Endpoint Collection | Mobile Device Acquisition | Hard Drive Imaging | ESI Preservation
Sign the engagement agreement, provide billing information, and establish Net 30 terms -- at no cost. When a collection matter arrives, rates are already agreed, billing is already set up, and work begins within 48 hours of authorization.
Collection Scope
4n6PI handles device-based ESI collection across endpoints, mobile devices, and removable media -- with forensic chain-of-custody documentation on every engagement. All collections are priced on a flat per-device or hourly basis with rates documented in the engagement agreement before work begins.
Forensic acquisition of enterprise workstations, laptops, and servers. Targeted logical collection or full forensic imaging depending on matter requirements and legal direction.
Forensic acquisition of iOS and Android devices for matters involving mobile evidence -- messages, call records, application data, and media.
Forensic imaging of hard drives, SSDs, USB devices, and other removable media with write-blocked acquisition and hash-verified output.
Where a matter extends beyond device-based evidence into cloud-stored ESI, 4n6PI supports Microsoft 365 collection via Purview eDiscovery as a supplemental service under the same retainer framework.
Engagement Terms
Retainer clients have rates and billing terms documented before a matter arrives. Each collection matter is invoiced separately against the pre-agreed rate schedule. Payment is due Net 30 from invoice date. No renegotiation, no surprises.
$1,500 flat rate per single drive. Includes forensic acquisition, write-blocked imaging, hash verification, and chain-of-custody documentation. Storage media required to retain the forensic image is billed at cost with no markup. Per-device rates apply to individual collections. Multi-device matters are quoted on a per-engagement basis -- contact 4n6PI to discuss.
$2,500 flat rate per single mobile device. Includes forensic acquisition, chain-of-custody documentation, and output formatted for review or processing. Storage media required to retain the acquisition is billed at cost with no markup. Per-device rates apply to individual collections. Multi-device matters are quoted on a per-engagement basis -- contact 4n6PI to discuss.
$150 per hour for endpoint collection, cloud collection, eDiscovery workflow work, and all other enterprise engagement services.
Net 30 from invoice date. Each collection matter is invoiced separately on completion. No retainer deposit, no monthly minimum, no advance payment. The engagement agreement is $0 to establish.
Process
Establishing a Forensic Collection Retainer takes less than a day. Once in place, activating it on a new matter takes a single call or email.
Brief conversation to document your organization, typical matter types, and any collection preferences.
4n6PI provides an engagement agreement documenting rates, scope, Net 30 payment terms, and confidentiality. Your organization provides billing information and signs. No payment at this stage -- the agreement is $0 to establish.
The relationship is established. 4n6PI is available for priority collection engagement. No further setup required.
Contact 4n6PI directly when a matter arrives. Scope is confirmed, work is authorized, and collection begins within 48 hours. Each matter is invoiced separately on completion, due Net 30, at the pre-agreed rates already on file.
Complete the form to initiate the retainer process. 4n6PI will follow up within one business day to finalize the engagement agreement. No cost and no commitment until active work is authorized on a matter.