Data Preservation and Collection

Data Preservation

Preservation can be tricky to navigate in this ever-changing digital landscape. Data discovery often spans across multiple platforms — an important aspect to understand because it is the critical first step in a case. Implementing proper preservation techniques when dealing with the extensive number of devices and cloud storage solutions used in business operations is crucial.

Forensic Discovery works with its clients and their IT teams to help identify the scope of data to be preserved, while employing defensible techniques and tools to insure the integrity of the data. Our team also helps oversee and document the process. We aid our clients in meeting their “duty to preserve” by verifying that no potentially relevant data are inadvertently destroyed or altered.

Data Collection

Proper data collection builds the solid foundation for evidence to be used in discovery. The integrity of the data must be preserved, the data must be in a usable format, and — most importantly — can possibly be admitted as evidence. Whether evidence resides on a computer, mobile device or in the cloud, Forensic Discovery uses best practices to ensure that the data collected passes any potential admissibility challenges by opposing counsel. Forensic Discovery prides itself in presenting data in the most practical format for review purposes.

Preserving PDF Evidence

PDF documents require special attention during data preservation and collection. Critical metadata and hidden content can be lost if documents aren’t handled properly.

Our PDF Evidence Collection Process:

• Metadata Preservation – Every PDF contains metadata about authorship, creation dates, and software used. We preserve this critical forensic information.
• Hidden Content Discovery – PDFs may contain hidden attachments, comments, or layers not visible in standard viewers.
• Version Control – PDF save history can reveal document evolution and potential manipulation.
• Forensic Integrity – We maintain chain of custody and ensure documents remain admissible as evidence.

Learn more in our comprehensive PDF forensics guide.