BlueBear

What BlueBear does

BlueBear LES is a privately held Canadian boutique software company founded in 2010 and headquartered in Gatineau, Quebec, that develops forensic software for law enforcement and intelligence communities. The company's flagship product, LACE (Law Enforcement Application for Categorization and Evidence), is a client-server platform designed to process, categorize, and manage large volumes of visual media (images and videos) extracted from confiscated digital devices. Core technical capabilities include automated file carving (via the LACE Forensic Carver add-on), facial biometric extraction and matching, video storyboard decomposition, and a unique multi-investigator Case Allocation feature that allows several investigators to work on the same case simultaneously. The platform claims processing speed of 1 million images in under 2 hours on standard Windows i7 hardware and a ~90% case reduction in manual review requirements, and it supports international hash/visual signature standards including ProjectVic (pVIC), UK-CAID, Interpol ICSE, PhotoDNA, and C4All.

The product portfolio has expanded beyond LACE to include a standalone LACE Forensic Carver, a Carver Plug-in for the Griffeye Analyze platform, and integrations with third-party AI systems such as the Thorn CSAM Classifier (integrated in July 2023) and CameraForensics (integrated in August 2023). BlueBear monetizes through annual subscription licensing with two tiers — a Server + Unlimited Clients model for larger agencies and an affordable Standalone single-user license introduced in 2015 for smaller investigative units. Distribution is via direct enterprise sales and a global reseller network spanning Switzerland, the Netherlands, Japan, Spain, Croatia, Korea, France, and Italy, with demand generation driven primarily by forensic and law enforcement conferences.

The company serves more than 40 law enforcement and intelligence agencies across North America, Europe, Asia, and Oceania, including the Queensland Police Service, Royal Canadian Mounted Police, Interpol, Australian Federal Police, Singapore Police Force, Tokyo Police, and French Gendarmerie, with 10+ years of operational use focused on online child exploitation investigations and intelligence casework. The company is founder-led by CEO Antoine Normand, appears to be bootstrapped with no disclosed institutional investment, and operates with 1-10 employees.

Name

BlueBear

Legal name

BlueBear LES

Website

https://bb-les.ca

Company type

Private

Founded year

2010

Operating status

Operating

Headcount range

1–10 employees

Short description

BlueBear LES is a Canadian software company that develops LACE, a forensic platform used by 40+ law enforcement and intelligence agencies to process, categorize, and manage large volumes of confiscated image and video evidence for criminal investigations.

Ownership category

akta.pro rank

Product category

Digital Forensics Software

NAICS

Software Publishers (5132)

SIC

Services-Detective, Guard & Armored Car Services (7381)

akta.pro industry

PRIMARYBPAKAHAC

Digital Forensics & Evidence Collection (Endpoint, Mobile, Cloud)

Business & Public Services/Security & Investigations Services/Cybersecurity & Digital Forensics Services

SECONDARYBPAIAGAI

Criminal Investigations & Forensics (Detectives, Crime Labs, CSI)

Business & Public Services/Public Sector & Government Administration/Law Enforcement & Public Safety (Police, Fire, EMS)

Keywords

• Forensic software
• Digital evidence processing
• Law enforcement tools
• Image categorization
• Biometric analysis

Headquarters

HQ city

Gatineau

HQ country

Canada

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Operations

Revenue model

1. LACE Software Licenses: LACE software available in two licensing models: (1) Server + unlimited clients model for larger agencies with multiple investigators, (2) Standalone/Single User license for smaller investigative units with one or two investigators. Both include installation, maintenance, updates, support, and training. Annual pricing offered at affordable rates for law enforcement community.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels5 records

Core offering

BlueBear develops and sells LACE, a client-server forensic software solution for law enforcement and intelligence communities that processes, categorizes, and manages massive volumes of visual media (images and videos) seized from confiscated digital devices. The platform automates forensic image and video review, performs facial biometric extraction and matching, and supports multi-investigator collaboration on large cases. The company also offers a standalone Forensic Carver module for digital evidence extraction and integration plug-ins for third-party forensic platforms.

Product overview

BlueBear LES is a Canadian boutique software company providing forensic software solutions for law enforcement and intelligence communities. The flagship product is LACE, a client-server solution for processing, categorizing, and managing massive volumes of visual media evidence. LACE includes automated file carving (via LACE Forensic Carver), biometric face extraction and matching, and case allocation capabilities. The product portfolio also includes the LACE Carver Plug-in for Griffeye Analyze platform, Thorn CSAM Classifier integration, and CameraForensics integration. BlueBear offers both traditional Server + unlimited clients licensing and a more affordable Standalone (single-user) license model, along with a global network of resellers.

Differentiator

Problem solved

Functional benefit

Brands

• LACE: Flagship forensic software solution for carving, processing, analyzing, and managing visual big data. Client-server configuration enabling multiple investigators to work simultaneously on case files with automated categorization of media-evidence files.
• LACE Forensic Carver
• LACE Carver Plug-in for Griffeye

Products and services

• LACE Flagship client-server software solution for processing, categorizing, and managing massive volumes of visual media (images and videos) for law enforcement forensic investigations. Provides automated categorization of seized media files, face extraction and biometric matching, and Case Allocation for multiple investigators to work simultaneously on the same case. Sold in Server + unlimited clients and Standalone (Single User) licensing models.
• LACE Forensic Carver Standalone digital evidence extraction tool that carves images, videos, and text documents from any digital media in a forensically sound manner. Accepts physical drives, Windows directory structures, and forensic image formats (EWF, RAW, SMART, AFF) and produces LIA or Odata JSON output formats for direct import into LACE.
• LACE Carver Plug-in for Griffeye Plugin for the Griffeye Analyze platform that enables the full investigation chain from data extraction through processing and analysis. Data is automatically extracted from devices or forensic containers (E01) and imported directly into Griffeye Analyze as part of the same process.
• Thorn CSAM Classifier for LACE AI-powered CSAM (Child Sexual Abuse Material) classifier integrated into LACE for identifying abuse material. Trained on 100k+ privileged abuse images plus negative examples, with methods for addressing duplicates and false positives and annual retraining. Free to activate within LACE.
• CameraForensics Integration for LACE Integration within LACE that provides access to comprehensive image examination tools. Extracts image metadata, provides intelligence on image origins, and sources related imagery directly within the LACE platform without leaving the software.

