Category Archives: Enterprise eDiscovery

January 24, 2024 · 11:21 AM

Massive Data Centralization for MS 365 Does Not Work for Enterprise eDiscovery and Information Governance Workflows

By John Patzakis and Charles Meier

CIOs and legal and compliance executives often aspire to implement information governance programs like defensible deletion, data migration, and data audits to detect risks and remediate non-compliance. However, without an actual and scalable technology platform to effectuate these goals, those aspirations remain just that. Many CIOs attempt to address this daunting challenge by migrating disparate data from around the global enterprise into a central location. However, they quickly find that such attempts to “boil the ocean” are extremely expensive, highly disruptive, and unworkable due to massive scalability issues. The HP Autonomy vision was an example of this approach that seemed like a good idea, but never scaled and required significant manual effort and expensive outsourced services to execute.

And history is repeating itself with Microsoft’s Purview eDiscovery platform. MS Purview Premium is a very expensive add-on designed to mine data in Microsoft’s 365 platform for eDiscovery collection and export. However, MS 365 is a massive data ocean that was not purpose built for compliance and eDiscovery. Furthermore, a new “compliance index” must be created with data carved out of the MS 365 ocean to initiate an eDiscovery or compliance case in Purview eDiscovery to ensure proper and complete content indexing.

As a result of this disjointed two-step process, users are encountering significant problems with low throughput and defensibility. Many customers report to us that Microsoft Purview Premium’s documented inability to handle anything other than small matters due to their 2GB per hour throughput limit. A matter involving 100 custodians at 10GB of MS 365 data would take several weeks to complete with Microsoft Purview Premium.

X1 Enterprise Collect is not subject to these limitations due to our MS 365 data connector approach supported by the X1 proprietary search technology. X1 Enterprise Collect can complete the same sized matter within 24 hours (search, collection and export) better meeting the needs of eDiscovery and investigation matters and requiring only an E3 level M365 license.

Purview Premium faces other key limitations such as not searching files and attachments over 150 MB, not addressing hidden mail folders, and not accessing files and emails without “compliance copies” and overall challenges with search syntax and search reliability and accuracy. In response to these challenges, Microsoft Purview customers are being forced to spend significant sums on outsourced service providers who, just like in the Autonomy days, are engaging in substantial efforts to make the process work. We have spoken to several eDiscovery service providers who are giddy over all the work they are getting to compensate for Purview’s limitations with outsourced services. However, in-house legal teams are not happy with the situation.

In response to these challenges, X1 launched MS 365 data connectors to our X1 Enterprise Collect platform to provide a previously unmet critical need for enterprises to conduct cost-efficient yet highly scalable eDiscovery search and collections of MS 365 data. The response has been tremendous, with X1 seeing record demand.

X1 Enterprise Collect provides users the unique ability to search and collect MS 365 data in-place, in a targeted and iterative manner, at speeds and throughput far exceeding other tools, including Microsoft Purview Premium. X1 achieves such scalability through a targeted, custodian-based approach that minimizes 365 API calls, and does not rely on the MS Search Index, which has been demonstrated to be untrustworthy and with limited throughput. X1’s approach enables a very scalable, defensible, and robust data collection now at speeds 10x that of other approaches.

The X1 Enterprise Collect Platform is available now from X1 and its global channel network in the cloud, on-premise, and with our services available on-demand. For a demonstration of the X1 Enterprise Collect Platform, contact us at sales@x1.com. For more details on this innovative solution, please visit www.x1.com/x1-enterprise-collect-platform.

Leave a comment

Filed under Corporations, ECA, eDiscovery, eDiscovery & Compliance, Enterprise eDiscovery, Information Governance

Tagged as ,

December 13, 2023 · 12:02 PM

X1 Expands Cutting Edge MS 365 Support With Very High and Unmatched Throughput Capabilities

By John Patzakis

Earlier this year, X1 launched MS 365 data connectors to our X1 Enterprise Collect platform to provide a previously unmet critical need for enterprises to conduct cost-efficient yet highly scalable eDiscovery search and collections of MS 365 data. The response has been tremendous, with X1 seeing record demand. This is because X1 Enterprise Collect provides users the unique ability to search and collect MS 365 data in-place, in a targeted and iterative manner, at speeds and throughput far exceeding other tools, including Microsoft Purview Premium.

