Devices and media
Forensic images and other preserved data acquired from devices or media.
Deliverables
Preserved data is accompanied by custody, verification, and delivery records. Delivery method, destination, and authorized recipient are confirmed in advance.
Forensic images and other preserved data acquired from devices or media.
Preserved data from mailboxes, cloud accounts, and shared repositories.
Files, logs, and system records preserved from applications, systems, or repositories.
Preserved data is delivered on physical media or through secure transfer.
Written intake includes the primary contact, authorization, approved scope, sources, preservation deadlines, and expected deliverables.
Sources preserved, preservation dates, and methods used.
Receipt, transfer, return, and delivery of devices, media, and preserved data.
Verification method and results are documented.
Authorized recipient, delivery destination, and delivery method are confirmed in advance.
Folder structure and naming conventions are established for delivery.
Return, retention, or destruction instructions are confirmed in advance.
Site note: Data365 Evidence provides digital evidence preservation and forensic data acquisition under written authorization and an approved scope. These services do not include legal advice, coverage analysis, claim evaluation, or advocacy. Expert opinion, testimony, or later substantive analysis, if required, must be separately retained under written terms.