E-Discovery
E-Discovery describes the process by which information is recovered from corporate networks, usually to answer the demands of regulators or the law
In disputes involving possible disciplinary action, requests for information under the Freedom of Information Act or general requests for information.
Requests for data under the Freedom of Information Act can cause major disruption to the day to day operations of a business and could be extremely resource intensive.
These requests may relate to serious matters such as information regarding stock-trading behavior or something relatively trivial such as employees who have been fired asking for emails or performance evaluation reports relating to them to be disclosed.
This demand results in panic to track down relevant information within an allotted period. Those who can provide timely information avoid penalties while those who can’t incur the risk of punishment and, potentially, bad press too.
Sapphire can be approached to collect potential documentary evidence and can assist with these requests, often suggesting ways to locate information that may not be obvious to internal staff.
Some users may well try to cover their tracks, but Sapphire’s forensic technicians can by-pass any surreptitious measures to get to the required data. User created files can be found in deleted and free space areas by using search criteria such as searching for type, or by date and time, or keyword lists.
Examples of the types of data included in e-discovery are e-mail, instant messaging chats, documents, accounting, databases, CAD/CAM files, Web sites, and any other electronically-stored information which could be classed as relevant evidence.
Also included in e-discovery is "raw data" which our Forensic Investigators can review for hidden evidence. The original file format is known as the "native" format. Litigators may review material from e-discovery in one of several formats: printed paper, native file, PDF format, or as single-page JPEG/TIFF images.
The results of a search can also be de-duplicated to reduce the amount of data to examine, thereby saving time.