And now, X1 has released X1 Enterprise Collect 5.1, which features two major advancements:

  1. Full support for modern attachments in MS Mail to go along with our support for modern attachments in Teams. X1 is the only solution we and our partners are aware of that supports the search and collection of modern attachments in MS 365 without the need for a Premium (E5) license.
  2. Even greater speed and scalability. X1 Enterprise Collect does not operate by simply making bulk calls to the MS Graph API, like most eDiscovery tools, which also require a premium license to collect the key data such as modern attachments. X1 employs a targeted, custodian-based approach that minimizes 365 API calls, and does not rely on the MS Search Index, which has been demonstrated to be untrustworthy and with limited throughput. X1’s approach enables a very scalable, defensible, and robust data collection now at speeds 10x that of other approaches.

Many customers report to us that Microsoft Purview Premium’s documented inability to timely handle anything other than small matters due to their 2GB per hour throughput limit (which X1 is not subject to due to our direct connection approach) is disqualifying for them. eDiscovery and investigation matters need to be addressed expediently. X1 can address a matter involving 100 custodians at 10GB of MS 365 data each within 24 hours (search, collection and export), while Microsoft Purview Premium, per Microsoft’s own documentation, would take up to several weeks.

In addition to the aforementioned enhancements with version 5.1, X1 Enterprise Collect offers the following additional unique benefits unmatched by other independent software providers:
• The ability to target individual custodians and specific messaging threads, displacing any need to mass download channels in Teams or Mail
• Unified search and collection of on-premise and cloud data sources, including Teams, OneDrive, SharePoint, Mail, laptops and file-shares for an optimized approach
• X1’s patented technology enables the indexing, searching and processing of the targeted data in-place, removing any reliance on premium processing or supplemental services
• One-click upload into Relativity for review, for a streamlined end-to-end process
• A truly automated product solution, as opposed to a service-based offering

Winston & Strawn eDiscovery partner Bobby Malhotra notes: “With the vast number of users and unyielding amount of data in collaboration applications such as Teams, having the ability to target and triage data by specific custodians and threads allows organizations to handle discovery in an efficient and pragmatic manner. X1 provides the unique ability to seamlessly collect and search across numerous data sources.”

X1 Enterprise Collect version 5.1 is now available for deployment in the cloud, on-premise, or on-demand. For a demonstration of the X1 Enterprise Collect Platform, contact us at sales@x1.com. For more details on this innovative solution, please visit www.x1.com/x1-enterprise-collect-platform.

Leave a comment

Filed under Authentication, Best Practices, Cloud Data, collection, Corporations, Data Audit, eDiscovery, eDiscovery & Compliance, Enterprise eDiscovery, ESI, Information Access, Information Management, MS Teams, OneDrive, Preservation & Collection, proportionality, Relativity, SharePoint, SharePoint content

July 25, 2023 · 11:21 AM

Court Decision in Lubrizol vs. IBM Provides Important Guidance on MS Teams Discovery

By John Patzakis

Recently, a federal district court in Ohio issued a ruling concerning an eDiscovery dispute involving both Teams and Slack, Lubrizol Corp. v. IBM Corp., No. 1:21-CV-00870-DAR (N.D. Ohio May 15, 2023). This decision is important as it provides and serves as a template and guidepost on how to collect and produce messages from MS Teams, a challenge which many litigants are struggling with today.

This case involves a breach of contract claim where plaintiff Lubrizol corporation, a major chemical manufacturer, purchased an SAP ERP system, and then hired IBM to implement the enterprise software. The project eventually went off the rails and now the parties are in litigation fighting over eDiscovery.

As you might imagine on an IT project like this, there’s a lot of evidence in Teams and also in Slack. Plaintiff Lubrizol wanted IBM to produce the entire channel of their messages if there was even a single relevant message within the channel. However, in its written opinion, the court determined that the production of an entire Slack or Teams channel, with only a few relevant messages within, would be overbroad per the rules of proportionality. IBM conversely took a counter position that was equally extreme, claiming that they only needed to produce the actual message that the keyword hit on without any context of the broader conversation around it. The court rejected this approach.

