When the Evidence Sits Abroad: Proving WhatsApp, Email and Cloud Records Stored on Foreign Servers in Indian Courts
Summary: The article examines electronic evidence where WhatsApp, email or other platform data is stored on servers outside India. It distinguishes a party’s own retained copy, which may be certified under Section 63 of the Bharatiya Sakshya Adhiniyam, 2023, from platform-side records that only a foreign service provider retains. It discusses Section 112 of the Bharatiya Nagarik Suraksha Sanhita, 2023, which permits a Criminal Court, during an investigation into an offence, to issue a letter of request to a court or authority outside India for examination of persons and production of documents or things, with the collected evidence forwarded to the Indian court. It also notes Section 113 BNSS as the corresponding provision for requests received from abroad. The article explains the role of Mutual Legal Assistance Treaties, including the government-to-government nature of the process, and states that the route is principally relevant to criminal investigations rather than a purely private civil dispute. It concludes that businesses will ordinarily benefit from contemporaneously preserving and properly certifying their own electronic records, while foreign-platform requests become relevant where independent platform-side confirmation is genuinely necessary or no local copy survives.
Introduction: A Bengaluru based export company gets into a dispute with an overseas buyer over a shipment. The entire negotiation happened on WhatsApp and over email. The company has screenshots and its own copy of the email thread. The buyer’s lawyer argues that none of this can be trusted because the actual data lives on servers in the United States, outside the reach of an Indian court, and there is no way to independently confirm it has not been altered.
This is not a hypothetical. It follows directly from questions this column has examined before, such as whether a WhatsApp message is admissible in court, whether an email can bind parties to a contract, and how a certificate under Section 63 of the Bharatiya Sakshya Adhiniyam, 2023 works. Those earlier pieces assumed the record could be pulled from a device or account and certified in the ordinary course. This article deals with the harder, more common situation: the underlying data is stored on a server outside India, and the platform is under no obligation to hand it over to an Indian litigant on request.
Why This Is a Different Problem
Most electronic evidence disputes in Indian litigation are not actually about the foreign server. They are about the device or account the party controls. When a company produces its own WhatsApp chat backup or its own Gmail export, it is certifying its own copy of the record, not asking WhatsApp Inc. or Google to hand over anything. The BSA’s admissibility framework under Section 63 is built around exactly this: a person in possession of the electronic record, or in charge of the device that produced it, can certify it.
The genuinely difficult cases are different. They arise when:
- A party disputes the authenticity of the other side’s copy and wants the platform’s own server-side record as independent confirmation.
- Law enforcement needs data a platform holds but the account holder is not cooperating.
- A party wants metadata, delivery logs or account activity that only the platform itself retains, which does not exist on any device in India.
In these situations, an Indian court cannot simply direct a foreign company to produce records the way it can direct an Indian bank or telecom operator. That is where the mutual legal assistance route comes in.
The Statutory Route: Letters of Request
Section 112 of the Bharatiya Nagarik Suraksha Sanhita, 2023 allows an investigating officer, through a criminal court, to issue a letter of request to a court or authority in another country asking it to examine a witness, or to direct production of a document or thing located there. This provision replaced Section 166A of the erstwhile Code of Criminal Procedure, 1973, with largely the same substance. Section 113 BNSS is the mirror provision, governing requests received by India from a foreign court or authority.
Two things are worth noting for practitioners. First, this is a criminal procedure mechanism. It sits within an investigation, not a private civil suit, so a company in a purely commercial dispute cannot invoke it directly unless the matter also involves a criminal complaint, such as cheating or forgery under the Bharatiya Nyaya Sanhita, 2023. Second, the evidence obtained through this route, once forwarded to the Indian court, is treated as evidence collected during investigation, which still has to satisfy the ordinary admissibility requirements under the BSA when it is tendered at trial.
Mutual Legal Assistance Treaties
Alongside the statutory letter of request mechanism, India has bilateral Mutual Legal Assistance Treaties with several countries, including the United States, that set out a formal channel for one government to request evidence held in the other’s territory for use in a criminal proceeding. The Ministry of Home Affairs acts as the central authority on the Indian side for most such requests.
