--- sourceDocument: Brazil Public Sector sourceDocumentLink: https://www.servicenow.com/docs/r/government-industry Release : - brazil ft:locale : - en-US ft:publication_title : - Brazil Public Sector ft:clusterId : - gvin bundleId : - gvin workflow : - Customer and Industry --- # Using Evidence Management # Using Investigative Case Management Evidence Management {#ariaid-title1} Release version: Brazil Updated September 10, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 5 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Using Investigative Case Management Evidence Management Investigative Case Management Evidence Management is a feature designed to help investigators efficiently log, manage, and track all physical and digital evidence related to investigative cases. It ensures evidence is consistently classified, accessible, and associated with relevant investigative records, supporting both civilian and internal investigative units. This functionality supports compliance and audit requirements by maintaining thorough documentation of evidence custody and related activities. Show full answer Show less ## Key Features * **Evidence Logging and Management:** Upload or log new evidence items, including physical objects, documents, images, and web-hosted digital files, with comprehensive metadata such as evidence type, source, date received, and notes. * **Entity Linking:** Link evidence to multiple entities including persons (subjects, victims, witnesses), locations (crime scenes, storage), events (arrests, tips), vehicles, properties, firearms, and organizations. This enables holistic case analysis by associating evidence with all relevant investigative elements. * **Evidence Record Interface:** Access detailed evidence records within the Investigative Case Management workspace through the Evidence tab. The record page contains tabs for Details, Cases, Chain of Custody, and entity-specific links (Persons, Locations, Events, Properties, Vehicles, Firearms, Organizations). * **Chain of Custody Tracking:** Maintain a digital chain of custody log capturing evidence movement, transfer, and status changes. Each action is timestamped and assigned to responsible personnel, supporting audit trails and accountability. This includes entries for sender/receiver, transfer methods, custody location, and can be extended with document uploads or signature capture. ## Practical Benefits for ServiceNow Customers * **Centralized Evidence Management:** Consolidate physical and digital evidence records into a structured, searchable system to improve investigative efficiency and data integrity. * **Improved Case Association:** Seamlessly link evidence to multiple cases and related entities, providing investigators with a comprehensive view of case data and interconnections. * **Compliance and Audit Readiness:** Digital chain of custody records ensure transparent tracking of evidence handling, essential for internal investigations, law enforcement, and compliance offices. * **Enhanced Collaboration:** Facilitate coordination across investigative teams and departments by providing clear, auditable custody logs and shared access to evidence metadata. ## How to Use Evidence Management Investigators can access the Evidence Management features directly from the Investigative Case Management application. They can create and update evidence records, link evidence to relevant persons, locations, events, vehicles, properties, firearms, and organizations, and maintain comprehensive chain of custody logs to track custody changes and movements. This structured approach supports thorough investigations and helps maintain the integrity and accountability of evidence handling. Investigative Case Management Evidence Management guides investigators through the process of logging and managing all physical and digital evidence associated with a case, ensuring it's consistently classified, accessed, and associated with relevant investigative records. The Evidence Management feature provides a structured, searchable record system for managing evidence across all investigative contexts, whether the evidence is a physical item stored in a law enforcement evidence locker, or a digital file hosted on a cloud platform. With thorough metadata, customizable access controls, and auto-linkage to cases, people, locations, events, and other entities, investigators can track and integrate evidence into case data. For civilian and internal investigative units, Evidence Management offers a comprehensive method for documenting evidence custody, keeping related records, and maintaining audit compliance. With Evidence Management, investigators and supervisors can: * Upload or log new evidence (physical or digital, such as documents, images, web-hosted files, or physical items) and view a list of evidence records per case * Map evidence to the investigation and assign it to a subject, event, location entity * Link evidence to a person, location, event, vehicle, property, or organization * Capture and store key metadata, such as evidence type, evidence source, the date it was received, and associated notes * Track the movement, transfer, and status changes of evidence records with timestamps and responsible personnel for each action with the digital chain of custody feature. * Track custody or handler information for a piece of evidence in a dedicated chain-of-custody record with audit logging, capturing when and by who something was opened and viewed {#psds-explore-icm-evidence-management__ul_s2v_yzk_c3c} Investigators can access Evidence Management directly from the Investigative Case Management workspace through the dedicated Evidence tab. The Evidence table in Investigative Case Management is a structured data model for managing all physical and digital evidence, so data can be consistently classified, accessed, and