Digital Evidence Preservation
Boston-based, serving clients nationwide
Digital evidence preservation and forensic data acquisition for legal, insurance, and compliance matters.
Digital evidence may change or become unavailable before preservation. Hence, preservation may precede decisions related to later review.
Authorization and Scope
Data365 Evidence performs preservation and forensic data acquisition under written authorization and within an approved scope.
- The client approves the scope, preservation methods, and expected deliverables.
- For drives and devices, the client also approves the permitted acquisition methods.
- For cloud systems, the client approves the accounts and data scope.
- Data365 Evidence assesses each source and selects the appropriate method. For drives and devices, Data365 uses a client-approved acquisition method.
- Written approval is required before adding sources, expanding the scope, or using a preservation or acquisition method that has not been approved.
Digital Evidence Sources
- Devices and media
- Cloud-hosted data
- System, access, and application records
- Public website content
Preservation Controls
- Original sources are handled only as necessary for preservation or acquisition.
- Integrity-verification results are recorded for preserved images and exports.
- Chain-of-custody records are maintained through final delivery or return.
Matter Records
- Intake and scope record
- Preservation or acquisition record
- Chain-of-custody record
- Integrity-verification record
Preservation Planning Resources
After Preservation
Preserved data and matter records can be delivered to counsel or another designated professional.