What Is the Evidence Vault?
The Evidence Vault is a dedicated, encrypted storage location for all case evidence. While FrameCounsel can store cases on your internal drive, using an external drive provides physical security — you can lock the drive in a safe when not in use, and it is isolated from your primary system.
Recommended Drive: SanDisk PRO-G40
We recommend the SanDisk Professional PRO-G40 SSD for evidence vault use:
- Interface: Thunderbolt 3 / USB-C (up to 40Gbps via Thunderbolt)
- Capacity: Available in 1TB, 2TB, and 4TB
- Durability: IP68 dust and water resistant, 3-meter drop protection
- Speed: Up to 3,000 MB/s read, which is essential for smooth video playback directly from the drive
Setting Up the Evidence Vault
- Connect the PRO-G40 (or your preferred external drive) to your Mac.
- Open FrameCounsel > Settings > Storage.
- Click Set Evidence Vault Location and select the external drive.
- FrameCounsel creates an encrypted container on the drive using APFS encryption. You will be prompted to set a strong passphrase.
Tip: Use a unique, strong passphrase for the evidence vault. Store a backup of the passphrase in a secure location (e.g., a physical safe or a password manager). If you lose the passphrase, the data cannot be recovered.
Encryption Details
The evidence vault uses APFS native encryption with AES-256-XTS. This is the same encryption standard used by FileVault for macOS system drives. Key points:
- Encryption and decryption are handled by the Apple T2 / Secure Enclave hardware, so performance impact is minimal.
- The vault locks automatically when the drive is ejected or the Mac goes to sleep.
- To unlock, reconnect the drive and enter the passphrase in FrameCounsel.
Backup Strategies
We recommend a 3-2-1 backup strategy for critical case evidence:
- 3 copies of all evidence (original source, evidence vault, backup)
- 2 different storage types (external SSD + internal drive or second external)
- 1 offsite copy (a second encrypted drive stored in a separate physical location)
FrameCounsel includes a built-in backup tool: go to Tools > Backup Vault to create an encrypted copy of the entire vault on a second drive.
Ejecting Safely
Always eject the evidence vault drive properly:
- Click the eject icon next to the vault in FrameCounsel's Storage settings, or
- Use Finder to eject the drive.
Warning: Disconnecting the drive without ejecting can corrupt the encrypted container, potentially resulting in data loss. Always eject before unplugging.