CRM Evidence Salesforce HubSpot
CRMEVIDENCE · A GUIDE FOR UK LAWYERS CRM Evidence: Salesforce, HubSpot and Customer Systems Pipelines, Field Histories and the System That Watched the Relationship COMPUTER FORENSICS LAB
§ ABOUT THE AUTHOR PREPARED BY COMPUTER FORENSICS LAB E-DISCOVERY TEAM
§ CONTENTS In this guide 01 Executive summary 02 The problem in plain English: the system that watched the relationship 03 Anatomy: objects, activities and the notes layer 04 Histories and logs across the platforms 05 Exports, reports and the exfiltration record 06 Deletion, recycle bins and recovery 07 Collection routes and pipeline analysis 08 Source architecture: where else the evidence lives 09 Worked examples 10 Common mistakes and technical limitations 11 Questions to ask · Suggested wording 12 Checklist and red flags · When to involve a digital forensic expert 13 Frequently asked questions 14 Glossary · References · Disclaimer · How a specialist laboratory can assist
§ 01 · ORIENTATION Executive summary THE HEADLINE POINT: THECRMRECORDSTHERELATIONSHIPAND, SEPARATELY, RECORDSWHOTOUCHEDTHERECORD: DEPARTING - EMPLOYEECASESAREUSUALLY DECIDEDINTHESECONDLAYER
§ 02 · FIRST PRINCIPLES The problem in plain English: the system that watched the relationship
§ 03 · ANATOMY Anatomy: objects, activities and the notes layer OBJECT / LAYER WHAT IT HOLDS · WHY IT MATTER S
§ 04 · THEHISTORIES Histories and logs across the platforms
§ 05 · THEWAYOUT Exports, reports and the exfiltration record 54 and 111 finish it.
§ 06 · GONE, ANDBACK Deletion, recycle bins and recovery
§ 07 · GETTINGITANDREADINGIT Collection routes and pipeline analysis
§ 08 · THEWIDERMAP Source architecture: where else the evidence lives EVIDENCE B IN / MIRROR LIVE HISTORIES & BACKUPS / DELETED / ORG LOGS SANDBOXES RECOVERABLE RECYCLE INTEGRATED & ARCHIVES SYSTEMS
§ 09 · IN THE WILD Worked examples EXAMPLE1 · THE EXPORT AT22: 1 EXAMPLE2 · THEREASSIGNMENTSTHATPRE - DATEDTHEPLAN EXAMPLE3 · THERECYCLEBINANDTHESANDBOX
§ 10 · WHEREITGOESWRONG Common mistakes and technical limitations Common mistakes Technical limitations
§ 11 · INTERROGATORIES & DRAFTING AIDS Questions to ask · Suggested wording Ask your client Ask your opponent Ask your e Discovery / forensic provider SUGGESTED WORDING · CRMLIMBFORTHEPRESER VAT I ON LETTER
§ 12 · QUICK CONTROL Checklist and red flags · When to involve a digital forensic expert The CRM checklist Red flags When to involve a digital forensic expert
§ 13 · COMMON QUESTIONS Frequently asked questions Can we see if a departing employee downloaded our client list? Are CRM notes really disclosable? Our sales team wrote them assuming privacy. The opponent produced a spreadsheet of "the relevant CRM records". Sufficient? Our client's org only keeps login history for a few months and it has already rotated. Now what? The suspect was an admin. Could they have covered their tracks? Can pipeline data prove solicitation, or only opportunity?
§ 14 · REFERENCE Glossary Sources and authoritative references DISCLAIMER
§ HOW A SPECIALIST LABORATORY CAN ASSIST Working with Computer Forensics Lab Speak to a forensic examiner, not a salesperson. INSTRUCTTHELAB NEWENQUIRIESEMAILE - DISCOVERY
Cite as: Joseph Naghdi, CRM Evidence Salesforce HubSpot, Computer Forensics Lab, https://e-discovery.uk/library/crm-evidence-salesforce-hubspot/pdf.