associated with relevant investigative records. Within the Evidence tab, you can create an evidence record for a piece of evidence, create a chain of custody log to track its movement, and link evidence records to existing entities within the case. Evidence can be linked to the following entities: * Persons (subjects, victims, witnesses) * Locations (scene of crime, office, storage) * Events (arrest, tip-off, scene visit) * Vehicles (suspect or involved vehicles) * Property (items discovered or stolen) * Organizations (gangs, schools, employers) {#psds-explore-icm-evidence-management__ul_lb2_pzk_c3c} For information on how to link evidence to entities, see [Associate and link evidence to entities](https://www.servicenow.com/docs/L4F6K7Ul6pwbW3oD6zBryA "Link associated evidence records to other entities within a case created in the Investigative Case Management application workspace. All evidence records available in the master index can be linked to an entity."). ## Evidence Tabs {#psds-explore-icm-evidence-management__section_fnw_sxw_m3c} In Evidence Management, an investigator can view details about the evidence through the evidence record page. The evidence record page has the following tabs: Details : View high-level details about the evidence record, such as evidence notes, and how the evidence is related to the case. Cases : View the cases that are linked to the evidence record. An investigator can link multiple cases to one evidence record. Chain of Custody : Track the movement, transfer, and status changes of evidence records with timestamps and responsible personnel for each action with the digital chain of custody feature. Persons : The Persons tab allows investigators to link one or more person entity records to the record of a specific evidence item. Here, investigators can associate a single evidence item with a person, such as a Subject, Witness, Victim, or Other. If a piece of evidence is collected in relation to a specific person, add this person under the Persons tab in the Evidence Record. A single evidence item may be associated with one or multiple entities, and can also be associated with one or multiple cases. Locations : The Locations tab allows investigators to add or link locations to a specific piece of evidence. Events : The Events tab allows investigators to link either incident or investigation event records to an evidence record. If a piece of evidence is collected in relation to a specific event, that event can be added under the Events tab in the Evidence Record. Properties : The Property tab allows users to add or link property items to a specific piece of evidence. Users are able to add new properties, view existing ones linked with the case in a related tab or list, and edit them. If a piece of evidence is collected in relation to a specific property, that property can be added under the Properties tab in the Evidence Record. The vehicle index and firearm index tables are an extension of the property index table. Vehicles : The Vehicles tab allows an investigator to link one or more vehicle entity records to an evidence record. Each vehicle record profile stores critical identifiable information about a vehicle, and allows it to be associated with a specific piece of evidence. For example, if a piece of evidence was recovered from, or collected in relation to a specific vehicle, an entity record may be created for this vehicle, and it can then be linked to the Evidence record. The vehicle index and firearm index tables are an extension of the property index table. Firearms : The Firearms tab allows users to link one or more firearm entity records to an evidence record. Each firearm profile stores critical identifiers, traits, and historical data. The vehicle index and firearm index tables are an extension of the property index table. Organizations : The Organization tab allows users to create and manage records of organizations that are related to the case. Users are able to add new organizations, view existing ones in a related tab or list, and edit details as they become available. If a piece of evidence is collected in relation to a specific organization, that organization should be added under the Organizations tab in the Evidence Record. ## Chain of Custody Log {#psds-explore-icm-evidence-management__section_d51_rwy_m3c} Track the movement, transfer, and status changes of evidence records with a dedicated digital Chain of Custody (CoC) log tab, featuring audit logging, timestamps, and information about responsible personnel for each action. Investigators can create entries of custody events, and include information such as the sender, receiver, timestamp, and purpose, which can be especially useful for internal investigations (e.g., OIGs, compliance offices, HR) and offices with multiple investigative departments working with a single set of evidence. A document upload or signature capture within the custody record can also be configured by an admin. In the Investigative Case Management application, a Chain of Custody record answers: * The action(s) taken on the evidence * When this action took place, and by whom * Where the evidence had been collected from, and from whom * The method of transfer from one location and person to another * Where it physically and/or digitally resides {#psds-explore-icm-evidence-management__ul_w5v_glx_n3c} The following example shows the view for an investigator who wants to view the log for a piece of evidence. For information on how to create a chain of custody log in Evidence Management, see [Create a chain of custody log for an evidence record in an investigative case](https://www.servicenow.com/docs/g_ts4faYRrj5J1KwivESTw "As an investigator or supervisory agent, you can create a Chain of Custody (CoC) log within the workspace to keep track of evidence if or when it is transferred or moved.").