Exporting content under legal hold for eDiscovery

Box Governance includes the ability to “legally hold” specified content and preserve it until it can be either exported and reviewed or deleted. Box Legal Hold capabilities are crucial to an organization's eDiscovery process.  More about legal holds in Box Governance.


The diagram below shows where Box fits in an organization's eDiscovery process.  Box preserves all content placed on legal hold until an organization decides whether it must review and analyze that content.  At that point, an organization can export the content from Box and use a variety of tools and processes to review, analyze, and present it. 

 

eDiscovery process diagram revised.png 

It’s critical for any content export to be accurate and complete; otherwise an organization might not be fulfilling its legal obligations, potentially exposing itself to serious financial and/or regulatory penalties.

 

There are three different methods by which you can export data under a Box legal hold:

  1. eDiscovery partner
  2. content manager
  3. custom script

Each organization should review and understand its eDiscovery requirements and select the most appropriate option.  Details and limitations of each method is below.

 

Option 1: Using an eDiscovery partner to export content

You can use one of the third-party organizations with whom Box maintains a partnership to analyze exported data. A seamless integration with each partner enables automatic uploading of content, after which you can manage the content through the remainder of your organization's eDiscovery processes, such as relevance modeling and culling.

 

Choose from one of four eDiscovery partners (as of June, 2018):

  1. LogikCull
  2. EnCase
  3. Recommind
  4. Zapproved

Considerations:

  • Be sure to review each integration with your vendor, to ensure you understand how the integration will behave and know that such behavior meets your organization's e-Discovery requirement.
  • Regardless of which partner you choose, we strongly recommend you use the primary Box Administrator account for authentication purposes. This ensures access to all content in the environment.

 

Option 2: Using a content manager to export content
If you are an admin or co-admin of your organization’s Box account, you can use the Content Manager within the Box Admin Console to access any individual’s files and folders. Using the Content Manager enables you to filter on a specific person and view that person’s folder structure from his or her perspective. You can then extract the content you want from that person’s account. Here’s how to do that:

 

To extract content using the Box Content Manager

  1. Click Admin Console
  2. Go to Content > Content Browser
  3. Search for the user under Legal Hold
  4. Click the check mark next to the 'More' label to select all folders you wish to export
  5. Click Download. The files within those folders download as a ZIP file.

Limitations:

  • You can only do this one individual at a time
  • Using the Content Manager exports all content in the selected folder
  • You cannot export any content from the trash (though you can do that via the Box API)
  • You get only the latest version of each file
  • There is a 15 GB limit for downloads

 

Option 3: Using a custom script to export content
Organizations can export content from Box in any way they wish through Box’s APIs. Get more information on API endpoints for Legal Holds, as well as Box's robust set of APIs. 

Version history
Revision #:
9 of 9
Last update:
‎07-19-2018 12:06 PM
Updated by:
 
Contributors