Page 1

CLOUD DOCUMENT VERSION S · A GUIDE FOR UK LAWYERS Recovering Previous Versions of Cloud Documents The Drafting History Share Point, One Drive and Google Drive Keep Without Being Asked COMPUTER FORENSICS LAB

§ ABOUT THE AUTHOR PREPARED BY COMPUTER FORENSICS LAB E-DISCOVERY TEAM ESTABLISHED 2007 · LONDON ISO 17025-ALIGNED PROCEDURES VERSION-HISTORY COLLECTION AUTHORSHIP & CHRONOLOGY ANALYSIS CPR PART 35 EXPERT REPORT S FULL CHAIN-OF-CUSTODY DOCUMENTATION

§ CONTENTS In this guide 01 Executive summary 02 The problem in plain English: the file is a frame, the history is the film 03 How platforms keep versions: Share Point, One Drive, Google Drive and DMS systems 04 What kills history: limits, retention, copies, moves and migrations 05 Preserving and collecting versions forensic all y 06 Reading the ladder: authorship, chronology and the shape of drafting 07 Versions in dispute: authenticity, disclosure scope and production 08 Source architecture: where else the evidence lives 09 Worked examples 10 Common mistakes and technical limitations 11 Questions to ask · Suggested wording 12 Checklist and red flags · When to involve a digital forensic expert 13 Frequently asked questions 14 Glossary · References · Disclaimer · How a specialist laboratory can assist

§ 01 · ORIENTATION Executive summary THE HEADLINE POINT: CLOUD PLATFORM S KEEP A DOCUMENT ' SVERSIONLADDER AUTOMATICALLY, ATTRIBUTEDANDTIMESTAMPED: PRESERVEITBEFORELIMITSAND RETENTIONPRUNEIT, COLLECTITWITHTHEHISTORYINTACT, ANDREADITASTHE DRAFTINGRECORDITIS

§ 02 · FIRST PRINCIPLES The problem in plain English: the file is a frame, the history is the film

§ 03 · HOWVERSIONSAREKEPT How platforms keep versions: Share Point, One Drive, Google Drive and DMS systems