Web-forensics use case
Acquire evidence from government, regulatory, and court portals
Eviquire can document public or authorized content presented through browser-based government, regulatory, registry, licensing, tax, customs, procurement, or court portals, including references, filings, entries, notices, application histories, receipts, status, and downloadable documents. It preserves the web presentation but does not turn it into a certified official record or replace records obtained directly from the authority.
What this use case means
Eviquire can document public or authorized content presented through browser-based government, regulatory, registry, licensing, tax, customs, procurement, or court portals, including references, filings, entries, notices, application histories, receipts, status, and downloadable documents. It preserves the web presentation but does not turn it into a certified official record or replace records obtained directly from the authority.
Official portals can show provisional, delayed, redacted, role-specific, or jurisdiction-limited information. Search parameters, entity identifiers, case references, publication status, and access account determine the result. The examiner must preserve the query and portal context and avoid implying that a web capture has the legal status of a certified extract.
Common situations
When this workflow is useful
- Litigation, due diligence, compliance, licensing, corporate, property, procurement, immigration, tax, or regulatory matters
- Preserving a filing, case entry, application status, official notice, registry result, or receipt before it changes
- Documenting the exact public or account-specific result returned by an official portal
Recommended process
A documented acquisition workflow
- Define authority and jurisdiction
Identify the portal, authority, jurisdiction, account, entity or case, references, dates, query terms, and permitted actions.
- Record search conditions
Preserve portal URL, account state, language, jurisdiction, query, filters, result count, date, timezone, and publication status.
- Acquire result and source path
Navigate from search or dashboard to the relevant entry, history, filing, notice, receipt, and document while retaining stable identifiers.
- Download and qualify
Preserve authorized files with hashes, record certification or verification features, state limitations, and obtain formal records separately when required.
Technical guidance
Conditions that affect official-portal acquisition
Confirm these points during a short pre-acquisition validation on the authorized workstation.
Official status
A portal entry may be informational, provisional, redacted, delayed, or legally distinct from a certified extract.
- Record status and disclaimers.
- Preserve verification codes when lawfully visible.
- Do not claim certification unless the authority supplies it.
Queries and identifiers
Results depend on spelling, identifiers, jurisdiction, date, language, and filters.
- Preserve the query.
- Record no-result pages when relevant.
- Use stable case or filing references.
Account actions
Submitting, filing, paying, acknowledging, or changing an application creates external legal effects.
- Do not perform transactions without separate authority.
- Acquire receipts only from authorized completed actions.
- Protect personal and case data.
Reviewable output
What the evidence package should explain
Authority context
Portal, jurisdiction, account state, language, query, filters, and acquisition time.
Official presentation
Entries, status, histories, notices, filings, receipts, and navigation.
Documents
Authorized downloads, extracts, and verification information with hashes.
Qualified report
Limitations, integrity, timestamps, activity, and custody records.
The exact artifacts depend on the source, plan, configuration, authority, and investigation. A report should identify what was and was not collected.
Professional considerations
Authority, proportionality, and limitations
- Respect access law, court rules, secrecy, personal-data restrictions, publication limits, and portal terms.
- A preserved web page does not automatically equal a formally issued or certified record.
- Do not submit filings, make payments, acknowledge service, or alter applications during acquisition unless separately authorized.
Important: Eviquire supports a documented technical process. It does not establish identity, truth, culpability, infringement, or admissibility, and it does not replace legal advice or a validated organizational procedure.
Standards and primary guidance
Online evidence procedures should be validated for the organization and matter. Useful starting points include SWGDE guidance for acquiring online content, ISO/IEC 27037:2012, and NIST digital-evidence resources.
Frequently asked questions
Is a portal screenshot an official certified record?
Not automatically. Certification depends on the authority and applicable procedure.
Should the search query be preserved?
Yes, because it determines the returned result.
Can authenticated case portals be acquired?
Yes when access and collection are authorized.
What if the portal result later changes?
The acquisition records what was presented at the documented time; later status should be preserved separately.
Should official downloads be hashed?
Yes, while also retaining any authority-provided signature or verification mechanism.
Who uses this workflow?
Relevant professional roles
This acquisition workflow is commonly relevant to these teams. The appropriate authority, scope, procedure, and review requirements still depend on the matter.
Journalists and NGOs
Document public-interest material before it is edited, deleted, restricted, or blocked.
See role-specific guidance →
Forensic experts
Acquire online evidence with technical context, integrity verification, custody records, and reporting.
See role-specific guidance →
Law enforcement
Preserve volatile online evidence for authorized criminal and intelligence investigations.
See role-specific guidance →
Law firms
Preserve websites and online content for litigation, disclosure, legal holds, and expert review.
See role-specific guidance →