Email Forensics

What is email forensics?  More and more people, plaintiffs and defendants alike, leave their electronic fingerprints in the Internet. Web-based email stored by Internet Service Providers (ISPs) can be a fruitful source of smoking gun evidence. Popular email services like Gmail, Yahoo! Mail,, GoDaddy, even the classic AOL Mail, yield impeachment opportunities at trial. They give you a clear advantage in court or arbitration.

Stored Communications Act

The Stored Communication Act (SCA) governs how attorneys like you may obtain email evidence from ISPs. Federal and state case law in recent years has significantly limited the use of the SCA by civil litigants and criminal defense attorneys.

Collect Email from Cloud, Mobile Devices, and Computers

Instead of serving subpoenas we use email forensics to collect discoverable evidence direct from the cloud operated by ISPs like Google, Microsoft, Yahoo, Comcast, AT&T, Verizon, Charter, CenturyLink, Frontier, Mediacom, Midco, etc. We also extract mobile devices and computers used to access email in the cloud. We process them for you using email forensics and harvest email addresses, messages, attachments, and headers. Headers contain Internet Protocol (IP) addresses.  We use them to trace the route the message took through the Internet. We also search emails with keywords to discover responsive evidence often containing personally identifiable information (PII).  Working together with you we produce relevant and compelling web mail evidence for court using email forensics.

Collect Microsoft Office 365 and Google Workspace

Many of your corporate clients, large and small, continue to leverage corporate email servers like Microsoft Exchange. Increasingly these server environments are migrating to the cloud with productivity and security benefits for users. We use powerful cloud forensic tools to collect email, attachments, calendars, contacts, tasks, and other electronically stored information from both Microsoft Office 365 and Google Workspace, formerly G Suite or Google Apps.