What Is a Preservation Order?
A preservation order (also called a preservation notice, litigation hold, or evidence preservation request) is a legal mechanism that compels a party to retain specific evidence that may be relevant to current or anticipated litigation. In the digital context, this can include emails, chat logs, social media posts, database records, server logs, and website content.
Courts issue preservation orders to prevent spoliation — the intentional or negligent destruction of evidence that one party knows is relevant to a legal proceeding.
When Are Preservation Orders Used?
Pre-Litigation
When litigation is reasonably anticipated, parties have a duty to preserve relevant evidence. An attorney may send a preservation letter to the opposing party or to third-party platforms demanding that specific data be retained.
During Litigation
Courts can issue formal orders requiring preservation of specific categories of evidence. Violation of a court-ordered preservation directive can result in severe sanctions, including adverse inference instructions (the court tells the jury to assume the destroyed evidence was unfavorable to the spoliator).
Third-Party Platforms
Preservation requests can be directed at social media companies, web hosting providers, ISPs, and other entities that control relevant data. Most major platforms have law enforcement and legal request portals for this purpose.
The Problem: Preservation Orders Are Often Too Late
Preservation orders have a fundamental timing problem. Consider the typical sequence:
- Harmful content appears online
- You discover it hours, days, or weeks later
- You consult an attorney
- The attorney prepares and sends a preservation letter
- The platform receives and processes the request
By step 5, the content may already be deleted. Social media posts can be removed in seconds. Websites can be modified at any time. Platform data retention policies may have already purged the relevant records.
Even when a preservation order is issued promptly, compliance is not guaranteed:
- Platforms may not comply — Some platforms, especially smaller ones or those based in other jurisdictions, may ignore preservation requests
- Users can delete content — A preservation letter sent to a platform does not prevent the content creator from deleting their post before the platform can preserve it
- Automated systems may purge data — Retention policies, database cleanups, and automated moderation can destroy evidence before human review
Self-Preservation: The First Line of Defense
Because preservation orders cannot guarantee evidence survival, proactive self-preservation is essential. The strongest position is to have already captured the evidence forensically before requesting a preservation order.
What Self-Preservation Looks Like
Effective self-preservation means:
- Capturing the content immediately upon discovery, before notifying anyone
- Using forensic-grade tools that create verifiable, tamper-proof evidence packages
- Storing evidence securely with integrity verification and documented chain of custody
- Capturing supporting context — the author's profile, surrounding posts, engagement metrics, and platform interface elements
What Self-Preservation Does NOT Look Like
- Taking a screenshot on your phone
- Saving a webpage as a PDF from your browser
- Copying and pasting text into a document
- Using the Wayback Machine and hoping it captured the right version
These methods lack the authentication, integrity verification, and timestamp proof that courts require.
How TrueSnap Fits Into the Preservation Strategy
TrueSnap serves as your immediate evidence preservation tool — the first action you take before anything else:
Capture First, Then Pursue Legal Channels
- Discover harmful content and immediately capture it with TrueSnap
- TrueSnap creates a complete evidence package: screenshot, DOM snapshot, HAR network log, TLS certificates, SHA-256 hash, and blockchain timestamp
- Now you have verified evidence regardless of what happens to the original content
- Contact your attorney with the evidence already preserved
- Pursue formal preservation orders as an additional layer of protection
Why This Order Matters
If you contact the attorney first, the content may be deleted during the consultation period. If you send a preservation letter first, the recipient may delete the content upon realizing they are being monitored. By capturing first, you ensure the evidence exists no matter what follows.
Sanctions for Spoliation
Courts take evidence destruction seriously. Sanctions for spoliation may include:
- Adverse inference instructions — The jury is told to presume the destroyed evidence was unfavorable to the party that destroyed it
- Issue preclusion — The court rules on certain facts against the spoliating party
- Monetary sanctions — Fines and requirement to pay the other party's costs
- Case dismissal or default judgment — In extreme cases, the court may dismiss the spoliator's claims or enter judgment against them
Having forensically captured evidence can also help you prove spoliation by the opposing party: your timestamped capture proves the content existed, and the opposing party's inability to produce it demonstrates destruction.
Best Practices
- Capture immediately — Do not wait for legal counsel before preserving evidence
- Use forensic tools — Ensure your captures include cryptographic verification and trusted timestamps
- Document everything — Keep a log of when you discovered the content, when you captured it, and every subsequent step
- Secure storage — Store evidence packages on reliable media with backups in separate locations
- Layer your approach — Self-preservation first, formal preservation orders second, platform requests third
Key Takeaway
Preservation orders are powerful legal tools, but they cannot turn back time. Content that is deleted before a preservation order is issued may be gone forever. Proactive forensic capture with tools like TrueSnap ensures you have verified, court-ready evidence from the moment of discovery — making preservation orders a backup strategy rather than your only hope.