Are screenshots admissible in court as evidence?

Sometimes — with the right authentication. Under Federal Rule of Evidence 901(a), the proponent must demonstrate that a screenshot accurately represents the original content. A native phone screenshot has no integrity mechanism (no SHA-256 hash, no qualified timestamp, no chain of custody) making it vulnerable to authentication challenges (see Griffin v. State, Md. 2011; Commonwealth v. Mangel, Pa. Super. 2018; United States v. Vayner, 2d Cir. 2014). A screenshot becomes self-authenticating under FRE 902(13)/(14) when sealed with a cryptographic hash, qualified timestamp, and accompanied by a Rule 902(11) custodian certification — which is what a ProofSnap forensic ZIP provides at capture time. Admissibility is ultimately decided by the court on a case-by-case basis.

How do I authenticate social media evidence (Facebook, Instagram, X, TikTok) for court?

Authentication of social media evidence under FRE 901(b)(4) requires circumstantial evidence of authorship plus integrity of the artifact. Best practice in 2026: (1) capture the post, the surrounding profile, and any reposts as a single forensic bundle — the bundle gives circumstantial authorship support that Griffin, Mangel, Banas, and Vayner all required; (2) seal the capture with a SHA-256 hash plus RSA-4096 signature plus Bitcoin OpenTimestamps anchor at the moment of capture, eliminating Rossbach-style fabrication challenges; (3) capture HTTP/TLS metadata to rebut spoofing defenses; (4) author a Rule 902(11) custodian certification under 28 U.S.C. § 1746 that references the manifest, signature, and OpenTimestamps proof for FRE 902(13)/(14) self-authentication. ProofSnap's Chrome/Edge extension automates steps 1 through 3 in about 41 seconds per capture.

What is FRE 902(13) and FRE 902(14)?

FRE 902(13) and FRE 902(14) are amendments to Federal Rule of Evidence 902 effective December 1, 2017, that added two new categories of self-authenticating evidence. FRE 902(13) covers certified records generated by an electronic process or system — server logs, transactional records, and capture-tool outputs. FRE 902(14) covers certified data copied from an electronic device, storage medium, or file — data authenticated by a process of digital identification (typically cryptographic hashing). Both rules require a Rule 902(11)-style written certification from a qualified person, made under penalty of perjury under 28 U.S.C. § 1746. The certification bridges the technical capture (the ZIP) and the courtroom (the exhibit). ProofSnap supplies the underlying technical record — SHA-256 manifest, RSA-4096 signature, Bitcoin OpenTimestamps anchor, ISO/IEC 27037 forensic log, chain of custody — that the certification references; the attorney or qualified custodian authors and signs the certification.

What is the best evidence preservation software for lawyers in 2026?

The dominant evidence-preservation tools for civil-litigation attorneys in 2026 are Page Vault, Hanzo, X1 Social Discovery, and ProofSnap. The right choice depends on volume, deployment model, and EU exposure. Page Vault: mature browser-based capture, subscription pricing, SHA-256 hashing, no Bitcoin or eIDAS anchoring. Hanzo: enterprise-scale dynamic-content archiving with AI-assisted review; long deployment runway. X1 Social Discovery: Windows desktop tool for mass enterprise collection; thousands per seat per year; survived past social-platform interface breakages. ProofSnap: Chrome/Edge extension at $18.99/seat/month (Company Plan, minimum 2 seats), adds Bitcoin OpenTimestamps and (Enterprise tier) eIDAS qualified timestamps, plus a $4.99 client-side SnapPack for pre-retainer captures by the client. Best fit for a 2 to 25-attorney plaintiffs' firm: ProofSnap. Best fit for a corporate-investigations team handling 100,000+ items per matter: X1 or Hanzo.

How is ProofSnap different from Everlaw, Relativity, or Logikcull?

Complementary, not competing. Relativity, Everlaw, Logikcull, Filevine, and CaseMap handle e-discovery at scale — review, privilege, and production for documents already in your possession. ProofSnap handles the capture moment: the instant a live web page, social media post, marketplace listing, or behind-login dashboard needs to be preserved before it changes or disappears. ZIP outputs ingest cleanly into Relativity / Everlaw / Logikcull for Bates stamping and production.