Eventually the plaintiff came back to the court with a proposed compromise, which the court agreed with and adopted as its final order as follows:

“IBM to produce: (1) the entirety of any Slack conversation containing 20 or fewer total messages that has at least one responsive message; and (2) the 10 messages preceding or following any responsive Slack message in a Slack channel containing more than 20 total messages. Within 28 days, Lubrizol shall do the same with respect to its Microsoft Teams messages.”

While this ruling is very instructive, many parties struggle with executing such a targeted collection and production effort. The problem with Teams discovery, as outlined in a previous post, is that most eDiscovery tools require parties to collect and export entire Teams channels, with the production format being very problematic due to no efficient ability to provide automated and targeted productions as the court outlines above.

The exception is X1. X1 Enterprise Collect provides, in our opinion, the industry’s best eDiscovery support for MS 365. And many independent eDiscovery, experts, agree. X1’s support for MS Teams is one example. Among the reasons why our MS Teams support stands out, is the ability to produce a specific number of preceding and subsequent messages for automated input into a review platform, all in context. See the screenshot below.

Winston & Strawn eDiscovery partner Bobby Malhotra notes the importance of this capability: “With the vast number of users and unyielding amount of data in collaboration applications such as Teams, having the ability to target and triage data by specific custodians and threads allows organizations to handle discovery in an efficient and pragmatic manner. X1 provides the unique ability to seamlessly collect and search across numerous web, collaboration, and social, data sources.”

X1 recently hosted a webinar demonstrating how to collect from MS Teams in an effective, defensible and proportional manner. You can watch it here on demand.

The X1 Enterprise Collect Platform is available now from X1 and its global channel network in the cloud, on-premise, and with our services available on-demand. For a demonstration of the X1 Enterprise Collect Platform, contact us at sales@x1.com. For more details on this innovative solution, please visit www.x1.com/x1-enterprise-collect-platform.

1 Comment

Filed under Best Practices, Case Law, Cloud Data, ECA, eDiscovery, eDiscovery & Compliance, Enterprise eDiscovery, law firm, MS Teams, Preservation & Collection

Tagged as , ,

July 12, 2023 · 11:47 AM

eDiscovery Journal Highlights X1’s Game Changing Support of MS 365

By John Patzakis

Greg Buckles of the eDJ, arguably the top independent eDiscovery industry analyst, penned an important article outlining X1’s support for MS 365 data sources within the X1 Enterprise Collect platform and how it even surpasses in many respects Microsoft’s own Premium Purview services. In his post, Buckles first listed X1’s “top level take-aways” as follows:

• X1’s Teams support targets individual custodians and specific messaging threads, displacing any need to mass download Teams chats and channels.
o X1 collects and searches Teams content directly without relying on the Microsoft Graph content search API, which has known gaps.
• X1 indexes, searches and processes Teams data in-place, removing any reliance on premium processing or supplemental services.
o Modern attachments are collected and searched in place and automated data formatting enables one-click upload into Relativity for review.
• Unified search and collection of on-premise and cloud data sources, including Teams, OneDrive, SharePoint, Mail, laptops and file-shares for an optimized workflow
o Provides True ECA and processing capabilities at the point of collection. Assess, process, and collect only what is needed, narrowing funnel at point of collection.

Buckles then notes that “archiving and enterprise search products like Autonomy IDOL struggled to deliver a ‘universal index’ for decades.” Similarly, Microsoft 365 “can struggle to meet the stringent eDiscovery/compliance requirements.” Specifically, Buckles noted that Microsoft Purview faces significant throughput limitations as documented by his own performance testing: “Past Purview advanced indexing performance testing for eDJ corporate clients resulted in limiting SLA’s to 1-3 full custodians per day.” Conversely, Buckles writes that “X1’s distributed index approach allows them to expand a user’s M365 sources to include desktops, file shares and 3rd party content such as Dropbox. It offloads much of the processing overhead to endpoint devices and avoids some of Purview Premium’s throughput limits for larger custodial matters.” As noted in the article, X1’s benchmark testing of 25 mailboxes in 4-8 hours and we have seen that scale in parallel.

