Devices and media
Forensic images and other preserved data acquired from devices or media.
Deliverables
Preserved data is accompanied by custody, verification, and delivery records. Delivery method, destination, and authorized recipient are confirmed in advance.
Forensic images and other preserved data acquired from devices or media.
Preserved data from mailboxes, cloud accounts, and shared repositories.
Files, logs, and system records preserved from applications, systems, or repositories.
Preserved data is delivered on physical media or through secure transfer.
Written intake includes the primary contact, authorization, approved scope, sources, preservation deadlines, and expected deliverables.
Sources preserved, preservation dates, and methods used.
Receipt, transfer, return, and delivery of devices, media, and preserved data.
Verification method and results are documented.
Authorized recipient, delivery destination, and delivery method are confirmed in advance.
Folder structure and naming conventions are established for delivery.
Return, retention, or destruction instructions are confirmed in advance.
Data365 Evidence provides digital evidence preservation and forensic data acquisition under written authorization and within an approved scope. These services do not include legal advice, coverage analysis, claim evaluation, substantive content analysis, event reconstruction, attribution, advocacy, or legal conclusions. Written factual declarations or limited written technical opinions concerning preservation or acquisition performed by Data365 may be included in the engagement or authorized later in writing. Data365 does not voluntarily participate in depositions, hearings, or trials. Any subpoena, court order, or other legal process is handled in accordance with applicable law.