The digital collection landscape is constantly changing, and the solutions we rely on to preserve, collect and review data must follow suit. Our commitment to the forensic and eDiscovery communities is to ensure Cellebrite’s data collection methods are comprehensive and future ready.  

Between rising privacy concerns, tightening security protocols and increasingly complex data environments, our customers have let us know that remote mobile collection methods are becoming increasingly challenging for custodians and examiners. Stringent privacy and security requirements from Apple and Android are a contributing factor, and while features like Stolen Device Protection from Apple enhance a user’s security, it makes the collection process more complicated. 

To align with the changes in the industry, we believe investigations will require full file system extraction with advanced collection methods to respond to this shift.  

A Future-Focused Strategy 

As vendors tighten security controls and new applications emerge, users may find certain data is no longer accessible through remote logical collection methods. This shift challenges the completeness of logical collections, especially when new applications which aren’t yet supported emerge. In order to collect all the necessary data pertaining to a case, users may have to re-collect or repeat collections, and this holds no guarantee of finding additional data. 

Remote collections may produce fewer results from third-party applications, often falling short of the mandated collection scope. This requires follow-ups and additional in-person collections which delay resolution and expose the organization to increased risk. A move toward physical extractions using advanced solutions like Cellebrite Inseyets for Enterprise offers deeper access, greater defensibility and reduces repeat requests for additional collections.  

“We want our customers to be equipped with solutions that give them a comprehensive view of the data they need,” said Philip O’Reilly, VP of sales for Cellebrite Enterprise Solutions. “From cloud sources to messaging apps, even deleted data, this new direction allows us to better support our users’ needs to collect and preserve data that is vital to their cases.”   

According to the 2025 Cellebrite Industry Trends Survey, two-thirds of cases now involve mobile data. Devices with encrypted messaging like WhatsApp and WeChat are particularly complex and cannot be collected remotely via logical collections. By performing advanced extractions with advanced full file system collections, users can access all the data on the device, even deleted data that is not supported by a logical acquisition. 

Navigating the Current Landscape 

While some providers may continue to focus on remote mobile logical collection, we see this as a short-term solution in a long-term game. Our decision to refine our focus to make full file system collections more accessible reflects our belief in building future-proof solutions that offer the highest standards of data integrity and completeness.  

Why This Matters 

Our own research and thought leadership have consistently highlighted the challenges of accessing and managing mobile data. From our Mobile Gap Analysis White Paper to our recent publication, From Pocket to Courtroom: The Legal Significance of Mobile Data, it is clear that comprehensive collection methods are no longer optional, they’re essential.  

Our Commitment to Accelerating Case Resolutions 

By concentrating the majority of our efforts on comprehensive full file system extractions and remote computer collections, we’re doubling down on our promise to offer a clear and complete picture of the critical data organizations need. We believe full file system extraction for mobile devices is becoming essential to support internal investigations and eDiscovery —not just to meet today’s needs, but to anticipate tomorrow’s challenges.  

This shift is part of our commitment to staying ahead of the curve and delivering exceptional value. 

Share this post