Many customers report to us that Microsoft Purview Premium’s documented inability to timely handle anything other than small matters due to their 2GB per hour throughput limit (which X1 is not subject to due to our direct connection approach) is disqualifying for them. eDiscovery and investigation matters need to be addressed expediently. X1 can address a matter involving 100 custodians at 10GB of MS 365 data each within 24 hours (search, collection and export), while Microsoft Purview Premium, per Buckles’ performance testing and Microsoft’s own documentation, would take up to several weeks.

Additionally, Buckles’ generally referenced, including linking to Microsofts’ documentation, identifying other Purview Premium limitations such as not searching files and attachments over 150 MB, not addressing hidden mail folders, and not accessing files and emails without “compliance copies.” X1 is not subject to these limitations.

The X1 Enterprise Collect Platform is available now from X1 and its global channel network in the cloud, on-premise, and with our services available on-demand. For a demonstration of the X1 Enterprise Collect Platform, contact us at sales@x1.com. For more details on this innovative solution, please visit www.x1.com/x1-enterprise-collect-platform.

Leave a comment

Filed under Best Practices, Cloud Data, Corporations, ECA, eDiscovery, eDiscovery & Compliance, Enterprise eDiscovery, ESI, MS Teams, OneDrive, Preservation & Collection, SharePoint

Tagged as , ,

May 16, 2023 · 10:54 AM

X1 Delivers Cutting-Edge MS Teams Support

By John Patzakis

The prominence of Microsoft 365 data sources continue to grow in eDiscovery matters exponentially. However, most non-MS eDiscovery tools collect from MS 365 by simply making bulk copies of data associated with individual accounts, and then attempt to transfer that data en masse to their own proprietary processing and/or review platform. Such an effort is very costly, time-consuming, and inefficient for many reasons. For one, this bulk transfer triggers data transfer throttling by Microsoft, causing significant time delays. But the main problem is that clients who are investing in MS 365 do not want to see all their data routinely exported out of its native environment every time there is an eDiscovery or compliance investigation.

So, enterprises with relevant data stored in MS 365 need to have a good process to perform unified and efficient search and collection of MS 365 and non-MS 365 sources. To achieve requisite efficiency and the minimization of data transfer, this process should be based upon a targeted search and collection in-place capability, and not simply involve mass export of data out of MS 365 for downstream processing and searching.

To answer this unmet critical need, X1 launched MS 365 data connectors to our X1 Enterprise Collect platform. X1 Enterprise Collect provides users the unique ability to search and collect MS 365 data in-place. X1’s optimized approach of iterative search and targeted collection enables organizations to apply proportionality principles across both cloud and on-premise data sources with clear and consistent results for effective eDiscovery.

And now, X1 has added cutting-edge Teams support to complete our existing support of OneDrive, MS Mail and SharePoint. The X1 Enterprise Collect Teams collection capabilities include the following unique benefits unmatched by other independent software providers:
• The ability to target individual custodians and specific messaging threads, displacing any need to mass download channels
• Unified search and collection of on-premise and cloud data sources, including Teams, OneDrive, SharePoint, Mail, laptops and file-shares for an optimized approach
• Patented index, search and process the data in-place, removes any reliance on premium processing or supplemental services
• One-click upload into Relativity for review, for a streamlined end-to-end process
• A truly automated product solution, as opposed to a service-based offering

Winston & Strawn eDiscovery partner Bobby Malhotra notes: “With the vast number of users and unyielding amount of data in collaboration applications such as Teams, having the ability to target and triage data by specific custodians and threads allows organizations to handle discovery in an efficient and pragmatic manner. X1 provides the unique ability to seamlessly collect and search across numerous web, collaboration, and social, data sources.”

Watch the X1 hosted webinar on-demand featuring the hot topic of Best Practices to Collect from MS Teams in an Effective, Defensible and Proportional Manner.

The X1 Enterprise Collect Platform is available now from X1 and its global channel network in the cloud, on-premise, and with our services available on-demand. For a demonstration of the X1 Enterprise Collect Platform, contact us at sales@x1.com. For more details on this innovative solution, please visit www.x1.com/x1-enterprise-collect-platform.

Leave a comment

Filed under Authentication, Best Practices, Cloud Data, collection, compliance, Corporations, Data Audit, ECA, eDiscovery, eDiscovery & Compliance, Enterprise eDiscovery, ESI, law firm, MS Teams, OneDrive, proportionality, SharePoint

Tagged as , , ,