Matter Contact and Access Authority
Primary contact and written authorization for access.
Engagement Process
Digital evidence may change or become unavailable before preservation.
Written intake confirms the sources, approved scope, approved preservation methods, preservation deadlines, authority for access, and expected deliverables.
Matter Details Confirmed at Intake
Custodians and Sources
Custodians and sources covered by the engagement are confirmed.
Preservation Deadlines
Timing constraints are recorded.
From Intake Through Delivery
1
Initial Intake
Written intake identifies the matter, sources involved, preservation deadlines, and primary contact.
2
Scope and Authority
The client approves the scope, preservation methods, and expected deliverables. Authorization for access is also confirmed. For drives and devices, the client also approves the permitted acquisition methods. For cloud systems, the client approves the accounts and data scope.
3
Source Assessment and Method Selection
Data365 Evidence assesses each source and selects the appropriate method. For drives and devices, Data365 uses a client-approved acquisition method. For public website content, Data365 selects the capture method.
4
Matter Documentation
Preservation, acquisition, and chain-of-custody records are maintained.
5
Delivery and Return
Data365 delivers the preserved data and matter records and returns any original devices or media.
Changes Requiring Written Approval
Written approval is required before adding sources, expanding the scope, or using a preservation or acquisition method that has not been approved.