Scope of Services
Data365 Evidence provides digital evidence preservation and forensic data acquisition.
Service Overview
Scope Details
- Written authorization for access
- Approved scope and timing
- Drives and devices: permitted acquisition methods
- Cloud systems: approved accounts and data scope
- Transfer, return, and delivery instructions
The client approves the scope, authorized sources, permitted methods, and expected deliverables. Data365 assesses each source and selects the technical method within that scope. For drives and devices, the acquisition level also requires client approval. Adding sources, expanding scope, or changing an approved method requires written authorization. If an ownership, access, or scope issue arises, Data365 pauses handling until the authorizing party resolves it in writing.
Outside the Standard Scope
- Legal advice, coverage analysis, claim evaluation, or advocacy
- Substantive content analysis, event reconstruction, attribution, or legal conclusions, including whether a preservation duty existed or spoliation occurred
- Expert analysis or opinions in a report, declaration, or testimony unless authorized under a separate written scope
- Cybersecurity incident response, remediation, or threat hunting
- Password bypass, device unlocking, or covert acquisition
- Destructive testing of original evidence
- Consumer data recovery or non-evidentiary retrieval
Data365 maintains records of preservation, acquisition, custody, and integrity verification. Testimony and other witness services are not included in standard preservation or acquisition services unless expressly stated and require separate scope, scheduling, and fees, subject to availability.