Scope of Services
Data365 Evidence provides digital evidence preservation and forensic data acquisition.
Service Overview
Scope Details
- Written authorization for access
- Approved scope and timing
- Drives and devices: permitted acquisition methods
- Cloud systems: approved accounts and data scope
- Transfer, return, and delivery instructions
The client approves the scope, preservation methods, and expected deliverables. For drives and devices, the client also approves the permitted acquisition methods. Data365 Evidence assesses each source and selects the appropriate method. For drives and devices, Data365 uses a client-approved acquisition method. Written approval is required before adding sources, expanding the scope, or using a preservation or acquisition method that has not been approved. If an ownership, access-rights, or scope issue is identified, Data365 pauses handling until the authorizing party confirms resolution in writing.
Outside the Standard Scope
- Legal advice, coverage analysis, claim evaluation, or advocacy
- Substantive content analysis, event reconstruction, attribution, or legal conclusions
- Expert analysis or opinions, whether provided in a report, declaration, or testimony, unless separately scoped in writing
- Cybersecurity incident response, remediation, or threat hunting
- Password bypass, device unlocking, or covert acquisition
- Destructive testing of original evidence
- Consumer data recovery or non-evidentiary retrieval
Data365 maintains records of the preservation, acquisition, custody, and technical verification activities it performs. When appropriate, testimony concerning those activities, the processes it used, and related records may be separately arranged. Voluntary witness services are not included in standard preservation or acquisition services unless expressly stated. They may be separately arranged, subject to availability, scope, scheduling, and additional fees.