses continue to climb. Claim volumes aren't slowing down. Internal SIU staffing is flat or shrinking at most carriers. And the regulatory environment around how investigations are conducted — what's documented, how it's documented, and how quickly — keeps tightening.

Something has to give. Increasingly, what's giving is the assumption that SIU departments can handle everything in-house.

Here's what's driving the shift toward licensed PI firms, and what to look for when you make that call.

Notices from the Fog | Waterloo Security Intelligence | TX PI License C-19041

Most SIU departments are staffed for average volume, not peak demand. When a fraud pattern emerges — staged accidents in a particular corridor, a medical provider billing anomaly, a workers' comp cluster — the workload spikes faster than internal resources can absorb it.

The result is prioritization by default. Cases that should get immediate surveillance get delayed. Delay means the subject resumes normal activity, the window for behavioral documentation closes, and the claim moves toward payment without the intelligence that might have changed the outcome.

Licensed PI firms function as surge capacity. When your SIU team is at maximum load, a qualified outside firm deploys the next business day — sometimes the same day — without the overhead of adding headcount.

Speed Changes Outcomes

In surveillance-dependent investigations, timing is almost everything.

A workers' comp claimant who is genuinely injured behaves consistently over time. A fraudulent claimant is more likely to resume normal physical activity in the early weeks of a claim, before legal counsel advises them to be more careful. That early window is where surveillance produces results.

The same logic applies to liability claims. A plaintiff claiming permanent mobility limitations who is documented playing recreational sports in week three of their claim is a fundamentally different settlement negotiation than one who is documented six months later, after they've been coached and are more careful about their movements.

Licensed PI firms that operate with rapid deployment capability — same-day or next-business-day deployment across a defined service territory — consistently produce more actionable surveillance than firms that require five to seven business days to mobilize.

At Waterloo Security Intelligence, we cover all of Texas with same-day deployment capability. When your SIU team identifies a surveillance target, we move.

Court-Admissible Documentation Is Not Optional

Surveillance that produces compelling footage but falls apart under a Daubert challenge or evidentiary objection is not surveillance — it's wasted money.

Licensed PI firms operating within a proper legal framework produce documentation that includes equipment specifications, operator credentials, chain of custody records, and reports written with evidentiary use in mind from the first frame captured.

An internal investigator operating outside their licensed jurisdiction, or a vendor whose documentation practices don't survive scrutiny, creates exposure that often costs more to manage than the claim would have.

Texas requires licensure for private investigation activity. That licensure carries legal obligations — and legal protections.

When you engage a licensed firm, the investigation is conducted by someone who is accountable to the Texas Department of Public Safety, carries the required insurance, and operates within a defined legal framework.

That accountability matters when opposing counsel starts asking questions.

Geographic Coverage Without Geographic Overhead

A carrier writing policies across Texas cannot staff SIU coverage in every market where claims originate. The economics don't work.

A licensed PI firm with statewide coverage solves that problem without adding headcount in Lubbock, Corpus Christi, El Paso, and the Rio Grande Valley. You make one call to one point of contact, and the investigation deploys wherever the subject is located.

Waterloo Security Intelligence covers the entire state of Texas from our Addison, Texas base. Single point of contact, consistent documentation standards, consistent reporting format — regardless of where the investigation takes place.

What to Look For in an Outside SIU Vendor

Not every licensed PI firm is equipped to support SIU work at the standard carriers require. Here's a short list of what matters:

Licensure and insurance. Current Texas PI license, appropriate liability coverage, and documentation available on request. Non-negotiable.

Rapid deployment. If mobilization takes more than 24-48 hours for standard assignments, the early surveillance window is often gone before they arrive.

Court-ready reporting. Reports should be written for evidentiary use, not internal file notes. They should include equipment details, operator identification, time-stamped documentation, and chain of custody notation.

SIU-specific experience. Workers' comp, auto/bodily injury, property casualty, and liability claims each have their own investigative patterns. A firm that primarily serves attorneys may not understand the SIU documentation requirements and claim file integration that carriers need.

