Cloud Evidence
Cloud Evidence
Cloud evidence can span email, cloud storage, collaboration platforms, and account activity logs. Cloud data can become unavailable as retention periods expire or access changes.
The client approves the scope, authorized accounts, permitted methods, and expected deliverables. Data365 Evidence assesses each source and selects the technical method within that scope. Written approval is required before adding accounts, expanding scope, or changing an approved method.
Cloud preservation and acquisition can include:
- Email, cloud storage, and collaboration content
- Platform metadata and account activity logs, where available
Scope and Access Requirements
- Written authorization for access to accounts and repositories
- Approved accounts, repositories, data categories, and date ranges
- Permitted preservation methods
- Known access limitations
- Expected deliverables and delivery method
Typical Matter Records
- Preservation documentation
- Authorization record
- Chain-of-custody record
- Acquisition record, including known technical limitations
- Hash verification record, when applicable