EvidenceVault · eDiscovery & Compliance

Backup that holds strong in crisis.

When a client's data ends up in a dispute, "we have a backup" isn't enough. EvidenceVault turns backup data into evidence-grade records with a legally defensible chain of custody, legal holds, chain of custody, retention with statutory schedules, and cryptographic destruction certificates.

Chain of custody
Matter #2026-014 opened
MSP Legal · scope: 3 custodians
HOLD ACTIVE
Custodian notified
cfo@client.co.za · ack pending
REMINDER 2/3
Snapshot sealed
SHA-256 · chained to prior event
VERIFIED
Disposition blocked
Retention paused under hold
ENFORCED
HASH-CHAIN · TAMPER-EVIDENT● EVIDENCE-GRADE TRAIL
Why EvidenceVault

Evidence-grade is a discipline, not a feature checkbox.

Legal hold management

Holds with custodian notification workflows and escalation, disposition is blocked until the hold is released.

Destruction certificates

A SHA-256-sealed certificate on object-level disposition and crypto-shred, recording what was disposed of, how and when.

Tamper-evident audit

A hash-chained audit trail across backup, restore, hold, and disposition events, with a signed nightly anchor on the chain head, so a rewrite the chain alone would accept no longer matches a head we already signed.

Cryptographic isolation

Per-tenant encryption keys, every client isolated by design, not by policy.

From retention policy to destruction certificate, provable at every step.

Legal holds

Holds that actually hold.

A legal hold in EvidenceVault is an enforced state across the platform, not a flag in a spreadsheet.

  • Matter-based holds spanning tenants and custodians.
  • Custodian notification workflows with automatic reminders and escalation.
  • Every purge path is blocked while a hold is active, releases are audited.
Hold lifecycle
Create matter
Scope: tenant, custodians, date range
1
Notify custodians
Signed acknowledgement links
2
Enforce
Disposition + purge blocked
3
Release & certify
Audited release · destruction certs
4
Retention & disposition

POPIA-aligned retention with the templates the platform ships.

Retention isn't one number. EvidenceVault ships the periods as templates you start from instead of configuring days by hand; your counsel confirms the period each record type needs.

  • POPIA-aligned retention engine with policy-driven disposition when periods lapse.
  • Retention templates ready to apply: POPIA Standard 7-year, POPIA Extended 10-year, GDPR 6-year, plus HIPAA, SOX and your own.
  • Cryptographic destruction certificates generated on object-level disposition and crypto-shred.
Retention templates
POPIA Standard
Default retention
7 YEARS
POPIA Extended
Long-hold records
10 YEARS
GDPR Standard
Data minimisation
6 YEARS
Custom template
Per-tenant override, audited
POLICY
Compliance scoring

A live grade, not an annual audit surprise.

Compliance posture is computed continuously from the platform's own state.

  • Compliance framework scoring with live dashboards across multiple standards.
  • POPIA posture graded A–F from 13 platform checks, operational scoring, not a regulatory verdict.
  • A portfolio roll-up so you can see the weakest tenant first.
Compliance posture
APOPIA posture · 13 checks
Retention schedules applied
All tenants covered
PASS
Destruction certificates
Issued on object-level disposition
PASS
Audit chain integrity
Continuous verification
PASS
SHA-256
Destruction certificates on object-level disposition
13
POPIA platform checks, graded A–F
7 yr
POPIA Standard retention template
100%
Purge paths blocked under legal hold
AES-256
Per-tenant encryption keys
Pricing

A per-tenant add-on. Attach it to any Kapsul8 M365 band.

Attach EvidenceVault to any Kapsul8 M365 band and add exactly what the client needs: eDiscovery at R739.99/tenant/mo, Legal Holds at R464.99/tenant/mo, and Compliance Scoring at R279.99/tenant/mo. Priced per tenant, never gated to a plan.

FAQ

Frequently asked questions.

Provenance you can prove: a tamper-evident, hash-chained audit trail across every backup, restore, hold, and disposition event; enforced legal holds with custodian acknowledgement; and cryptographic destruction certificates when data is disposed of. EvidenceVault produces all three as a matter of course.

Yes, while a hold is active, every purge and disposition path is blocked at the platform level, including automated retention runs. Releases are themselves audited events on the hash chain.

POPIA-aligned retention with the templates the platform ships — POPIA Standard (7 years), POPIA Extended (10 years), GDPR (6 years), HIPAA (7 years), SOX (7 years) and a 3-year standard — plus configurable custom templates per tenant. They are a starting point, not legal advice: your counsel sets the period each record type needs.

Per tenant, as an add-on you can attach to any Kapsul8 M365 band — it is not tier-gated. Add the pieces the client needs: eDiscovery R739.99/tenant/mo, Legal Holds R464.99/tenant/mo, Compliance Scoring R279.99/tenant/mo.

Make the next dispute a retrieval task, not a crisis.

Stand up legal holds, statutory retention, and a provable chain of custody in one afternoon.