Unfair competition
An employee leaving, suspected extraction of customer files, access to strategic data, transfer of documents or disputed use of a business application.
Pre-trial investigative measure on digital systems
Article 145 of the French Code of Civil Procedure (article 145 CPC) allows a party to ask the court, before any trial, for a pre-trial investigative measure to preserve or establish evidence of facts on which the outcome of a dispute may depend. In purpose it is broadly comparable to a pre-action disclosure or an evidence-preservation order, although it belongs to a different legal system. Where IT systems are involved, the difficulty is to act without altering the data, without going beyond the scope set by the court order, and to report in terms that everyone involved in the case can follow.
Use cases
An employee leaving, suspected extraction of customer files, access to strategic data, transfer of documents or disputed use of a business application.
Confidential documents, commercial data, sensitive files, access traces, application logs or technical items that need to be preserved quickly.
A disputed publication, editable content, a profile, a website, a messaging service, a collaboration platform or an item of online reputation.
User accounts, workstations, servers, shared folders, backups, mailboxes or connection traces to be characterised without improvisation.
Data held inside a software package, exports, histories, logs and the items needed to understand a dispute in technical terms.
Computers, phones, removable media, external drives or backups that may hold items relevant to the debate between the parties.
Working as a pair
The judicial officer is responsible for the formal record of findings, for identifying the people present, for compliance with the legal framework and for setting the operations down in a document that can be relied on in court.
The digital forensic expert helps to understand the environment encountered, to spot the relevant data, to choose suitable methods and to document the technical limitations without stepping outside the scope set by the court order.
How it unfolds
Understand the facts, the systems concerned, the timescales and the nature of the evidence sought.
Identify the access, devices and media, tools and field constraints before the operation.
Give technical support during the operation, within the scope set by the court order, documenting the actions taken.
Produce material that is understandable, traceable and useful for the next stage of the case.
Frequently asked questions
It can allow a party to ask the court for a measure before any trial, in order to preserve or establish evidence of digital facts: files, logs, content, accounts, access traces or application data.
No. Preparation can often be carried out remotely. An on-site visit is considered when access to the devices and media, or to the real environment, adds concrete value to the operation.