How to Gather Digital Evidence in Commercial Disputes

Digital evidence has become one of the most important forms of evidence in modern commercial disputes. Businesses increasingly communicate through emails, messaging platforms, cloud-based systems, customer relationship management software, online collaboration tools, mobile devices, and social media. As a result, many business disputes now depend heavily on electronic records rather than traditional paper documents.

Whether a dispute concerns breach of contract, unpaid invoices, shareholder disagreements, professional negligence, intellectual property infringement, fraud allegations, or supplier disputes, digital evidence can play a crucial role in establishing what happened and when it happened.

In England and Wales, courts recognise a wide range of electronic material as evidence. Civil litigation rules specifically address electronic disclosure and require parties to preserve, identify, and disclose relevant electronic documents. Digital evidence can include emails, text messages, databases, cloud-stored files, social media content, metadata, audio recordings, video files, and information stored on servers or backup systems.

This guide explains how businesses can gather digital evidence effectively, understand their legal obligations, preserve important information, and avoid common mistakes that may damage a claim or defence.

What Is Digital Evidence?

Digital evidence refers to information stored or transmitted electronically that may help prove or disprove facts in a dispute.

Examples include:

• Emails.
• Internal business communications.
• Text messages.
• Instant messaging conversations.
• Video conference records.
• Digital contracts.
• Electronic invoices.
• Accounting records.
• Cloud storage files.
• Customer databases.
• Website records.
• Social media posts.
• Audio recordings.
• CCTV footage.
• Metadata.
• Electronic logs and audit trails.

The courts of England and Wales treat electronic documents broadly. A document may include information held on computers, mobile phones, servers, databases, cloud systems, backup systems, and even information that has been deleted but remains recoverable. Metadata may also form part of the evidence.

Why Digital Evidence Is Important in Commercial Litigation

Many business disputes turn on factual questions such as:

• What was agreed?
• When was an agreement reached?
• Who authorised a transaction?
• What information was shared?
• When did a party become aware of a problem?
• Were contractual obligations fulfilled?
• Was confidential information misused?

Digital evidence often provides objective records that can answer these questions.

For example:

• An email chain may show contractual negotiations.
• Accounting software may prove non-payment.
• A messaging application may demonstrate instructions given by directors.
• Metadata may reveal when a document was created or altered.
• Server logs may show unauthorised access to confidential information.

In complex commercial litigation, electronic evidence frequently becomes more important than witness recollections because digital records are often created contemporaneously with events.

Understanding Disclosure Obligations

What Is Disclosure?

Disclosure is the process by which parties to litigation identify and provide relevant documents to one another.

In England and Wales, disclosure obligations generally apply to documents that are relevant to issues in dispute and are within a party’s control. These obligations extend to electronic documents as well as traditional paper records.

A party may have control over a document if:

• It possesses the document.
• It has the right to possess it.
• It has the right to inspect or copy it.

Importantly, disclosure obligations can include documents that support the opposing party’s case or damage a party’s own position.

The Importance of Preserving Evidence

Act Quickly

One of the most important steps in any commercial dispute is preserving evidence as soon as litigation becomes reasonably foreseeable.

Courts expect parties to take reasonable steps to prevent relevant evidence from being deleted, altered, or destroyed. This may require suspending normal document destruction procedures and preserving electronic information that might otherwise be routinely deleted.

Failure to preserve evidence can result in:

• Adverse inferences being drawn by the court.
• Increased legal costs.
• Procedural sanctions.
• Damage to credibility.
• Difficulties proving or defending claims.

Issue Internal Preservation Notices

Businesses should consider identifying:

• Relevant employees.
• Former employees who may hold information.
• External consultants.
• IT providers.
• Third-party data hosts.

Where appropriate, individuals should be instructed not to delete potentially relevant records. Practice Direction 57AD specifically refers to notifying relevant employees and taking steps to ensure relevant documents are not destroyed.

Identifying Potential Sources of Digital Evidence

Many businesses underestimate how much relevant information they possess.

Potential sources include:

Email Systems

Emails frequently form the backbone of commercial disputes.

Relevant evidence may include:

• Negotiations.
• Instructions.
• Complaints.
• Payment discussions.
• Contract variations.
• Termination notices.

Mobile Phones

Business-related communications increasingly occur through mobile devices.

Potential evidence may include:

• SMS messages.
• WhatsApp messages.
• Signal communications.
• Business messaging applications.
• Photographs.
• Voice notes.

Electronic disclosure rules recognise information stored on mobile devices as potentially disclosable evidence.

Cloud Platforms

Businesses often store information using:

• Microsoft 365.
• Google Workspace.
• Dropbox.
• OneDrive.
• SharePoint.
• Industry-specific cloud software.

Cloud systems may contain documents, communications, version histories, and audit logs.

Accounting and Financial Systems

Commercial disputes frequently involve financial records.

Relevant evidence may include:

• Invoices.
• Purchase orders.
• Payment histories.
• Banking records.
• Tax records.
• Financial reports.

Social Media

Business disputes sometimes involve statements made on:

• LinkedIn.
• X.
• Facebook.
• Instagram.
• Industry forums.

Such material may become relevant where reputation, contractual relationships, or misleading statements are in dispute.

CCTV and Security Systems

Evidence may exist in:

• CCTV recordings.
• Access control systems.
• Vehicle tracking systems.
• Security logs.

Many systems automatically overwrite data after a short period, making early preservation particularly important.

Collecting Digital Evidence Properly

Preserve Original Data

Original records should be retained whenever possible.

