Evidence must remain trustworthy while it moves
A public agency investigates a disputed transaction. Records are exported, reviewed and transferred between teams. The gold standard is being able to explain where the evidence came from, who handled it and whether its integrity was preserved.
Identify the original source
Record the system, document or authorised custodian from which evidence was obtained.
Preserve relevant timestamps and context
A transaction event and the time a screenshot was taken are not necessarily the same.
Control access and handling
Appropriate permissions and documented transfers help reduce unauthorised alteration or disclosure.
Use suitable integrity measures
Depending on the evidence and applicable procedures, controlled copies, checksums or audit logs may support traceability.
Distinguish originals and derivatives
Exports, summaries and redacted versions should remain linked to their source where appropriate.
Follow legal and records requirements
Preservation, disclosure and disposal obligations depend on the applicable context and authority.
Break-test: two exported files differ
Can investigators identify when the difference arose and determine which record is authoritative?
Connected knowledge
See Dispute Evidence Preservation, Records Retention and National Archives of Singapore.