Evidence can be maintained at the integrated case level and shared across products within that integrated case. In this instance, it is important to think about the different products secured within the one integrated case.
Evidence can also be shared across agencies using the Cúram Evidence Broker. Here security issues can involve additional systems and/or organizations adding a much more complex layer to security requirements.
Security related to evidence maintenance is centralized in the Evidence Application Programming Interface (API). If the evidence being maintained is at the product level, the API ensures the evidence type is linked to that product as well as ensuring the user has maintenance rights for that product. If the evidence being maintained is at the Integrated Case level, the API retrieves the list of products to which the evidence applies. If the user has maintenance rights for at least one of these products, they are allowed to proceed. Evidence being shared across cases via the Evidence Broker is subject to the same security checks.