Scope of Services
Data365 Evidence provides digital evidence preservation and forensic data acquisition.
Service Overview
Scope Details
- Written authorization for access
- Approved scope and timing
- Drives and devices: permitted acquisition methods
- Cloud systems: approved accounts and data scope
- Transfer, return, and delivery instructions
The client approves the scope, preservation methods, and expected deliverables. For drives and devices, the client also approves the permitted acquisition methods. Data365 Evidence assesses each source and selects the appropriate method. For drives and devices, Data365 uses a client-approved acquisition method. Written approval is required before adding sources, expanding the scope, or using a preservation or acquisition method that has not been approved. If an ownership, access-rights, or scope issue is identified, Data365 pauses handling until the authorizing party confirms resolution in writing.
Excluded Services
- Legal advice, coverage analysis, claim evaluation, or advocacy
- Substantive content analysis, event reconstruction, attribution, or legal conclusions
- Broad expert-witness services
- Voluntary deposition, hearing, or trial appearance
- Cybersecurity incident response, remediation, or threat hunting
- Password bypass, device unlocking, or covert acquisition
- Destructive testing of original evidence
- Consumer data recovery or non-evidentiary retrieval
Written factual declarations or limited written technical opinions concerning preservation or acquisition performed by Data365 may be included in the engagement.