The practical reality practitioners should set expectations around: this is a government to government channel, it moves through diplomatic and law enforcement bureaucracy on both sides, and it is built for investigations, not for a company that simply wants to firm up its evidence file before a civil hearing next month. Businesses budgeting time for a dispute involving foreign platform data should treat this route as measured in months, sometimes longer, not days.
Why Most Businesses Will Not Actually Need This Route
For the majority of disputes, the more useful lesson from this framework is what it makes unnecessary. If a party has preserved its own copy of the WhatsApp chat, the email thread, or the cloud document, on its own device or account, in the ordinary course of business, that copy can usually be certified under Section 63 of the BSA without ever going near a foreign court. The certificate speaks to the device or communication system that produced the record in India, not to the platform’s overseas infrastructure. Courts have consistently treated a party’s own retained copy, properly certified, as sufficient primary material, with the opposing party free to challenge its authenticity through cross-examination and, where warranted, forensic analysis, rather than demanding the platform’s own server logs as a precondition.
The letter of request and MLAT route becomes relevant mainly in three situations: a serious criminal investigation where the platform’s own records are needed to corroborate or contradict what a party has produced, a dispute where a party denies ever sending a message and independent platform-side confirmation is genuinely necessary, or a case involving deleted records where no party retained a local copy at all.
Practical Examples
A logistics company relying on WhatsApp instructions from a client for a change in delivery terms should retain the chat backup at the time of the exchange, not months later when a dispute has already started. That contemporaneous backup, properly certified, is what a court will look at first.
A startup facing a criminal complaint where the complainant alleges a threatening message was deleted from their own device may find that only a letter of request to the platform’s home jurisdiction can recover server-side logs, since neither party has a surviving local copy. This is the scenario the BNSS mechanism is actually designed for.
A company disputing an email that the other side claims was never sent should first check its own mail server or IT department’s logs before assuming a foreign request is needed. Corporate email is frequently routed through, or archived by, an Indian service provider or IT department even when the mailbox itself is hosted abroad, and that local copy is usually enough.
Common Mistakes
Waiting until litigation has already started to think about preservation. By the time a dispute is apparent, chat backups may have expired and mail retention policies may have already deleted the relevant thread.
Assuming a court can simply order a foreign platform to produce data the way it would order an Indian bank. It cannot, without going through the treaty or statutory request mechanism, and even then the process is slow.
Treating platform-side data as inherently more trustworthy than a party’s own certified copy. Courts assess authenticity and reliability on the material actually placed before them, not on where a server happens to sit.
Ignoring the criminal versus civil distinction. A civil litigant cannot invoke Section 112 BNSS on their own; they would need to explore whether the underlying conduct also supports a criminal complaint, or rely on their own retained records and ordinary discovery procedures instead.
Practical Steps
Businesses operating with counterparties abroad, or relying on WhatsApp and email for material communications, should build a simple preservation habit: back up chats and archive email threads for any transaction of significance, at the time the communication happens, not after a dispute arises. Where in-house IT can retain server-side logs for company email accounts, that retention should be set up before it is needed, not requested reactively.
Where a dispute does reach the point of needing platform-side or foreign-held records, counsel should assess early whether the matter can proceed on the party’s own certified copy, since that is faster, cheaper and usually sufficient, and reserve the letter of request or MLAT route for cases where independent platform confirmation is genuinely indispensable.
Conclusion
The location of a server rarely changes the outcome of an Indian evidentiary dispute in practice, because most litigants succeed or fail on the strength of their own retained copy of the record, not on data recovered from a platform’s infrastructure abroad. The statutory and treaty mechanisms exist for the harder cases, mainly criminal investigations where independent confirmation is essential, and they are worth understanding precisely because they are slow and procedurally heavy. The real practical lesson for businesses is upstream of all of this: preserve communications properly at the time they happen, and the question of where the server sits becomes far less important.
******
Disclaimer: This article is intended for general informational and educational purposes only and does not constitute legal advice. The legal position discussed is based on the Bharatiya Nagarik Suraksha Sanhita, 2023, the Bharatiya Sakshya Adhiniyam, 2023, and related provisions as understood at the time of writing, and readers should verify the current statutory text and seek independent legal counsel before relying on this analysis for any specific matter, particularly given the relatively limited body of reported case law applying these provisions to platform held electronic evidence.
