Does it genuinely support APFS?
Not HFS+ with APFS bolted on. Ask specifically about containers, snapshots and clones — those are where weak implementations fail.
Essential
APFS keeps local snapshots automatically, and Time Machine leaves them on the disk itself. A great many Mac recovery cases are solved by restoring one — free, instant, and using something already on your machine.
APFS quietly keeps local snapshots of its own accord. Something deleted this morning is very often still sitting in one, and pulling it back out costs nothing and puts nothing at risk.
All built into macOS, and between them they resolve a substantial share of cases.
Time Machine leaves hourly snapshots on the internal disk, not just on the backup drive — so they exist even when the backup disk is elsewhere. Enter Time Machine and browse back; if a snapshot predates the loss, restore from it and stop reading.
Retains deleted items for 30 days, and the web interface exposes more than the Finder does. Check from another device rather than the affected Mac.
Pages, Numbers, Keynote and many others keep a version history independently of Time Machine. File, Revert To, Browse All Versions.
If none of the above holds what you need, recovery tools become relevant — and the notes below decide whether they can help at all.
The technical reasons Mac recovery differs from Windows, and why older advice does not transfer.
APFS does not overwrite in place. When a file changes, the new data is written elsewhere and the pointers updated — which means superseded versions frequently survive well after the file appears to have changed or gone. That works in your favour, and it is why carving on APFS often returns more than expected.
It also uses containers rather than fixed partitions: several volumes share one pool of free space and grow dynamically. A tool that assumes a rigid partition layout will misread the disk entirely, which is why Windows-era recovery advice and older utilities perform badly here.
And clones complicate the picture — duplicating a file creates a second reference to the same blocks rather than a copy, so apparent duplicates may share storage. Deleting one does not free anything if another still points at those blocks.
The differences between reputable tools matter less than these do.
Not HFS+ with APFS bolted on. Ask specifically about containers, snapshots and clones — those are where weak implementations fail.
You should be able to scan and see your files listed before spending anything. A tool asking you to pay first is asking you to gamble.
On T2 and Apple Silicon the internal storage is soldered and encrypted. Software works while macOS runs; once the board fails, nothing reaches it.
If so, nothing reads the volume without the password or recovery key — not software, not a laboratory. Find the key before buying anything.
The Mac will not start at all. Software has to run somewhere. Where the machine is dead but the storage is removable, the drive is read on separate equipment; on newer Macs, Target Disk Mode or Mac Sharing Mode may still work.
The drive is making noise. Mechanical, and scanning accelerates it.
Soldered storage on a failed board. The flash is encrypted by the security chip and the key died with the board. Nobody recovers this, Apple included.
FileVault without the key. Check your iCloud account or your IT department first — it is escrowed more often than people expect. Where it is genuinely lost we can attempt password recovery, effective on weak or partly-remembered passwords and not on long random ones.
Mac recovery in Manchester is from £300 +VAT where the drive comes out, and £550 +VAT flat for a Fusion Drive. If the diagnostic shows a snapshot would have done it, we say so.
Check for an APFS snapshot before buying any. Time Machine leaves hourly local snapshots on the internal disk, so they exist even without the backup drive attached — and restoring one is free and instant.
Both. Copy-on-write means superseded versions often survive, so carving frequently returns more than expected. But containers and clones confuse tools that assume a rigid partition layout, so APFS support has to be genuine rather than bolted on.
Not directly — software has to run somewhere. Where the storage is removable it is read on separate equipment; on newer Macs, Target Disk Mode or Mac Sharing Mode may still expose the drive to another machine.
Only while macOS still runs. On T2 and Apple Silicon machines the flash is soldered and encrypted by the security chip, so once the logic board fails nothing reaches it — not software, and not a laboratory.
Without the password or recovery key, yes, completely. Check your iCloud account or IT department first, since it is escrowed more often than people expect. Where it is genuinely lost, password recovery can be attempted against weak passwords.
If the Mac runs and the drive is quiet, yes — after checking snapshots, iCloud Recently Deleted and in-app version history, which are free. If the machine is dead or the drive is making noise, no.