Can you capture content that is behind login (private groups, DMs, dashboards)?

Yes. ProofSnap is a Chrome/Edge desktop browser extension that captures exactly what the authenticated browser session is showing — public posts, private profiles, group content, direct messages, marketplace dashboards, account state pages, internal admin views. Authentication is the user's own session; ProofSnap does not bypass logins, scrape, or store credentials.

Can my client capture evidence before retaining me?

Yes — and this is the most common pattern in fast-moving matters. The client purchases SnapPack ($4.99 one-time, 10 forensic captures) directly on getproofsnap.com, captures the postings during the first hour after incident, and emails you the ZIPs before the retainer is signed. Same forensic ZIP structure your firm would produce; no firm subscription required. Particularly useful for NCII, defamation, fraud, and breach-of-contract matters where the content may be deleted before counsel is engaged.

E-discovery production: Rule 34(b)(2)(E), Bates stamping, and DMS integration?

Dual-track. Native — produce the ZIP itself as an atomic exhibit; manifest.json + evidence.pdf provide a human-readable index. Bates-stamped TIFF/PDF — evidence.pdf is the standard-format exhibit your litigation-support team Bates-stamps (Relativity / Everlaw / Logikcull auto-Bates on ingestion); companion files (metadata.json, forensic_log.json, manifest.json.ots) produced with sub-Bates numbers (e.g., PS000123.001). Concordance/Summation/LEF load files can be generated from the ZIP in 15–30 minutes. ZIPs can be aggregated in your own DMS (Clio, iManage, NetDocuments).

Do I need eIDAS qualified timestamps for a US case?

Almost never for US-only matters. OpenTimestamps (Bitcoin) is sufficient for FRE 902(13). eIDAS qualified timestamps (EU Regulation 910/2014 Article 41) add a statutory presumption of accuracy in all 27 EU member states — valuable for cross-border matters (EU-domiciled defendant, foreign platform, DSA Article 16 proceeding, GDPR action). Company Plan includes 5 eIDAS timestamps per user/month; Enterprise tier ($28.99/month) includes unlimited eIDAS on every capture.

Privilege, malpractice insurance, and ethics?

ProofSnap runs locally in the browser tab. Captured content is never sent to our servers — the ZIP is produced client-side. No attorney-client privilege issue because captured web pages are public-facing or session-authenticated third-party content under the firm's control. Company Plan uses per-seat credentials; SAML/SCIM SSO available on Enterprise. Malpractice / professional liability: ProofSnap typically falls within standard office-technology coverage (ALPS, CNA, Lawyers Mutual, CAMICO standard form policies), analogous to Lexis / Westlaw / Clio usage — not a scheduled third-party vendor requiring separate disclosure. Confirm with your carrier; we are not an insurance broker.

What if the content has already been deleted before I capture?

ProofSnap captures live content; it cannot retrieve content that is already gone. For deleted content: (1) the client's existing screenshots can be wrapped in a SHA-256 + OpenTimestamps envelope via ProofSnap's File Certification feature — this establishes the file has not been modified since certification, but does not retroactively prove the original content was authentic; (2) issue platform preservation letters and Rule 45 subpoenas; (3) check Internet Archive Wayback Machine snapshots; (4) check StopNCII / Lumen database for NCII or DMCA takedowns. Best practice in any matter: capture with ProofSnap the moment the matter is opened, before any takedown demand alerts the poster.

How long does ProofSnap evidence stay verifiable?

Designed to remain verifiable indefinitely. The TSA certificate chain and a frozen snapshot of the EU Trusted List are bundled inside the ZIP, so eIDAS verification works offline even years later. The Bitcoin OpenTimestamps anchor is preserved by the entire Bitcoin network — independent of ProofSnap's continued existence. SHA-256 and RSA-4096 are NIST-recommended standards expected to remain secure through at least 2030. Verification requires only python3 + openssl + ots client — standard, open-source tools.

