Evidence Policy

Preserve originals. Record changes. Control access.

The evidence system is designed to retain original filenames as metadata, generate randomized storage names, calculate cryptographic hashes, restrict downloads, and record custody and access events.

Evidence controls

Production procedures should be reviewed by legal counsel, evidence specialists, and relevant institutional authorities.

Original preservation

Source files are retained without destructive conversion; derivatives are identified separately.

File validation

Files are checked by detected MIME type, size limits, extension policy, and malware controls available on the host.

Hashing and identifiers

A SHA-256 value and unique internal identifier are recorded for each accepted file.

Restricted delivery

Files are served through authorization checks rather than direct public URLs.

Chain-of-custody record

Every physical or digital custody event should identify who acted, when, where, under what authority, and whether condition or packaging changed.

01

Receive

Document source, time, method, and initial condition.

02

Identify

Assign object, case, evidence, and storage identifiers.

03

Secure

Apply access, packaging, and storage controls.

04

Transfer

Record sender, recipient, authorization, time, location, and receipt.

05

Verify

Confirm condition, seals, files, and custodial acceptance.