Cloud Evidence
Cloud Evidence
Cloud evidence can span email, cloud storage, collaboration platforms, and account activity logs. Cloud data can become unavailable as retention periods expire or access changes.
The client approves the scope, preservation methods, and expected deliverables. For cloud systems, the client also approves the accounts and data scope. Data365 Evidence assesses each source and selects the appropriate method. Written approval is required before expanding the scope or using a preservation or acquisition method that has not been approved.
Cloud preservation and acquisition may include:
- Email, cloud storage, and collaboration content
- Platform metadata and account activity logs, where available
Scope and Access Requirements
- Written authorization for access to accounts and repositories
- Approved accounts, repositories, data categories, and date ranges
- Approved preservation methods
- Known access limitations
- Expected deliverables and delivery method
Typical Matter Records
- Preservation documentation
- Authorization record
- Chain-of-custody record
- Acquisition record, including known technical limitations
- Hash verification record, when applicable