Why now: Rossbach sanctions · EU AI Act Art. 50 (Aug 2026)

For civil-litigation attorneys · US · EU · UK

Your client's screenshots won't survive court. Yours will.

Q: Is ProofSnap a substitute for a notary, expert witness, or legal advice?

No. ProofSnap is a digital evidence preservation tool, not a legal service. It does not provide legal advice, replace a notary act, or guarantee admissibility — admissibility is decided by the court on a case-by-case basis. ProofSnap strengthens the technical foundation under FRE 901/902; the attorney still authors the Rule 902(11) certification and any motions in limine.

In short: ProofSnap is a Chrome/Edge browser extension that captures live web pages, social media posts, marketplace listings, and behind-login dashboards as FRE 902(13)/(14) self-authenticating ZIPs. Each ZIP carries a SHA-256 manifest, RSA-4096 signature, Bitcoin OpenTimestamps anchor, and (optionally) an eIDAS qualified timestamp under EU Regulation 910/2014. Used by plaintiffs' attorneys and defense counsel in defamation, IP, employment, family law, NCII, breach of contract, and regulatory matters. Company Plan $18.99/seat/month (min 2 seats). 7-day free trial.

A browser extension for your firm and your clients. Every ZIP carries SHA-256, RSA-4096, and Bitcoin OpenTimestamps — the authentication foundation Rossbach-style fabrication challenges can't tear apart.

Start 7-day free trial — install Chrome extension

Capture your first matter tonight. Cancel by day 7 at zero cost.

Sample ZIP

13 files · see what gets admitted

Firm pricing

From $18.99/seat/month

Chrome Web Store verified Microsoft Edge Runs locally · no privilege issue FRE 902(13)/(14) ready

ProofSnap Chrome extension for attorneys — capture web evidence as FRE 902-ready ZIPs with SHA-256, RSA-4096, and Bitcoin OpenTimestamps

For your firm

✓Partners, associates, paralegals capture during intake & discovery
✓Admissible under FRE 902(13)/(14) with your Rule 902(11) certification
✓Firm-wide Company Plan $18.99/seat/month, min 2 seats

For your clients

✓Client buys SnapPack $4.99, captures 10 items, emails you the ZIPs
✓Evidence arrives before the retainer is signed or content is taken down
✓Same forensic ZIP structure as firm-captured evidence

What ProofSnap is — and what it is not

ProofSnap is a digital evidence preservation tool. It captures the cryptographic foundation that supports FRE 901/902 authentication. It is not legal advice, a notary act, or a guarantee of admissibility. Admissibility is decided by the court on a case-by-case basis — ProofSnap strengthens your technical foundation; the attorney still authors the Rule 902(11) certification and any motions. We do not represent clients, give legal advice, or replace expert witnesses.

What unauthenticated evidence costs you

Four ways phone screenshots end careers and cases.

Authentication challenges used to be a niche concern. Post-Rossbach, opposing counsel knows the playbook. Here is what is on the table when your evidence cannot stand on its own.

Case-dispositive sanction

Rossbach v. Montefiore (2d Cir. 2023): plaintiff's claim dismissed for fabricated iMessage screenshots after device-metadata forensic analysis. Rule 11(c) and Rule 37(e) sanctions exposure on counsel.

ProofSnap effect: any post-hoc edit breaks the SHA-256 manifest, invalidates the RSA-4096 signature, and orphans the OpenTimestamps anchor — Rossbach-style metadata-inconsistency analysis has nothing to find.

Malpractice exposure

Carriers (ALPS, CNA, Lawyers Mutual, CAMICO) increasingly ask about digital evidence handling on renewals. A failed authentication that costs a case becomes the predicate for a malpractice claim from the client.

ProofSnap effect: self-authenticating evidence under FRE 902(13)/(14) is a defensible standard of care — documented, repeatable, verifiable by any expert.

Expert-witness fees you didn't budget

When a screenshot's authenticity is challenged, the cure is a forensic examiner: typical engagement $5,000–$15,000 per matter, longer if device imaging is required. Many contingency-fee cases cannot absorb that mid-litigation.

