1 · BEFORELoose files, messages and screenshotsGetInstantProof guide
How to preserve digital evidence
Keep original digital files, capture context and dates, avoid destructive editing, make secure backups and record how each item was obtained. Use separate working copies for annotation, redaction or presentation.
General information only — not legal advice · Reviewed 2 October 2026
General organisation guideChoose country and region before relying on jurisdiction-specific legal steps or deadlines.
Choose locationBEFORE → AFTER
Turn scattered material into a record another person can follow.
1 · BEFORELoose files, messages and screenshots
2 · ORGANISEPreserve the source
3 · AFTERChronology, index and known gaps Before: lots of files, no story After: indexed, dated and reviewable
Preserve the source
Keep the original file, export or message record before editing, renaming or converting anything.
Capture context
Record the platform, account, participants, URL, device or surrounding conversation where relevant.
Use secure backups
Keep a protected second copy so accidental deletion or device failure does not destroy the only record.
Record acquisition
Note when and how you obtained the file and whether it was supplied by another person.
Do not bypass security
Never hack, impersonate, access another person's private account or defeat access controls to collect material.
Important limitation
This is organisation guidance, not forensic evidence-handling certification. Legal preservation duties vary by matter and jurisdiction.
Continue the journey
Use the right tool for the next job
Common questions