Authenticating Documents and Electronic Evidence

Authentication is the requirement that a party offering an item show it is what the party says it is. Federal Rule of Evidence 901(a) sets the standard: the proponent must produce evidence sufficient to support a finding that the item is what the proponent claims. That is a screening test, not a conclusion, and it is satisfied well below the level of proof required to win a disputed point.

The sufficiency standard and who decides

The judge does not decide whether the letter was really signed by the defendant. The judge decides whether a reasonable juror could so find on the evidence presented. If the answer is yes, the item goes to the jury, and the opponent is free to argue at length that the signature is forged. Contrary evidence does not defeat admission; it creates a jury question.

This structure is conditional relevance. The exhibit matters only if the connection is true, so the court admits it subject to proof of the connection. Courts sometimes admit an item subject to later connection, allowing the foundation witness to be called out of order. If the connecting proof never arrives, the remedy is a motion to strike and an instruction to disregard.

The illustrations and how they are used

Rule 901(b) supplies examples that are expressly not exhaustive. The simplest is testimony of a witness with knowledge that an item is what it is claimed to be. Others cover a non-expert opinion about handwriting familiarity acquired outside the litigation, comparison by an expert or the jury with an authenticated specimen, and identification of a voice by anyone who has heard it under circumstances connecting it to the speaker.

Distinctive characteristics is the most flexible illustration. The appearance, contents, substance, internal patterns or other characteristics of an item, taken with all the circumstances, can authenticate it. A letter answering an earlier letter, an email referring to details only two people knew, and a ledger written in one hand across years all authenticate themselves this way.

Two further illustrations matter for records. Evidence about a public record, showing it was recorded or filed in a public office as authorized by law, authenticates the record. Evidence describing a process or system and showing that it produces an accurate result authenticates output from that process, which is the standard route for database extracts, call detail records and instrument readings.

The self-authenticating categories

Rule 902 lists items that require no extrinsic evidence of authenticity. They include domestic public documents sealed and signed; domestic public documents not sealed but signed and certified; foreign public documents with a final certification; certified copies of public records; official publications issued by a public authority; newspapers and periodicals; trade inscriptions affixed in the course of business; acknowledged documents executed before a notary; commercial paper and related documents to the extent general commercial law allows; and matters that a federal statute declares presumptively authentic.

Four later provisions extend the concept. Rule 902(11) covers certified domestic records of a regularly conducted activity, and Rule 902(12) the foreign equivalent. Rule 902(13) covers a certified record generated by an electronic process or system that produces an accurate result. Rule 902(14) covers certified data copied from an electronic device, storage medium or file, authenticated by digital identification such as a hash comparison.

Building the foundation for electronic material

Electronic evidence raises no special legal standard, only a practical one. The proponent should be able to say where the material came from, who collected it, what tool was used, and how the copy relates to the source. Collection records, custodian declarations and hash values do this work. Where material was exported from a platform or a corporate system, the export procedure itself becomes part of the story.

Attribution is a separate question from integrity. Proving that a message is an unaltered copy of what was on a phone does not prove who typed it. That link usually comes from content, context and surrounding conduct. Where the source sits outside the country, collection often depends on the arrangements described in obtaining discovery from a party located abroad, and the resulting foundation has to account for the intermediary.

The three questions authentication leaves open

An authenticated document may still be inadmissible. If it is offered to prove what it asserts, it is hearsay unless an exclusion or exception applies, most often the exception for records of a regularly conducted activity. If its contents are being proved, it must satisfy the requirement of an original or a recognized substitute. And it must clear the relevance threshold and the discretionary balancing.

Keeping these separate saves argument. A party told its exhibit lacks foundation should ask which of the four questions is being raised, because the cure differs entirely. A missing custodian certification, a missing hearsay exception and a missing original are three different problems, and only one of them can be fixed by calling another witness.