Primary contact and authorization
Primary contact and authorization to access identified sources.
Engagement Process
Each matter begins with the sources to be preserved, preservation deadlines, authority, transfer and delivery methods, return instructions, and expected deliverables.
Matter Details Confirmed at Intake
The following information is confirmed during initial intake:
Custodians and sources
The people, devices, accounts, repositories, files, and systems involved.
Preservation deadlines
Deadlines before retention periods expire, access changes take effect, devices are reassigned or replaced, or data is deleted.
Source availability
Current location or access status, including recent repair, reassignment, reset, wipe, or deletion activity.
Transfer and delivery methods
Transfer methods for original devices or media and delivery methods for preserved data.
Return instructions and deliverables
Return instructions for original devices or media and the expected deliverables, including preserved data and matter documentation.
From Intake Through Delivery
1
Initial Intake
Written intake identifies the matter or claim reference, preservation objective, sources involved, preservation deadline, and primary contact.
2
Scope and Authority
Data365 Evidence confirms the approved scope, source availability, access authority, transfer and delivery methods, return instructions, and expected deliverables.
3
Preservation and Acquisition
Data from devices and media is forensically acquired. Mailboxes, cloud repositories, files, and system records are preserved.
4
Matter Documentation
Matter documentation includes the preservation log, transfer records, verification records, return confirmation, and delivery confirmation.
5
Delivery and Return
Preserved data and matter documentation are delivered using the agreed method. Original devices or media are returned as instructed.
Scope Changes
Added sources or revised instructions require approval before preservation extends beyond the existing scope.