Skip to main content
Industry First

Capture Cloud Attachments That Others Miss

The Critical Evidence Gap in Email Investigations

While traditional tools capture only hyperlinks, Aid4Mail retrieves the actual documents from OneDrive, SharePoint, and Google Drive—with exact versions and complete metadata.

Microsoft & Google platforms
Temporal accuracy
FRCP compliant

What Sets Aid4Mail Apart

Microsoft & Google Support

OneDrive, SharePoint, Google Drive - all covered

Temporal Accuracy

Retrieve exact versions from email send time

Complete Metadata

Authors, permissions, revision history captured

High Evidence Capture

No more missing documents in productions

The Modern Attachment Challenge

Today’s business emails contain links to cloud documents instead of traditional attachments. Missing these documents creates critical gaps in your investigations.

Traditional Tools

  • Capture only the hyperlink
  • No document content preserved
  • Missing revision history
  • No access permissions captured
  • Incomplete evidence for litigation

Aid4Mail Solution

  • Retrieve actual documents
  • Full content preservation
  • Complete revision history
  • All metadata and permissions
  • Court-admissible evidence
15-30%

of business emails contain cloud attachment links

0%

captured by traditional forensic tools

Near 100%

collection rate with Aid4Mail

Industry-First Capabilities

Aid4Mail is the first and only forensics tool to fully collect cloud attachments from both Microsoft and Google ecosystems.

Dual-Platform Collection

The only tool supporting both Microsoft 365 and Google Workspace cloud attachments in a single interface.

Industry exclusive

Point-in-Time Recovery

Capture the exact document version that existed when the email was sent, not the current version.

Critical for litigation

Rich Metadata Export

Complete CSV export with authors, timestamps, permissions, sharing settings, and collaboration history.

Full audit trail

Enterprise Scale

App-Only Access for tenant-wide Microsoft 365 collection with concurrent processing capabilities.

Unlimited scale

How Cloud Attachment Collection Works

A seamless four-step process that ensures no evidence is left behind.

1

Automatic Detection

Aid4Mail scans processed emails for cloud document links, identifying OneDrive, SharePoint, and Google Drive attachments.

Smart Recognition: Works with shortened URLs, embedded links, and various sharing formats

2

Authentication & Access

Connect using OAuth 2.1 secure authentication or process public links without credentials.

Flexible Options: Personal accounts, enterprise SSO, or Remote Authenticator for custodian consent

3

Intelligent Collection

Retrieve documents with configurable parameters: size limits, revision matching, and metadata-only options.

Bandwidth Optimization: Pre-filter to minimize collection scope and avoid redundant downloads

4

Evidence Package

Output includes original files, comprehensive metadata CSV, and complete audit logs for chain of custody.

Court-Ready: FRCP-compliant collection with defensible documentation

Business Impact & ROI

Transform incomplete investigations into comprehensive evidence gathering operations.

Complete Evidence Collection

Never miss critical documents that could determine case outcomes

  • Near 100% capture rate vs. 0% with traditional tools
  • Actual documents retrieved, not just hyperlinks
  • All revisions and metadata preserved
  • Defensible, court-admissible evidence

Temporal Accuracy

Prove what was known when with point-in-time document versions

  • Exact versions as they existed when shared
  • Complete revision history with timestamps
  • Critical for timeline reconstruction
  • Eliminates disputes about document states

Reduce Litigation Risk

Eliminate sanctions for incomplete productions by capturing all cloud-hosted evidence

Save Investigation Time

Automated collection replaces manual document requests, saving weeks per case

Ensure Compliance

Meet FRCP, GDPR, and other regulatory requirements with complete evidence capture

Real-World Applications

See how professionals use cloud attachment collection to ensure complete evidence capture.

Litigation Support

  • Ensure complete document productions under FRCP
  • Capture evidence of collaboration and sharing
  • Prove document states at specific times
  • Avoid sanctions for incomplete collections

IP Theft Investigations

  • Track document exodus through cloud sharing
  • Identify unauthorized file transfers
  • Document collaboration with competitors
  • Build timeline of data exfiltration

Regulatory Compliance

  • Complete GDPR data subject access responses
  • Capture financial documents for SEC investigations
  • Document HIPAA protected information handling
  • Ensure comprehensive audit trails

Incident Response

  • Track compromised document spread
  • Map internal access patterns
  • Assess third-party collaboration exposure
  • Document breach impact comprehensively

Technical Specifications

Enterprise-grade capabilities for professional investigators.

Supported Platforms

  • Microsoft OneDrive Personal
  • OneDrive for Business
  • SharePoint Online
  • Google Drive
  • Google Workspace

Authentication

  • OAuth 2.1 compliance
  • App-Only Access (Microsoft)
  • Delegated permissions
  • Public link support

Processing

  • Revision matching
  • Incremental updates
  • Deduplication
  • MIME carving
  • Recursive scanning

Output Formats

  • Original formats preserved
  • Google Docs → Microsoft conversion
  • Metadata CSV export
  • Complete audit logs

Complete Cloud Evidence Collection

Near 100%

Evidence capture rate

2

Platform ecosystems

500+ MB

Huge file size support

8hrs

For 50,900 emails

Implementation Best Practices

Recommended Settings

  • Enable revision matching for litigation cases
  • Set 50-100 MB limits for high-volume collections
  • Use pre-acquisition filtering to narrow scope
  • Maintain comprehensive audit logs

Common Pitfalls to Avoid

  • Don’t enable revision matching without considering volume
  • Don’t ignore automated notification emails
  • Don’t collect without proper authorization
  • Don’t exceed platform API quotas

Stop Missing Critical Cloud Evidence

Experience the industry’s first comprehensive cloud attachment collection. Start your free trial today and ensure no document is left behind.