Quantifiable outcome

• Process 1 million images in less than 2 hours on common Windows i7 hardware
• +5 more outcomes

Named customers14 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration16 records

AI capability7 records

Feature10 records

Partnerships

Twelve partnerships are on record, tiered core.

• CameraForensicscoreTechnology or Integration · 23 August 2023CameraForensics integration empowers LACE users with greater insight by extracting image metadata, providing additional intelligence on image origins, and sourcing related imagery. Users can seamlessly select images in Bluebear and use CameraForensics to investigate individual or multiple images within the LACE platform without leaving the software.
• ThorncoreTechnology or Integration · 8 July 2023Integration of Thorn CSAM Classifier with BlueBear LACE Solution. The classifier was trained on 100k+ privileged abuse images plus negative examples from public image sets. Methods for addressing duplicates and false positives are integrated. Annual retraining ensures high precision and recall. Available free in BlueBear LACE.
• GriffeyecoreTechnology or Integration · 31 October 2018LACE Carver Plug-in for Griffeye Analyze platform enables users to handle the whole investigation chain from data tracing through processing and analysis. Data is automatically extracted and imported directly into Griffeye Analyze platform. Available on Griffeye Forensic Market.
• BelkasoftcoreTechnology or Integration · 9 November 2016Integration workflow between Belkasoft Evidence Center and LACE enables seamless file transfer between products. Belkasoft exports pictures and videos into LACE native 'lia' format for analysis. Joint solution combines Belkasoft's extraction capabilities with LACE's processing and analysis speed.
• Arina AGcoreChannel Partner/ Reseller/ DistributorSwiss reseller partner for LACE. Organizes and hosts Swiss IT Forensic Investigator Conference and Digital Investigation Conference Vienna.
• Data ExpertscoreChannel Partner/ Reseller/ DistributorReseller partner for LACE in the Netherlands.
• Focus SystemscoreChannel Partner/ Reseller/ DistributorReseller partner for LACE in Japan.
• Insectra Technology ServicescoreChannel Partner/ Reseller/ DistributorReseller partner for LACE in Spain.
• INsig2 Ltd.coreChannel Partner/ Reseller/ DistributorReseller partner for LACE in Croatia.
• JETCO Technology, Inc.coreChannel Partner/ Reseller/ DistributorReseller partner for LACE in Korea.
• TracipcoreChannel Partner/ Reseller/ DistributorReseller partner for LACE in France.
• Yarix Sistemi e Servizi SpAcoreChannel Partner/ Reseller/ DistributorReseller partner for LACE in Italy.

Scale indicators6 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Griffeye: Griffeye's Analyze DI Pro platform is the most direct competitor to LACE in CSAM and visual media triage for law enforcement. The two companies are also technology partners via the LACE Carver Plug-in for Griffeye, highlighting identical customer base and overlapping workflows.
• Magnet Forensics: Magnet AXIOM is a leading end-to-end digital forensics platform used by the same law enforcement customers BlueBear targets. LACE supports Magnet AXIOM output via Odata JSON, indicating direct interoperability and competitive overlap on digital evidence analysis.
• Belkasoft: Belkasoft Evidence Center performs digital evidence extraction and analysis for law enforcement and corporate forensics — closely overlapping with LACE's triage workflow. The two are also integration partners, underscoring their status as complementary direct competitors.
• X-Ways Forensics: X-Ways Forensics is a specialist forensic tool widely used by law enforcement investigators for disk and media analysis. BlueBear's deep integration with X-Ways for pre-categorization and ImageMark calculation shows direct workflow overlap with the same investigator buyer.

Broad incumbents

• MSAB: MSAB (XRY, XAMN) is an established mobile and digital forensics vendor serving law enforcement globally. It competes in adjacent evidence-processing workflows and targets many of the same agency buyers, though with a mobile-first emphasis versus LACE's visual-media focus.
• Cellebrite: Cellebrite is the dominant player in mobile device forensics for law enforcement, with broad evidence-analysis capabilities. While primarily mobile-focused, it competes for the same investigative workflow budgets and could expand into visual-media triage to challenge LACE.
• OpenText (EnCase): EnCase is one of the most established digital forensic suites, used across law enforcement and corporate investigations. LACE is explicitly compatible with EnCase image formats, positioning OpenText as both an integration partner and a deep-pocketed broad incumbent.
• AccessData (Exterro): FTK (Forensic Toolkit) is a long-standing enterprise digital forensics platform now under Exterro, competing for the same agency and corporate investigative budgets. LACE supports FTK image formats as input, confirming direct overlap at the evidence-processing layer.

Emerging players

• ADF Solutions: ADF provides triage and on-scene digital forensic tools for law enforcement and military, targeting similar time-constrained case-workflows. It overlaps with LACE's value proposition of reducing manual review time but at the front-end acquisition stage rather than post-extraction analysis.
• Oxygen Forensics: Oxygen Forensics focuses on mobile, cloud, and computer data extraction for law enforcement. It serves many of the same agency customers as BlueBear, particularly ICE units, and overlaps in the digital evidence processing workflow.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks5 records

Key highlights6 records

Customer concentration

• Facebookfacebook.com/profile.php

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about BlueBear