Device Forensics & Preservation

Boston-based, serving clients nationwide by appointment.

Data365 Evidence provides device evidence preservation and forensic data acquisition for phones, computers, servers, and storage media.

Device data may change or become unavailable before preservation. Preservation may therefore precede decisions related to later review.

Preservation and acquisition remain within the approved scope. Substantive analysis is outside this service.

Typical Sources

  • Mobile devices
  • Computers and servers
  • Storage systems and media

Scope and Method Selection

The client approves the extent of acquisition. Data365 Evidence assesses the device or media and selects the appropriate method within that scope. Further written approval is required if Data365 determines that acquisition beyond the approved extent is warranted.

Typical Matter Records

  • Intake and scope record
  • Preservation or acquisition record
  • Chain-of-custody record
  • Integrity-verification record

This service does not include substantive interpretation of device content or opinions about what the evidence proves.