SWGDE Best Practices for Digital Evidence

The Scientific Working Group on Digital Evidence, SWGDE, describes itself as an organisation that brings together bodies involved in digital and multimedia evidence to foster communication, cooperation, consistency and quality within the forensic community through consensus-based documents. Its website dates its work from 1998. Members are voted in from government, the legal community, private industry and academia, and a prospective member attends two meetings as a guest first. The group is led by a chair and a vice chair and meets in person in the United States, with meetings listed for January and May 2027.

The technical work is done in seven committees: Audio, Cellular and Geolocation, Forensics, Imaging, Photography, Quality and Standards and Video. Three administrative committees, Bylaws, Membership and Outreach, support them, and ad hoc committees are formed for new topics. Every document is free to download, which is the main reason SWGDE's influence reaches far beyond the United States, including into Indian laboratories.

This page is an overview of the library rather than a summary of any one document. Where a single SWGDE document is central to a topic, for example DVR acquisition or hash algorithms, our Insights articles cover it in depth.

The documents section of swgde.org has five views. The published complete listing holds every document that has completed its comment period; SWGDE calls these final releases and living documents, updates them periodically, puts substantive changes through a fresh comment period and shows only the most recent applicable version. Drafts released for comment are open to anyone for a stated minimum period of 60 days. Positions and considerations are written directly by members to give a position or guidance on a topic and are not put out for public comment. Superseded and archived documents are kept in a separate archive, as are the documents of the former Scientific Working Group on Imaging Technology, SWGIT, whose work SWGDE absorbed.

Each document carries a number such as 17-V-002-1.4. SWGDE does not explain the pattern on its site; our reading is that the first pair is the year the document was started, the letter is the committee, F for Forensics, V for Video, A for Audio, I for Imaging, P for Photography, Q for Quality and Standards, M for documents shared across committees and B for the bylaws, the three digits are a sequence and the final figures are the version. The version is part of the identity: a report should cite 17-V-002-1.4, not just the title.

SWGDE states on its listing pages that it does not certify, approve, recommend or endorse any product, service, technology or practitioner based on claims of compliance with its documents. There is no SWGDE certification of laboratories or people.

The Organization of Scientific Area Committees for Forensic Science, OSAC, is administered by NIST. It keeps the OSAC Registry, which on 2 November 2026 listed 264 entries: 189 standards published by standards developing organisations and 75 OSAC proposed standards. A document reaches the Registry after a technical and quality review open to practitioners, researchers, statisticians, legal experts and the public, and placement needs a two-thirds vote of both the proposing OSAC subcommittee and the Forensic Science Standards Board. OSAC says it encourages the forensic science community to implement the listed standards; it does not and cannot require it.

SWGDE appears on the Registry as the owner of several listed standards. The Digital Evidence Subcommittee's page lists, among others, SWGDE 18-F-003-2.0 on mobile device collection, 17-F-002-2.1 on computer forensic acquisitions, 12-F-004-3.2 on vehicle infotainment and telematics, 18-M-001-2.3 on redaction, 18-Q-001-1.0 on testing tools, 21-F-001-1.1 on acquiring online content, 23-F-003-1.0 on Internet of Things seizure, 23-F-004-1.1 on cloud service providers and 23-F-005-1.0 on Apple macOS acquisition, alongside ASTM standards such as ANSI/ASTM E2916-19e2 on terminology, E3017-19 on magnetic card readers and E3150-18 (2023) on forensic audio laboratory setup. A further set of SWGDE documents is listed as published by a standards developing organisation and awaiting OSAC evaluation.

Two cautions follow. The Registry can lag SWGDE: it lists 17-F-001 at version 2.0 while SWGDE's current version is 5.0, and 18-Q-001 at 1.0 against SWGDE's 2.1. And SWGDE's own listing page carries the heading that its documents can be found on the NIST OSAC Registry, which is true of some, not all. When a report says a method follows an OSAC Registry standard, the examiner should have checked the Registry entry and its version, not only the SWGDE page.