Device Forensics & Preservation

Boston-based, serving clients nationwide by appointment.

Data365 Evidence provides device evidence preservation and forensic data acquisition for phones, computers, servers, and storage media.

Device data can change or become unavailable. A decision on substantive review can follow preservation.

Preservation and acquisition remain within the approved scope. Substantive analysis is outside this service.

Typical Sources

  • Mobile devices
  • Computers and servers
  • Storage systems and media

Scope and Method Selection

The client approves the acquisition level. Data365 Evidence assesses the device or media and selects the technical method within that scope. Written approval is required before changing the approved acquisition level.

Typical Matter Records

  • Intake and scope record
  • Preservation or acquisition record
  • Chain-of-custody record
  • Integrity-verification record

This service does not include substantive interpretation of device content or opinions about what the evidence proves.