ProofSnap effect: the ZIP carries the expert's starting foundation. Either the examiner shortens the engagement, or the challenge never makes it past the meet-and-confer.

Lost settlement leverage

Self-authenticating evidence accelerates settlement — opposing counsel who can't credibly challenge your captures stops trying. Discovery shortens. Motion practice shortens. Cases settle on the strength of the record, not the cost of litigating around it.

ProofSnap effect: defendants' motion-to-strike economics flip when every capture carries SHA-256 + Bitcoin OpenTimestamps + (optional) eIDAS. The strongest record settles fastest.

Stop the cost — start 7-day free trial

The ZIP your firm produces

14-file forensic evidence package.

Designed to support authentication under FRE 902(13) (certified records generated by an electronic process or system) and 902(14) (certified data copied from an electronic device), both effective December 1, 2017, with a hash + signature + blockchain-anchor triple you or opposing counsel can verify independently at opentimestamps.org.

screenshot.jpeg Visual capture of the page

capture_video.webm Screen recording of capture

page.html Full HTML content

domtextcontent.txt Extracted DOM text

metadata.json Timestamp, URL, browser, TLS

evidence.pdf Compiled evidence report

provenance_certificate.pdf Content credentials / capture integrity

manifest.json File listing + SHA-256 hashes

manifest.sig RSA-4096 digital signature

manifest.json.ots OpenTimestamps Bitcoin anchor

publickey.pem Public key (verify signature)

forensic_log.json ISO/IEC 27037 capture log

chain_of_custody.json Device + NTP verification

manifest.json.tsr eIDAS qualified RFC 3161 timestamp

Rules 902(13) and 902(14) require a written certification from a qualified person. The attorney or qualified custodian prepares and signs that certification under 28 U.S.C. § 1746; ProofSnap supplies the underlying technical record to reference. Verifies offline by opposing counsel with only python3 + openssl + ots — no ProofSnap service or account required.

Start 7-day free trial → Download sample ZIP

What lawyers capture

From a social media post to a behind-login dashboard.

Any content that lives on the open web or behind your client's login — preserved as one self-contained, offline-verifiable ZIP.

Defamation & libel

Posts, comments, reviews, and republications — before the poster edits or deletes.

Social media evidence →

IP & copyright

Copied content, infringing listings, counterfeit catalogs, trademark misuse — with HTTP/TLS metadata.

DMCA & copyright →

Employment & harassment

Workplace harassment, retaliation, wrongful termination, Title VII / Title IX matters.

Workplace harassment →

Family law & custody

Custody-relevant social media, contradicting statements, evidence of cohabitation or income.

Divorce & custody →

NCII & deepfake

VAWA § 6851, DEFIANCE Act, state revenge-porn civil statutes, 48-hour Take It Down Act.

NCII attorney guide →

Breach of contract

Changed terms, pricing pages, SLA disclosures, deleted refund policies, vendor representations.

Chargeback evidence →

Brand protection

Counterfeit listings, impersonation accounts, marketplace fraud, seller identity at moment of capture.

Brand protection →

Compliance & regulatory

GDPR / DSA evidence packs, FTC complaints, consumer-protection filings, regulatory disclosures.

GDPR evidence →

Behind-login content

Private groups, DMs, marketplace dashboards, admin views, account-state pages — captured from the authenticated session.

How it works →

Key case law for quick reference

The authentication cases your motion will cite.

Cautionary precedent

Rossbach v. Montefiore Med. Ctr., No. 21-2084 (2d Cir. 2023)

What happened. Plaintiff in an employment-discrimination matter produced iMessage screenshots as core evidence of discriminatory communications. Defense moved to compel forensic examination of plaintiff's phone. Examination revealed metadata inconsistencies suggesting the screenshots were fabricated — iOS version artifacts and timestamp anomalies that could not exist on the dates claimed.

Result. District court granted summary judgment to the defendant; Second Circuit affirmed. Plaintiff's case was dispositively over — not on the merits, on the evidence. The opinion has been cited repeatedly since 2023 by defense counsel as authority for compelling forensic examination of any party's phone-screenshot evidence.

