Subject tracking, evidence chains, surveillance timelines, and connection mapping.
Investigations are about connections. Who knows whom, who was where, who communicated with whom and when. Your current tools are scattered — notes in one place, timelines in another, maps in a third. And any cloud-based tool creates a data trail that could be subpoenaed from the vendor.
Link analysis, timeline reconstruction, location mapping, evidence chains. One encrypted file that never touches the cloud.