Forensic Tool Can Reconstruct Deleted AI Conversations from Device Memory

Georgia Tech researchers created ORISA, a forensic tool capable of recovering deleted AI chat data from local phone memory by reconstructing fragmented information. The tool successfully retrieved more data than was accessible during the original session in testing, highlighting the limitations of deletion as a privacy measure. While designed for investigators, the research raises concerns about the true privacy of on-device AI interactions.

ORISA leverages the residual traces of AI-generated data stored in a device’s volatile memory, even after deletion through standard app interfaces. The tool’s success in recovering more facts than were accessible during the original session underscores how local AI models manage memory dynamically, often discarding older data to prioritize active interactions. This fragmentation leaves behind recoverable remnants that ORISA can reconstruct using pattern recognition and memory mapping techniques.