Services: Digital Evidence Preservation and Forensic Data Acquisition
Digital evidence may need to be preserved before deletion, retention limits, access changes, or device turnover affect its availability. Data365 Evidence provides digital evidence preservation and forensic data acquisition for legal, insurance, and compliance matters involving devices, email, cloud data, and system records.
Matters Involving Digital Evidence
- Coverage disputes and litigated claims: preservation of digital evidence from devices, accounts, and system records when deletion, access changes, or device turnover could affect source availability.
- Litigation holds: preservation of digital evidence before deletion or retention limits remove data, or before device return, reassignment, replacement, or account changes alter access to the source.
- SIU-related matters: preservation of digital evidence involving possible account compromise, record manipulation, unauthorized access, or disputed activity.
- Employee departures and internal matters: preservation of digital evidence from business devices, email, cloud data, and system records before access termination or equipment return.
Core Services
Device Evidence Preservation and Forensic Data Acquisition
Digital evidence preservation and forensic data acquisition from phones, computers, external drives, and removable media.
Cloud and Account Evidence Preservation
Preservation from email accounts, cloud storage, and other online accounts, including provider-generated exports, before retention limits or access changes affect source availability.
System Records and Logs
Preservation of system exports, access logs, authentication logs, application logs, and other identified system records.
Preservation Records
- Written intake and authorization summary
- Preservation log: sources, dates, methods, and notes.
- Custody, transfer, and delivery records: receipt, transfer events, and final delivery.
- Verification record: documentation of verification.
- Preservation summary: source condition, sources preserved, and material limitations.
Matter Intake
Written intake identifies authorization, sources, preservation deadlines, source availability, transfer method, return instructions, and delivery requirements.