Data preservation

Evidence must be preserved to avoid challenges to its integrity when presented in court. Data integrity is paramount in presenting evidence at a court, tribunal or hearing. Like all evidence, digital data needs to be kept as evidentially sound as possible and must be safeguarded against deliberate or accidental access, or from any activity which may change it.

Protecting it is critical and must meet the forensic regulators principles of preserving the original evidence and investigating the data. A third party must be able to reproduce the analyst's actions and achieve the same results.

We use devices that make it impossible for the data to be accidentally changed, as well as other forensic methods to prevent any risk of the evidence being tampered with or altered. Once the data is captured, the original copy can be sealed in a bag for protection, and the copy examined for evidence.