Why it matters to you. The defense playbook from Rossbach — demand forensic examination, find the metadata gap, move for sanctions — now travels well beyond employment cases. Family law, defamation, IP, and breach-of-contract counsel are all citing Rossbach-style attacks on phone screenshots filed without forensic provenance.

How ProofSnap closes the attack. Each capture is sealed at the moment of acquisition with a SHA-256 manifest, RSA-4096 signature, and Bitcoin OpenTimestamps anchor. Any post-hoc edit (one byte, one pixel) breaks the hash, invalidates the signature, and orphans the timestamp. The Rossbach-style examination has no internal contradiction to find — the file is either deterministically intact, or visibly broken.

Seven supporting cases your motion will reference

Lorraine v. Markel Am. Ins. Co., 241 F.R.D. 534 (D. Md. 2007) — Judge Grimm's foundational ESI framework (Rule 901 / 801–807 / 1001–1008 / 403). The ZIP supports the Rule 901 identification prong; remaining prongs are your legal work.
Griffin v. State, 419 Md. 343 (2011) — social-media printouts alone don't authenticate authorship. ProofSnap captures the full account profile alongside posts, giving you the circumstantial foundation under FRE 901(b)(4).
Commonwealth v. Mangel, 181 A.3d 1154 (Pa. Super. 2018) — extends Griffin's authorship concern. Same foundation applies; the ZIP's HTTP/TLS metadata can rebut a spoofing defense.
Commonwealth v. Banas, 5 N.E.3d 3 (Mass. App. Ct. 2014) — Facebook screenshot printout ruled inadmissible without additional circumstantial authentication. Reinforces the Griffin / Mangel pattern.
United States v. Vayner, 769 F.3d 125 (2d Cir. 2014) — VKontakte page authentication reversed for insufficient circumstantial evidence of ownership. HTTP/TLS handshake metadata in the ZIP rebuts the core Vayner concern.
Tienda v. State, 358 S.W.3d 633 (Tex. Crim. App. 2012) — MySpace profile authenticated through combination of distinctive content, photos, and corroborating circumstances. ProofSnap captures all three layers in a single ZIP.
Dendrite Int'l v. Doe No. 3, 775 A.2d 756 (N.J. 2001) — four-step John Doe unmasking test. The ZIP satisfies the posting-authenticated prong; Rule 45 subpoena handles identity.

ProofSnap strengthens your foundation across every authentication case — start 7-day free trial

EU / cross-border matters

eIDAS qualified timestamps for EU courts.

For matters with EU-domiciled parties, foreign platforms, DSA Article 16 takedowns, or GDPR actions, ProofSnap optionally seals each ZIP with an eIDAS qualified timestamp from an EU Qualified Trust Service Provider.

Legal recognition

eIDAS Regulation (EU) 910/2014, Article 41 grants a qualified timestamp a statutory presumption of accuracy across all 27 EU member states — admissible in any European court without additional authentication.

Qualified provider

RFC 3161 timestamps issued by an EU Trusted List Qualified TSP. The full certificate chain and a frozen snapshot of the EU Trusted List are bundled in the ZIP — verification works offline, indefinitely.

Company Plan includes 5 eIDAS qualified timestamps per user/month. Enterprise tier ($28.99/month) includes unlimited eIDAS on every capture — recommended for EU-based firms and US firms with regular cross-border work.

Read more about eIDAS for legal evidence →

Already evaluating Page Vault, Hanzo, or X1 Social Discovery?

How ProofSnap compares.

All four tools capture web pages with cryptographic integrity. The differences are in price model, deployment friction, behind-login support, blockchain anchoring, and EU eIDAS coverage. Public information, last reviewed May 2026 — verify current details on each vendor's site before purchasing.

