EvidenceVault · eDiscovery & Compliance

Backup that holds strong in crisis.

When a client's data ends up in a dispute, "we have a backup" isn't enough. EvidenceVault turns backup data into evidence-grade records with a legally defensible chain of custody, legal holds, chain of custody, retention with statutory schedules, and cryptographic destruction certificates.

Chain of custody
Matter #2026-014 opened
MSP Legal · scope: 3 custodians
HOLD ACTIVE
Custodian notified
cfo@client.co.za · ack pending
REMINDER 2/3
Snapshot sealed
SHA-256 · chained to prior event
VERIFIED
Disposition blocked
Retention paused under hold
ENFORCED
HASH-CHAIN · TAMPER-EVIDENT● EVIDENCE-GRADE TRAIL
Why EvidenceVault

Evidence-grade is a discipline, not a feature checkbox.

Legal hold management

Holds with custodian notification workflows and escalation, disposition is blocked until the hold is released.

Destruction certificates

SHA-256 certificates on every purge, cryptographic proof that data was properly disposed of, and when.

Tamper-evident audit

A hash-chained audit trail across backup, restore, hold, and disposition events, meeting evidence-grade standards.

Cryptographic isolation

Per-tenant encryption keys, every client isolated by design, not by policy.

From retention policy to destruction certificate, provable at every step.

Legal holds

Holds that actually hold.

A legal hold in EvidenceVault is an enforced state across the platform, not a flag in a spreadsheet.

  • Matter-based holds spanning tenants and custodians.
  • Custodian notification workflows with automatic reminders and escalation.
  • Every purge path is blocked while a hold is active, releases are audited.
Hold lifecycle
Create matter
Scope: tenant, custodians, date range
1
Notify custodians
Signed acknowledgement links
2
Enforce
Disposition + purge blocked
3
Release & certify
Audited release · destruction certs
4
Retention & disposition

Statutory retention schedules, shipped as templates.

Retention isn't one number. HIPAA, SOX and state record rules each set their own, and EvidenceVault ships them as templates rather than leaving you to configure days by hand.

  • Retention engine with policy-driven disposition when a window lapses, HIPAA, SOX and GDPR templates included.
  • Statutory schedules ready to apply: HIPAA 7-year, SOX 7-year, GDPR 6-year, and more.
  • Cryptographic destruction certificates generated on every disposition run.
Retention templates
HIPAA Compliant
Healthcare records
7 YEARS
SOX Financial
Financial records
7 YEARS
GDPR Standard
Data minimisation
6 YEARS
Custom template
Per-tenant override, audited
POLICY
Compliance scoring

A live grade, not an annual audit surprise.

Compliance posture is computed continuously from the platform's own state.

  • Compliance framework scoring with live dashboards across multiple standards.
  • Data-protection posture graded A–F from 13 platform checks, operational scoring, not a regulatory verdict.
  • Evidence for every check traces back to the hash-chained audit trail.
Compliance posture
ACompliance posture · 13 checks
Retention schedules applied
All tenants covered
PASS
Destruction certificates
Present for every purge
PASS
Audit chain integrity
Continuous verification
PASS
SHA-256
Destruction certificates on every purge
13
Platform compliance checks, graded A–F
7 yr
HIPAA and SOX statutory retention
100%
Purge paths blocked under legal hold
AES-256
Per-tenant encryption keys
Pricing

Priced per tenant. Attach it to the clients that need it.

Legal holds, chain of custody and destruction certificates sit on top of the backups you already hold. Priced per tenant, talk to us for scope, since it is quoted against your portfolio rather than sold from a list.

FAQ

Frequently asked questions.

Provenance you can prove: a tamper-evident, hash-chained audit trail across every backup, restore, hold, and disposition event; enforced legal holds with custodian acknowledgement; and cryptographic destruction certificates when data is disposed of. EvidenceVault produces all three as a matter of course.

Yes, while a hold is active, every purge and disposition path is blocked at the platform level, including automated retention runs. Releases are themselves audited events on the hash chain.

Retention templates for the schedules US businesses actually face, HIPAA six-year, SOX seven-year, IRS seven-year, with policy-driven disposition when a window lapses and destruction certificates when data is removed. The templates are a starting point; your counsel sets the policy.

Per tenant, on top of an active Kapsul8 subscription. It is quoted against your portfolio rather than sold from a price list, talk to us and we will scope it with you.

Make the next dispute a retrieval task, not a crisis.

Stand up legal holds, statutory retention, and a provable chain of custody in one afternoon.