Single point of contact. Coordination overhead compounds quickly when you're managing multiple vendor relationships. A firm that assigns a dedicated contact to your SIU team and maintains consistent communication disciplines is worth paying for.

Notices from the Fog is a publication of Waterloo Security Intelligence. Content is for informational purposes only and does not constitute legal advice or regulatory guidance.

Talk to Rob Directly

(214) 728-8975 · rcolvin@waterloosi.com · calendly.com/rob-colvin

The Retainer Model — Predictable Cost, Priority Access

Many SIU departments are moving toward retainer relationships with outside PI firms rather than per-assignment engagement. The reasons are straightforward:

Priority deployment. Retainer clients get first call when capacity is limited.

Predictable budgeting. Monthly retainer costs are forecastable in a way that per-assignment invoicing is not.

Institutional knowledge. A firm that works your claims over time develops familiarity with your documentation requirements, your reporting formats, and your fraud patterns — which means better investigations with less friction.

Waterloo Security Intelligence offers SIU retainer engagements structured around your team's volume and coverage needs. If you're currently managing outside investigative vendors on a transactional basis and want to discuss what a retainer relationship might look like, the conversation starts with a 15-minute call.

Rob Colvin — (214) 728-8975 rcolvin@waterloosi.com Waterloo Security Intelligence | Addison, Texas | TX PI License C-19041

Insurance Fraud Investigation

Thu, 28 May 2026 04:12:06 GMT

Why SIU Departments Use Outside Investigators

Workers' compensation fraud costs Texas insurers hundreds of millions of dollars every year. For Special Investigations Unit (SIU) directors tasked with controlling those losses, the difference between a denied claim and a paid one often comes down to a single question: did you have the right investigator in the field at the right time?

As a licensed Texas private investigator with over a decade of experience supporting insurance carriers, I want to walk you through exactly how SIU departments deploy field investigators — and what separates documentation that holds up in court from documentation that falls apart at deposition.

By Rob Colvin | Waterloo Security Intelligence | TX License C-19401 | May 2026

"The difference between a denied claim and a paid one often comes down to a single question: did you have the right investigator in the field at the right time?"

How Insurance Companies Use Private Investigators to Fight Workers' Compensation Fraud in Texas

Insurance carriers operate SIU teams internally, but field deployment is a different matter. Sending your own adjusters into surveillance operations creates liability exposure, chain-of-custody complications, and geographic limitations. Licensed private investigators exist precisely to solve that problem.

In Texas, only a licensed PI or a licensed PI agency can legally conduct surveillance on an individual for purposes of an insurance investigation. That's not a technicality — it's the foundation of admissibility. Evidence collected by an unlicensed party is routinely challenged and excluded. Texas Occupations Code Chapter 1702 governs this, and carriers who work with unlicensed vendors pay for it later .

What a Workers' Comp Fraud Investigation Actually Looks Like

When an SIU director refers a suspect workers' compensation claim to Waterloo Security Intelligence, here is what happens from day one:

1. Pre-Surveillance Intelligence

Before a single investigator goes into the field, we conduct digital footprint analysis and social media intelligence on the claimant. In a majority of cases, claimants document their own fraud — lifting equipment, playing sports, working side jobs — on public social media accounts while simultaneously claiming total disability. This intelligence shapes the surveillance plan and reduces wasted field hours.

2. Field Surveillance

Our investigators conduct activity verification and claimant surveillance across all of Texas. Every operation is documented with timestamped video, GPS-confirmed location data, and a detailed field log. We use a 4-hour minimum deployment to ensure meaningful coverage. The standard is simple: if it happened, we capture it in a format that survives cross-examination.

3. Recorded Statements

When the evidence supports a recorded statement, our investigators conduct structured interviews designed for SIU case files. These are not informal conversations — they are legally compliant, strategically structured, and delivered in formats ready for claims review and litigation support.

4. Court-Ready Reporting

Every deliverable from Waterloo Security Intelligence is structured for court from the moment fieldwork begins. That means affidavit-supported documentation, properly authenticated video, and reports organized for claims review and attorney use. The goal is not just to find the fraud — it is to build the case that ends it.

