Page 1
GOOGLEVAULT · A GUIDE FOR UK LAWYERS Google Vault in Litigation Capabilities, Limits and the Boundary with Independent Forensic Collection COMPUTER FORENSICS LAB
§ ABOUT THE AUTHOR PREPARED BY COMPUTER FORENSICS LAB E-DISCOVERY TEAM INDEPENDENT VERIFICATION CPR PART 35 EXPERT REPORT S FULL CHAIN-OF-CUSTODY DOCUMENTATION
§ CONTENTS In this guide 01 Executive summary 02 The problem in plain English: the excellent tool and the quiet narrowing 03 What Vault does well: holds, retention, search, export 04 Where Vault stops: reach, fidelity and the o per at or 05 The three questions: trust, structures, downstream 06 Hybrid patterns: Vault plus independence 07 Vault in correspondence: what to ask and what to offer 08 Source architecture: where else the evidence lives 09 Worked examples 10 Common mistakes and technical limitations 11 Questions to ask · Suggested wording 12 Checklist and red flags · When to involve a digital forensic expert 13 Frequently asked questions 14 Glossary · References · Disclaimer · How a specialist laboratory can assist
§ 01 · ORIENTATION Executive summary THE HEADLINE POINT: VAULTISTHEESTATE ' SPRESERVATIONBACKBONEANDA BOUNDEDCOLLECTOR: KNOWWHICHJOBYOUAREGIVINGIT
§ 02 · FIRST PRINCIPLES The problem in plain English: the excellent tool and the quiet narrowing
§ 03 · THESTRENGTHS What Vault does well: holds, retention, search, export
Page 2
§ 04 · THEBOUNDARIES Where Vault stops: reach, fidelity and the o per at or
§ 05 · THE FRAMEWORK The three questions: trust, structures, downstream
§ 06 · WORKINGTOGETHER Hybrid patterns: Vault plus independence
§ 07 · THE CORRESPONDENCE Vault in correspondence: what to ask and what to offer
§ 08 · THEWIDERMAP Source architecture: where else the evidence lives EVIDENCE (HOLDS + STRUCTURAL MIRRORS / VAULT API / DEVICE EXPORT) ROUTE CACHES ADMIN COUNTERPARTS DELETED / REPORTS + BACKUPS RECOVERABLE
§ 09 · IN THE WILD Worked examples EXAMPLE1 · THESNAPSHOTEXPORTANDTHEVANISHEDAUTHORSHIP EXAMPLE2 · THEFINANCEDIRECTOR ' S OWN EXPORT EXAMPLE3 · THEOPERATIONSLOGTHATDATEDTHESTRATEGY
Page 3
§ 10 · WHEREITGOESWRONG Common mistakes and technical limitations Common mistakes Technical limitations
§ 11 · INTERROGATORIES & DRAFTING AIDS Questions to ask · Suggested wording Ask your client Ask your opponent Ask your e Discovery / forensic provider SUGGESTED WORDING · ROUTE - AND -VERIFIC AT IONCLAUSEFORTHEDISCLOSURE PROTOCOL
§ 12 · QUICK CONTROL Checklist and red flags · When to involve a digital forensic expert The Vault checklist Red flags When to involve a digital forensic expert
§ 13 · COMMON QUESTIONS Frequently asked questions Is a Vault export defensible disclosure on its own? When do we genuinely need collection beyond Vault? Can Vault exports be manipulated by the o per at or? The opponent says the content expired under retention before any hold. What is the sequence? How does Vault compare with Purview for a firm running both ecosystems? What single Vault artefact should we secure first in any new matter?
§ 14 · REFERENCE Glossary Sources and authoritative references DISCLAIMER
§ HOW A SPECIALIST LABORATORY CAN ASSIST Working with Computer Forensics Lab Speak to a forensic examiner, not a salesperson. INSTRUCTTHELAB NEWENQUIRIESEMAILE - DISCOVERY
Cite as: Joseph Naghdi, Google Vault In Litigation, Computer Forensics Lab, https://e-discovery.uk/library/google-vault-in-litigation/pdf.