What the certificate asks for
Part A
The person in charge of the device or account: what it is, that it worked, how the record was produced.
Part B
The expert who handled the extraction: the tool, the method, the hash of the output.
The hash
A SHA-256 of the record, so the exhibit in court is provably the file that was collected.
What Kendraa records for it
Source and custodian
Which device, account or mailbox each item came from, and whose.
Hash at ingestion
Every item hashed on the way in and carried through review and export.
Extraction tool
Cellebrite UFDR, iPhone extraction, PST or mailbox — recorded per item, never flattened.
Chain of handling
A per-matter audit trail of who touched what, when.
A certificate-ready pack
Export a certificate-ready pack from any matter — sources, hashes and handling, in the order the schedule wants them — so counsel drafts the certificate in minutes, not days.
Chat evidence specifically? See WhatsApp investigations.