What is eDiscovery?
The process of finding, preserving, and producing electronic evidence in litigation — and the IT discipline that determines whether your firm (or your client) gets sanctioned.
The Short Version
eDiscovery (electronic discovery) is how litigation handles electronically stored information (ESI) — emails, documents, text messages, Slack threads, cloud storage, and mobile data. Federal Rules of Civil Procedure 26, 34, and 37 govern what must be preserved and produced when litigation is reasonably anticipated.
Rule 37(e) is where firms get hurt. If ESI that should have been preserved is lost through failure to take reasonable steps, courts can impose sanctions ranging from adverse jury instructions to default judgment. "We didn't know the IT system auto-deleted that after 30 days" is not a defense.
Who This Applies To
- Law firms handling any civil litigation, regardless of size
- Corporations facing lawsuits, investigations, or regulatory inquiries
- Any business subject to government subpoena
- Healthcare, financial, and regulated industries with retention obligations
- HR and employment-sensitive organizations — wrongful termination suits often turn on preserved email and Slack
The duty to preserve attaches when litigation is reasonably anticipated — not when the complaint is filed. That's earlier than most clients expect.
What Defensible eDiscovery Requires From Your IT
A defensible process has to address every phase of the Electronic Discovery Reference Model (EDRM):
- Information governance: Retention schedules that define what's kept and for how long
- Identification: Data map showing where relevant ESI lives — email, file servers, cloud, backups, mobile, chat
- Preservation / litigation hold: Ability to freeze data for specific custodians across every system — no more auto-deletion for those accounts
- Collection: Forensically sound collection that preserves metadata and chain of custody
- Processing: De-duplication, format conversion, and early case assessment
- Review: Attorney review with privilege logging
- Production: Delivered in the agreed format (typically TIFF with load file, or native)
- Presentation: Trial exhibits and demonstratives
For most small firms and their clients, the pressure points are preservation and collection — where IT either helps or causes problems.
Where Firms and Clients Get Sanctioned
- Auto-delete policies that kept running after a hold notice was issued
- Failure to preserve mobile data — text messages, ephemeral apps
- Cloud storage that silently purged older files
- Email journaling not configured — relying on mailbox backups that don't capture deleted items
- Key custodians leaving with mailboxes deprovisioned before hold was triggered
- Backup restores that overwrote current evidence
- Chain of custody broken during collection — the "IT guy just copied the files" problem
- Slack, Teams, Zoom recordings treated as ephemeral when they are discoverable
Under Rule 37(e), intentional spoliation can trigger adverse inference instructions, dismissal, or default judgment.
How Digital Armor Helps
We focus on the IT side of eDiscovery — the part that happens before the lawyers and discovery vendors get involved:
- Data inventory and ESI source mapping
- Email journaling and immutable archive configuration
- Litigation hold mechanics — suspending auto-delete, freezing mailboxes
- Defensible collection procedures and documentation
- Retention policy design aligned with legal and regulatory requirements
- Coordination with eDiscovery platforms (Relativity, Logikcull, Everlaw, etc.)
- Custodian offboarding procedures that preserve data when required
- Audit logs sufficient to demonstrate chain of custody
Could Your Firm Issue a Litigation Hold Today?
Not in theory — in practice. Freeze the right mailboxes, stop auto-delete across cloud services, preserve backups, and document every step. If the answer is "we'd figure it out when it happened," the answer is no.
Book Your Assessment →