Feature	ProofSnap	Page Vault	Hanzo	X1 Social Discovery
Pricing model	$18.99/seat/mo (Company); $4.99 SnapPack (client)	Subscription, contact for quote	Enterprise contract	$2K–$5K+/yr per seat
Deployment	Chrome / Edge extension, 30 sec install	Browser-based, account required	Cloud platform, IT setup	Windows desktop install
SHA-256 hash + RSA-4096 signature	✓ Both, every capture	SHA-256 only	SHA-256 only	SHA-256 only
Bitcoin OpenTimestamps anchor	✓ Every capture	—	—	—
eIDAS qualified timestamp (EU courts)	✓ Enterprise tier	—	—	—
Behind-login capture (DMs, dashboards)	✓ Native, user's session	✓	✓	✓
Client-side capture (pre-retainer)	✓ SnapPack $4.99	—	—	—
Offline verification (no vendor required)	✓ python3 + openssl + ots	Vendor-hosted	Vendor-hosted	Vendor-hosted
FRE 902(13)/(14) self-authenticating	✓	✓ (with affidavit)	✓ (with affidavit)	✓ (with affidavit)
Free trial	7-day free trial, all plans	Demo only	Demo only	Demo only

vs. Page Vault

Same browser-extension UX, adds Bitcoin OpenTimestamps + eIDAS + RSA signature, plus client-side SnapPack for pre-retainer capture.

vs. Hanzo

Lower deployment friction (extension, not enterprise contract). Both handle dynamic content; ProofSnap adds blockchain anchoring & per-seat transparent pricing.

vs. X1 Social Discovery

~10× less expensive at small-firm scale. X1 wins on enterprise mass-collection; ProofSnap wins on per-matter capture & cross-platform (Mac/Linux via Chrome/Edge).

Comparison based on each vendor's publicly available marketing materials and reviews on G2 / Capterra / SoftwareWorld as of May 2026. Verify current pricing and feature parity directly with each vendor.

Firm pricing

Start free. Upgrade when you bill for the matter.

7-day free trial on all plans. Billing starts at day 8 unless you cancel — credit card required to start, charged only after the trial period if you don't cancel. Firm overhead, not per-capture billing.

Recommended for firms

Company Plan

$18.99 / seat / month

Minimum 2 seats · annual $190/seat (save 17%).

✓ 7-day free trial · cancel by day 7 at zero cost

Unlimited captures per seat
Team dashboard + shared audit log
5 eIDAS qualified timestamps per user/month (Art. 41 EU presumption)
FRE 902(13)/(14) self-authenticating ZIPs
Bitcoin OpenTimestamps anchoring on every capture
Priority support

Start 7-day free trial →

Cancel by day 7 Cancel any time after Questions?

Solo attorney · Enterprise single-seat

$28.99 / month

Annual $280/yr (save 20%).

✓ 7-day free trial · cancel by day 7 at zero cost

Unlimited captures
Unlimited eIDAS qualified timestamps on every capture (EU court-ready)
Bitcoin OpenTimestamps + RSA-4096
Priority support
SAML/SCIM SSO available

Start 7-day free trial →

Credit card required to start · cancel by day 7 at zero cost

Chrome Web Store verified Microsoft Edge Add-ons Local-only · no privilege issue Annual plans save 17–20%

See full pricing table for Essential ($8.99/mo) and Professional ($16.99/mo) mid-tiers, or SnapPack $4.99 for client pre-retainer capture.

Attorney FAQ

Next matter is always one call away

Install the Chrome extension now. Use it on your next intake call.

7-day free trial — cancel by day 7 at zero cost. The moment your client describes the first post, you text them the install link and they send you a forensic ZIP before they hang up.

Start 7-day free trial — install Chrome extension Edge Add-ons version

Cancel by day 7 at zero cost · download sample ZIP first · support@getproofsnap.com

Legal disclaimer: This page provides general information for civil-litigation attorneys and is not legal advice. ProofSnap is not a law firm and does not represent clients. Consult a licensed attorney in the relevant jurisdiction before relying on any content. Case-law summaries are abbreviated for context; read the opinions before citing them. Statutes and rules change; verify current text before filing. Admissibility is decided by the court on a case-by-case basis — ProofSnap supports authentication but does not guarantee admission.

Vertical guides for lawyers

Legal research shortcuts