Timestamped, GPS-confirmed surveillance video
Affidavit-supported field reports
Social media intelligence and digital footprint analysis
Recorded statements structured for litigation
Witness location and interviews
Asset and lifestyle investigation

What SIU Directors Should Look for in a PI Partner

Not every licensed PI is equipped to handle insurance SIU work. The documentation standards are higher, the legal exposure is greater, and the clients — carriers, TPAs, and self-insured employers — demand consistency across every assignment. Here is what to look for:

Continuous licensure. A PI who has allowed their license to lapse and reinstated it is a liability. Look for an agency with an unbroken licensure record. Waterloo Security Intelligence has been continuously licensed in Texas since 2013.

Court experience. Has your PI ever been deposed? Have their reports been challenged in court? An investigator who has never sat across from a plaintiff's attorney has never been tested. Our documentation standards are built around that room.

Single point of contact. SIU assignments move quickly. When you need an update at 7 PM on a Friday, you should be able to reach your investigator directly — not a call center or an intake coordinator. Every WSI client has direct access to me personally.

Statewide coverage. Workers' compensation claimants don't stay in one city. Your PI partner needs to be able to deploy anywhere in Texas without creating a logistical problem for you. We cover all of Texas, with out-of-state assignments quoted in advance.

"Every WSI deliverable is structured for claims review, SIU case files, and litigation support from the moment fieldwork begins — not the moment an attorney asks for it."

The Cost of Getting It Wrong

A fraudulent workers' compensation claim that pays out costs your carrier real money. But a botched investigation — one with inadmissible evidence, chain-of-custody gaps, or documentation that falls apart under deposition — costs you more. It validates the claimant's position, exposes your carrier to bad faith allegations, and signals to plaintiff's attorneys that your SIU operation has weaknesses worth exploiting.

The investment in a licensed, court-ready investigator is not a cost center. It is claims control.

Ready to Talk?

If you're an SIU director in Texas looking for a licensed PI partner for workers' compensation fraud, auto and bodily injury claims, or healthcare fraud investigation, I'd welcome a 30-minute call. No intake forms. No call centers. You reach me directly.

About the Author

Rob Colvin — Chief Intelligence Officer, Waterloo Security Intelligence

Licensed Commercial Pilot. Senior Marketing Executive, Dell & AT&T. Retired EMS Paramedic. Licensed Texas Private Investigator since 2013 (License C-19401). Rob founded Waterloo Security Intelligence to provide insurance carriers and SIU departments with field intelligence that is built for court from day one. Based in Addison, TX. Serving all of Texas.

Talk to Rob Directly

(214) 728-8975 · rcolvin@waterloosi.com · calendly.com/rob-colvin

waterloosi

The 5 Things a Private Investigator Can Find That Your Client Can't

1. Surveillance That Holds Up

2. Witness Location and Pre-Interview Intelligence

3. Asset and Entity Mapping

4. Open-Source Intelligence Gathered and Preserved Correctly

5. Intelligence Gathered Under Privilege

Rob Colvin — ﻿ (214) 728-8975 ﻿ ﻿ rcolvin@waterloosi.com ﻿ Waterloo Security Intelligence | Addison, Texas | TX PI License C-19041

Talk to Rob Directly

The Practical Bottom Line

How the ARRT™ Intake Sequence Turns Investigation Costs Into a Profit Center for Your Firm

The Intake Problem Most Firms Don't Talk About

What ARRT™ Is

The Economics of Front-Loaded Intelligence

How Firms Are Billing ARRT™ Back to Clients

The Retainer Structure That Makes It Seamless

Rob Colvin — ﻿ (214) 728-8975 ﻿ ﻿ rcolvin@waterloosi.com ﻿ Waterloo Security Intelligence | Addison, Texas | TX PI License C-19041

Talk to Rob Directly

What the Sequence Produces

The Conversation Worth Having

The Connected PI: How Technology-Driven Investigative Firms Deliver Faster, Better Intelligence

Intelligence Gathering Has Gone Digital — Investigations Should Follow

Data Integration Changes Turnaround Time

Reporting Has to Work With Your Workflow

Communication Disciplines Are an Underrated Differentiator

Security and Confidentiality in the Digital Environment

Rob Colvin — ﻿ (214) 728-8975 ﻿ ﻿ rcolvin@waterloosi.com ﻿ Waterloo Security Intelligence | Addison, Texas | TX PI License C-19041

Talk to Rob Directly

The Bottom Line

What Can a Private Investigator Legally Tell You About Your Opposing Party's Finances?

