Preservation and acquisition
Preservation and Acquisition Methodology
Data365 Evidence selects and documents preservation and acquisition methods within the approved scope.
Methodology Overview
The client approves the sources, scope, expected deliverables, and access authority. Adding a source or expanding scope requires written approval.
Technical Basis
Method selection reflects source type, source condition, available access, and the approved scope.
Matter Records
- Intake and scope record
- Preservation or acquisition record
- Chain-of-custody record
- Integrity-verification record
Handling Principles
- Limited handling. Data365 Evidence limits handling of devices and media to what is necessary for the authorized preservation or acquisition.
- Documentation. Data365 Evidence records the methods used, integrity-verification results, and known technical limitations.
- Delivery and return. Data365 Evidence delivers preserved data and matter records as specified and returns devices and media as agreed.