Metadata Capture
Timestamp, user agent, IP, geolocation where available, and capture tool details to show how the web data was obtained and under what conditions.
A consistent WebCOC preserves evidence integrity, reduces challenges over authenticity, and documents procedural compliance for investigators and counsel.
Typical users include forensic examiners, law enforcement, corporate security teams, and outside counsel who must preserve web-derived evidence.
The document also helps auditors, compliance officers, and expert witnesses interpret collection steps and chain-of-custody when evidence is reviewed.
Timestamp, user agent, IP, geolocation where available, and capture tool details to show how the web data was obtained and under what conditions.
Cryptographic hash (SHA-256 recommended) recorded at collection and verified at each handoff to prove file integrity and detect alteration.
Clear description of live capture, API extraction, screenshot, or archived copy including tool/version and extraction options used.
Sequential custody entries with names, roles, timestamps, reasons for transfer, and signatures or authenticated approvals for each custody change.
Final disposition instructions (retain, return, destroy) with authorization and date for audited evidence lifecycle control.
Machine-generated audit records capturing IP addresses, user accounts, and event timestamps for reproducible validation during review.
| Field | Configuration |
|---|---|
| Upload Method | API or secure upload endpoint with TLS required |
| Field Mapping | Map capture metadata to WebCOC fields consistently |
| Authentication | Enable MFA for collectors and approvers by role |
| Retention Policy | Apply retention tags per case and legal hold settings |
Use secure transport and storage; integrate with case management, forensic tools, and eSignature services for authenticated approvals.
Capture evidence immediately upon identification to avoid loss or alteration.
Issue preservation within 24–72 hours per policy when required.
Expect 7–30 business days depending on queue and complexity.
Coordinate with counsel to meet discovery and court scheduling.
Retention begins at collection date and follows legal hold rules.
Collect artifact and record capture metadata and hash.
Verify hash and tool output against expected results.
Log each transfer with signer identity and reason.
Authorize retention, return, or destruction per policy.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | Varies by plan | Varies by plan | Varies by plan | Varies by plan |
| Bulk Send | Yes (Premium) | Yes | Yes | Yes | Varies |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes (BAA) | Yes | Yes | Varies | Varies |
| Envelope Cap | No envelope cap | 100 envelopes/user/yr | Varies by plan | Varies by plan | Varies by plan |