What a PI Can Legally Access

What a PI Cannot Do — And Why It Matters

The Kovel Advantage — Protecting What We Find

How This Applies to Your Cases

What to Do Next

Call Rob Colvin directly: — ﻿ (214) 728-8975 ﻿ Email: ﻿ rcolvin@waterloosi.com ﻿ TX PI License C-19041

Talk to Rob Directly

What Is a Kovel Agreement and Why Should Every Criminal Defense Attorney Use One?

The Threat Has Become More Personal

The Gaps Most Firms Have

A Practical Framework for Law Firm Security

Start With a Threat Assessment

Physical Access Control

Rob Colvin — ﻿ (214) 728-8975 ﻿ ﻿ rcolvin@waterloosi.com ﻿ Waterloo Security Intelligence | Addison, Texas | TX PI License C-19041

Talk to Rob Directly

Personal Security Awareness

Digital Footprint Management

Executive Protection for High-Risk Matters

Staff Training and Incident Protocols

The Security Assessment Conversation

Securing Your Practice: What Every Attorney Needs to Know About Physical Security in Today's Climate

The Origin

What a Kovel Agreement Actually Does

Why It Matters More Than You Think

How to Structure It

WSI and Kovel-Protected Engagements

Rob Colvin — ﻿ (214) 728-8975 ﻿ ﻿ rcolvin@waterloosi.com ﻿ Waterloo Security Intelligence | Addison, Texas | TX PI License C-19041

Talk to Rob Directly

The Bottom Line

Why Insurance SIU Departments Are Turning to Licensed PI Firms for Surveillance Support

The Capacity Problem Is Real

Speed Changes Outcomes

Court-Admissible Documentation Is Not Optional

Geographic Coverage Without Geographic Overhead

What to Look For in an Outside SIU Vendor

Talk to Rob Directly

The Retainer Model — Predictable Cost, Priority Access

Rob Colvin — ﻿ (214) 728-8975 ﻿ ﻿ rcolvin@waterloosi.com ﻿ Waterloo Security Intelligence | Addison, Texas | TX PI License C-19041

Insurance Fraud Investigation

Why SIU Departments Use Outside Investigators

How Insurance Companies Use Private Investigators to Fight Workers' Compensation Fraud in Texas

What a Workers' Comp Fraud Investigation Actually Looks Like

1. Pre-Surveillance Intelligence

2. Field Surveillance

3. Recorded Statements

4. Court-Ready Reporting

What SIU Directors Should Look for in a PI Partner

The Cost of Getting It Wrong

Ready to Talk?

Rob Colvin — Chief Intelligence Officer, Waterloo Security Intelligence

Rob Colvin — (214) 728-8975 rcolvin@waterloosi.com Waterloo Security Intelligence | Addison, Texas | TX PI License C-19041

Rob Colvin — (214) 728-8975 rcolvin@waterloosi.com Waterloo Security Intelligence | Addison, Texas | TX PI License C-19041

Rob Colvin — (214) 728-8975 rcolvin@waterloosi.com Waterloo Security Intelligence | Addison, Texas | TX PI License C-19041

Call Rob Colvin directly: — (214) 728-8975 Email: rcolvin@waterloosi.com TX PI License C-19041

Rob Colvin — (214) 728-8975 rcolvin@waterloosi.com Waterloo Security Intelligence | Addison, Texas | TX PI License C-19041

Rob Colvin — (214) 728-8975 rcolvin@waterloosi.com Waterloo Security Intelligence | Addison, Texas | TX PI License C-19041

Rob Colvin — (214) 728-8975 rcolvin@waterloosi.com Waterloo Security Intelligence | Addison, Texas | TX PI License C-19041