How work is performed
A high-level view of how evidence-related work proceeds—from first contact to documented findings—without marketing claims or tool-specific language.
All scope, fees, and authorization are confirmed in writing. Phone discussions are used for clarification only.
Design goals
- Clarity: define objectives and constraints before any technical work begins.
- Integrity: protect original materials and avoid unnecessary alteration.
- Repeatability: record steps so findings can be reviewed and explained.
- Conservatism: state assumptions and limitations plainly.
1) Intake & screening
Work starts with written intake. The goal is to understand what question the evidence must answer, relevant deadlines, and any constraints that affect handling.
- Identify media types and condition at a high level
- Flag risks (encryption, fragility, prior handling)
- Determine whether the request fits within scope
2) Scope definition
Before proceeding, scope is defined in writing so expectations are aligned.
- Objectives and deliverables
- Handling and transfer method
- Fees and timing
No work begins until scope and terms are accepted.
3) Evidence-aware handling
When materials are received, they are documented and handled in a manner appropriate to the engagement.
- Identification and labeling
- Separation of originals and working copies where feasible
- Verification steps appropriate to the task Evidence handoff details ↓
4) Analysis
For cloud-hosted sources, data capture is performed using provider export/admin tools (or approved APIs) under written authorization. Collected exports are logged and verified where feasible, and the engagement scope is limited to the agreed objectives.
Analysis is performed against the defined objectives, focusing on relevance and reliability rather than exhaustive exploration.
- Review of data artifacts relevant to the question
- Consistency and timeline checks
- Documentation of observations
5) Reporting
Findings are summarized in clear language, with methods and limitations described.
- What was examined
- What was found
- What could not be determined and why Evidence handoff details ↓
6) Review & follow-up
Questions and clarifications are addressed within the agreed scope. Any expansion of work is discussed and approved in writing.
- Clarifying questions from counsel or stakeholders
- Supplemental notes if needed
- Orderly close-out per agreed terms
Evidence handoff
Devices or storage media are transferred by appointment.
In-person handoff within the greater Boston area is available by scheduled meeting.
Shipped submissions are accepted when appropriate.
All transfers are documented in chain-of-custody records to preserve evidence integrity.
Important notes
- This page is descriptive, not contractual.
- No guarantees of outcome or admissibility are made.
- Legal advice is not provided.
For boundaries and exclusions, see Scope & Limitations.