Businesses should avoid:

• Editing files.
• Renaming evidence unnecessarily.
• Converting files into different formats.
• Altering timestamps.
• Modifying metadata.

Maintaining original versions helps demonstrate authenticity.

Create Secure Copies

Rather than working directly with original data, secure copies should be created.

Good practice often includes:

• Recording collection dates.
• Identifying who collected the data.
• Documenting storage locations.
• Maintaining access records.

This creates a clear chain of custody that may assist later court proceedings.

Record the Context

Evidence is more useful when accompanied by context.

For example:

• Who created it?
• When was it created?
• Where was it found?
• How was it obtained?
• Why is it relevant?

Detailed records can help explain the evidence during disclosure and trial.

Understanding Metadata

What Is Metadata?

Metadata is often described as “data about data”.

Examples include:

• Creation dates.
• Modification dates.
• Author information.
• Email transmission details.
• Device information.
• Access records.

Civil procedure rules specifically recognise metadata as part of electronic documentation.

Why Metadata Matters

Metadata can reveal:

• Whether a document was altered.
• When a contract draft was created.
• Who edited a file.
• When an email was sent.
• Whether information was backdated.

In fraud, intellectual property, and contractual disputes, metadata may become highly significant.

Conducting Searches for Relevant Evidence

Use Reasonable Searches

Courts generally expect parties to conduct reasonable and proportionate searches for relevant electronic documents.

The scope of the search depends upon factors such as:

• The value of the claim.
• Complexity of the dispute.
• Number of documents involved.
• Cost of retrieval.
• Importance of the information sought.

Keyword Searches

Electronic disclosure often involves keyword searching.

Examples include:

• Company names.
• Contract numbers.
• Project titles.
• Individual names.
• Product references.
• Relevant dates.

Practice Direction 31B specifically recognises keyword searches as a legitimate method of locating electronic documents.

Data Sampling

In large disputes involving millions of records, sampling techniques may be used to assess the relevance of information before conducting wider searches. Practice Direction 57AD recognises data sampling as part of modern disclosure practice.

Obtaining Evidence from Third Parties

Important evidence may be held by:

• Cloud service providers.
• Accountants.
• Consultants.
• Contractors.
• Former employees.
• Banks.
• Technology providers.

In some circumstances, the courts have powers relating to disclosure from non-parties and disclosure before proceedings are issued.

Businesses should avoid attempting to obtain information unlawfully and should ensure data collection complies with applicable legal requirements.

Data Protection Considerations

Digital evidence frequently contains personal data.

Businesses gathering evidence should remain mindful of obligations under:

• The UK General Data Protection Regulation (UK GDPR).
• The Data Protection Act 2018.

Relevant evidence may still be disclosed in litigation where legally appropriate, but organisations should ensure information is handled securely and proportionately.

Common Mistakes When Gathering Digital Evidence

Deleting Information

One of the most serious mistakes is deleting potentially relevant evidence after a dispute has arisen.

Routine deletion policies may need to be suspended where litigation is anticipated.

Relying Only on Screenshots

Screenshots can be useful, but they rarely tell the whole story.

Where possible, preserve:

• Original files.
• Native email formats.
• Complete message threads.
• Metadata.

Failing to Search Mobile Devices

Many key business communications now occur through mobile applications rather than email.

Ignoring mobile devices can result in significant evidence being overlooked.

Altering Documents

Even minor modifications can create authenticity challenges.

Always retain original versions whenever possible.

Ignoring Backup Systems

Relevant information may exist within archived systems, backups, or cloud retention services. Electronic disclosure rules expressly recognise that information stored in backup systems may be relevant.

Time Limits and Urgency

Digital evidence can disappear quickly.

Potential issues include:

• Automatic deletion policies.
• Overwritten CCTV footage.
• Expiring cloud retention periods.
• Employee departures.
• Lost devices.

Businesses involved in a potential dispute should consider preservation measures at the earliest opportunity.

At the same time, parties should remain aware of limitation periods applicable to the underlying claim. Preserving evidence does not extend statutory deadlines for commencing legal proceedings.

Common Questions from our Readers

Can deleted files be used as evidence?

Potentially. Civil procedure rules recognise that electronic documents may include information that has been deleted but remains recoverable.

Are emails admissible in court?

Yes. Emails are commonly relied upon in commercial litigation and are expressly recognised as electronic documents.

Can WhatsApp messages be used in commercial disputes?

Yes. Messages exchanged through business communication platforms may be relevant evidence if they relate to issues in dispute.

What happens if a business destroys evidence?

The court may impose sanctions, draw adverse conclusions, or otherwise take the destruction into account when determining the dispute.

Is metadata important?

Often yes. Metadata can help establish authenticity, timing, authorship, and whether documents have been modified.

Final Thoughts

Digital evidence plays a central role in modern commercial disputes. Emails, messaging applications, cloud systems, financial records, mobile devices, metadata, server logs, and digital documents can all help establish the facts of a case and influence the outcome of litigation.

Businesses involved in actual or potential disputes should act quickly to preserve relevant information, identify all potential sources of evidence, conduct reasonable and proportionate searches, and maintain accurate records of how evidence is collected and stored. Courts in England and Wales place significant importance on proper disclosure and preservation of electronic documents, and failures in this area can have serious legal and financial consequences.

By understanding how digital evidence is created, preserved, collected, and disclosed, businesses can place themselves in a stronger position to pursue or defend commercial claims effectively while complying with the requirements of civil procedure.