Software / Cloud acquisition

eCloud Discovery

Collect cloud evidence, reduce it to a workable review set and deliver it in the format the matter requires.

Bagged hard drive beside a forensic write blocker.

The product

What eCloud Discovery does

Cloud evidence rarely lives in one account or one provider. A matter may involve email, tenant administration, file storage, collaboration tools and on-premises systems, each with different access, export and audit behavior.

eCloud Discovery brings those collection paths into one workflow. It supports authorized acquisition from email providers and business suites, file-sharing services and collaboration platforms. Collected material can be searched, filtered against NIST reference data, deduplicated and exported for review or direct import into eDiscovery tools.

  • Email and business suites

    Collect from supported Gmail, AOL, Google Workspace and Microsoft 365 sources, including tenant-level and on-premises email workflows.

  • Files and cloud storage

    Acquire authorized data and available logs from supported services such as Box, Dropbox and ShareFile.

  • Collaboration records

    Collect supported Slack, Microsoft Teams, Zoom and related collaboration content with source context.

  • Search and culling

    Search the collection, remove known files with NIST reference sets and deduplicate repeated material.

  • AI-assisted search

    Use assisted search to identify likely relevant material in a large corpus, with human review controlling the final cull.

  • Review-ready export

    Export natives, metadata and agreed load-file formats for delivery into supported eDiscovery platforms.

Methodology

Typical workflow

  1. Connect

    Authorize the supported accounts, tenants, repositories and collaboration sources included in the matter.

  2. Collect

    Acquire selected data and record source, scope, time, operator and available verification details.

  3. Reduce

    Search, filter, de-NIST and deduplicate the collection while retaining the decisions behind the result.

  4. Export

    Produce the agreed files, metadata and load files, then reconcile the delivery against the collection record.

Operating note

Compatibility and limits

Provider support, available data types, audit coverage and export options depend on the account, subscription, permissions and current provider APIs. These details are confirmed before collection.

Talk with an examiner

Discuss the matter and the next step.

Call to discuss timing, scope and the safest way to share information. Do not send evidence or credentials by email.

24/7 hotline: 1-800-868-8189

Privacy center

Choose your site settings

Optional technology stays off until you choose otherwise. You can change these browser settings at any time. Access to the core site does not depend on optional technologies.

Technology preferences
Sale or cross-context sharing: not used GDF does not sell or share website personal information for cross-context behavioral advertising.