Data365 Evidence Digital evidence preservation

Digital Evidence Handling & Matter Records

Data365 preserves digital evidence and performs forensic data acquisition only when authorized in writing.

Evidence Handling

Authorized access

Data365 limits access to identified sources and the approved scope.

Transfer and delivery

Data365 transfers and delivers preserved materials only to designated recipients.

Disposition

Data365 returns original devices or media after preservation unless written instructions provide otherwise. Written engagement terms govern retention and disposition of preserved data. The client or counsel sets those instructions; Data365 does not determine legal retention obligations. When destruction is authorized, Data365 transfers the device or media to the agreed destruction provider.

Matter Records

Authorization and scope

Matter records document authorization, approved scope, and access limits.

Preservation record

The record identifies preserved sources, preservation dates, and methods used.

Chain of Custody

Data365 maintains chain-of-custody records for physical devices and media in its custody.

Integrity verification

Integrity-verification records include hash values for preserved images, exports, or transferred files.