Standard matter: $400
One account you name (usually the person your client is suing or complaining about), over a date range you choose, up to about 500 posts in all. It covers:
- Everything that account posted in the range: its posts, its replies, its reposts and its quotes.
- The conversations those posts are part of: your client's replies and other people's replies in them, so the court sees the whole exchange. People who appear there are not charged as extra accounts.
- Any post the account quoted or reposted that you point out, captured as the original.
Standard delivery is within 2 business days of your go-ahead. Capture itself starts the same day, so the posts are preserved even if they are deleted while the packet is being prepared.
Extras
| Item | Fee |
|---|---|
| Each additional account you name in the same matter, on the same terms | $200 |
| X Spaces room: room details, who hosted and spoke, the chat, X's live captions and, where X kept one, the recording | $150 per room |
| Same-day delivery (rush) | +50% (minimum $150) |
Typical matters
| The situation | What is captured | Fee |
|---|---|---|
| One person harassing or defaming your client | Their account over two months, with the back-and-forth in those conversations | $400 |
| The same, with two friends joining in | Three named accounts | $800 |
| A former employee posting about the company, plus one X Spaces talk | One account and one room | $550 |
Quoted per case
Most matters fit the standard one. These are priced in the written quote before any work starts:
- More than about 500 posts, for example a long date range or a very active account.
- A pile-on by many accounts, or everything posted about your client by anyone.
- An account's full history, going back years.
What is not included
- Finding other accounts, or deciding which posts matter to the case. You name the accounts, posts, date range or key words; we capture exactly those.
- Anything added after the quote. If the scope grows, the addition is quoted in writing before it is captured.
Included in every matter
- The exhibit packet (PDF), Bates-numbered for production, and the post list as a Word file.
- A picture of each post as X displayed it.
- The spreadsheet (CSV) with every record, account details and reach.
- For each post: the date decoded from its post ID, a SHA-256 fingerprint, a Bitcoin timestamp with its .ots proof file, and the X embed cross-check.
- The chain of custody for every record.
- The signed declaration (28 U.S.C. § 1746) or New Jersey certification (Rule 1:4-4(b)) describing the capture. No extra fee.
- Private, confidential storage: never posted publicly and never sent to web-archive services. How long material is kept follows your engagement terms.
If the capture is challenged
| Item | Fee |
|---|---|
| Deposition or trial testimony about how the capture was made | $300 per hour, 2-hour minimum, plus travel |
How it works
- Send us the accounts, the date range or key words, and any X Spaces rooms.
- You receive a written flat-fee quote, usually the same day.
- Capture starts the same day as your go-ahead.
- You receive the packet, the spreadsheet and the signed declaration. Payment terms are set out in the engagement terms.
A Bitcoin timestamp is usually confirmed within hours of capture. On a same-day delivery a timestamp may still be pending; it is marked as pending in the packet and completed afterwards.
Prices in US dollars, as of October 2026. The written quote for your matter is the price that applies.
Have a matter in mind?
Send the accounts, date range or key words. We reply with a written flat-fee quote, usually the same day.
Email ozdemir@salesforcehub.usCaptures are made of content visible to a standard signed-in X account, through the ordinary X website. Not a law firm; no legal advice is given, and admissibility is always for the court to decide. Not affiliated with or endorsed by X Corp. "X" is a trademark of X Corp.
Terms used on this page
X and its accounts
- Post ID
- The long number at the end of a post's web address. X builds the exact moment the post was created into this number (X calls it a "Snowflake" ID), so anyone can decode the posting date with a public formula.
- X Spaces
- Live audio rooms on X. A host runs the room, co-hosts and speakers talk "on stage", and everyone else listens in the audience. X sometimes keeps a replay afterwards.
- Live captions
- The automatic text X shows on screen while people speak in a Space.
- X's public embed service (oEmbed)
- The service X itself provides so websites can display a post. Asking it about a post returns X's own copy of the text and author, which is compared with the capture.
Proof and integrity
- SHA-256 fingerprint (hash)
- A 64-character code calculated from a record's content. The same content always gives the same code; changing even one character gives a completely different one. So if the code still matches later, the record has not been changed. The code cannot be turned back into the content.
- Chain of custody
- A record of every step taken with a piece of evidence: who handled it, when, and what was done, to show it was not altered along the way. Here each entry is linked to the one before it, so a deleted or edited entry is detected.
- Bitcoin timestamp (OpenTimestamps)
- OpenTimestamps is a free, open service that writes a record's fingerprint into the Bitcoin blockchain. That proves the record existed no later than that date. Only the fingerprint is sent, never the post itself.
Legal terms
- Declaration (28 U.S.C. § 1746)
- A written statement signed under penalty of perjury, which federal law accepts in place of a notarized affidavit. New Jersey state courts accept a similar "certification in lieu of oath" (Rule 1:4-4(b)).
- Production
- Handing documents over to the other side during discovery. "Numbered for production" means ready to hand over.
- Bates numbering
- A unique, sequential number given to every page or item produced in a lawsuit (for example EX-0001), so each one can be cited and tracked without confusion.
- Engagement terms
- The written agreement between the firm and us for a matter: what is captured, the fee, confidentiality, and how long material is kept.
What you receive
- Exhibit packet
- The set of documents delivered for a matter: the captured posts laid out and numbered, ready to attach to a filing as exhibits.
- .ots proof file
- A small file, one per post, that lets anyone check the Bitcoin timestamp with the free OpenTimestamps tools, without using this software.
- CSV
- A plain spreadsheet file that opens in Excel, Numbers or Google Sheets.