Data365 Evidence Digital evidence preservation

Digital Evidence Handling & Matter Records

Data365 preserves digital evidence and performs forensic data acquisition only when authorized in writing.

Evidence Handling

Authorized access

Access is limited to identified sources and the approved scope.

Transfer and delivery

Transfers and deliveries are restricted to designated recipients.

Disposition

The original device or media is returned after preservation. Any retention of preserved data is defined in the engagement terms. Retention and disposition instructions are established by the client or counsel; Data365 does not determine legal retention obligations. Where destruction is authorized, the device or media is transferred to an agreed-upon destruction provider.

Matter Records

Authorization and scope

Matter records document authorization, approved scope, and access limits.

Preservation record

The record identifies preserved sources, preservation dates, and methods used.

Chain of Custody

For physical devices and media received by Data365.

Integrity verification

Integrity is verified using hash values for preserved images, exports, or transferred files.

Data365 Evidence provides digital evidence preservation and forensic data acquisition under written authorization and within an approved scope. These services do not include legal advice, coverage analysis, claim evaluation, substantive content analysis, event reconstruction, attribution, advocacy, or legal conclusions. Written factual declarations or limited written technical opinions concerning preservation or acquisition performed by Data365 may be included in the engagement or authorized later in writing. Data365 does not voluntarily participate in depositions, hearings, or trials. Any subpoena, court order, or other legal process is handled in accordance with applicable law.