Data stored in remote services such as email, social platforms, file storage, backups, and SaaS systems. Cloud evidence often requires legal process and careful scope definition, and investigators must preserve provider return packages and verify integrity upon receipt.