MicrosoftMicrosoft Purview

    eDiscovery

    Identify, hold, collect, and review electronic data for legal and investigation cases.

    Microsoft Purview eDiscovery identifies, preserves, collects, reviews, and exports electronic content across Microsoft 365 for legal cases, investigations, and regulatory requests — with legal holds, advanced search, and review sets. It streamlines the discovery process end to end. Faltrox operates it as managed eDiscovery.

    Overview

    What eDiscovery is

    Legal cases, investigations, and regulatory requests require finding and preserving the relevant electronic content across an organisation — email, Teams, SharePoint, OneDrive — without altering it, and reviewing it defensibly. Microsoft Purview eDiscovery provides that end-to-end workflow within Microsoft 365.

    It lets you place legal holds to preserve content in place, search across Microsoft 365 with advanced query, collect content into review sets, review and cull it (with analytics like near-duplicate and email-threading), and export defensibly. It supports the Electronic Discovery Reference Model (EDRM) from identification to production. Faltrox operates it as managed eDiscovery, running holds, searches, and reviews for legal and compliance teams.

    Coverage

    What it protects

    The platforms, threats, and surfaces this product is built to defend.

    01

    Microsoft 365 Content

    Discovers content across email, Teams, SharePoint, and OneDrive.

    02

    Legal Holds

    Preserves content in place with legal holds so it cannot be altered.

    03

    Advanced Search

    Searches across Microsoft 365 with advanced query and conditions.

    04

    Review Sets

    Collects, reviews, and culls content in review sets with analytics.

    05

    Defensible Export

    Exports content defensibly for production and review.

    06

    EDRM Workflow

    Supports the full Electronic Discovery Reference Model.

    How it works

    The mechanism

    How the product moves from signal to protected state, step by step.

    1. 01

      Identify

      Custodians and content relevant to a case are identified across Microsoft 365.

    2. 02

      Hold

      Legal holds preserve the relevant content in place so it cannot be altered or deleted.

    3. 03

      Collect

      Content is searched and collected into review sets for the case.

    4. 04

      Review & Export

      Content is reviewed, culled with analytics, and exported defensibly for production.

    5. 05

      Operate

      Faltrox runs holds, searches, and reviews as managed eDiscovery for legal teams.

    Capabilities

    Key capabilities

    Legal Holds

    Preserves content in place across Microsoft 365 so it cannot be altered.

    Advanced Search

    Searches across email, Teams, SharePoint, and OneDrive with advanced query.

    Review Sets

    Collects content into review sets for review, culling, and analysis.

    Review Analytics

    Near-duplicate detection, email threading, and themes speed review.

    Defensible Export

    Exports content defensibly for production and external review.

    Custodian Management

    Manages custodians and their data across the case.

    EDRM Workflow

    Supports the full Electronic Discovery Reference Model end to end.

    Purview Integration

    Part of the unified Microsoft Purview compliance platform.

    Works with

    Part of the platform

    Microsoft products this pairs with, and the Faltrox services that operate it.

    Delivery

    You buy the outcome, not the console

    Managed by Faltrox

    Faltrox licenses, deploys, and tunes Microsoft eDiscovery for your environment, then runs it as part of a managed service, so you get the protection without staffing another security console.

    See the service

    FAQ

    Common questions

    01What does eDiscovery do?

    It provides the end-to-end workflow for legal and regulatory discovery within Microsoft 365 — identifying relevant content, placing legal holds to preserve it, collecting it into review sets, reviewing and culling it, and exporting it defensibly. It supports the full Electronic Discovery Reference Model (EDRM).

    02What is a legal hold?

    A legal hold preserves content in place so it cannot be altered or deleted while a case is active — essential for defensibility. Purview eDiscovery lets you place holds across Microsoft 365 content (email, Teams, SharePoint, OneDrive) for the relevant custodians.

    03How does it speed up review?

    Review analytics — near-duplicate detection, email threading, and theme analysis — cull and organise the collected content so reviewers focus on unique, relevant material rather than reviewing everything, which dramatically reduces review time and cost.

    04Is the export defensible?

    Yes — it exports content defensibly for production and external review, maintaining the integrity and chain of custody needed for legal and regulatory proceedings.

    05How does Faltrox operate it?

    We run holds, searches, collection, and review on behalf of your legal and compliance teams — delivering managed eDiscovery so discovery for cases, investigations, and regulatory requests is handled defensibly and efficiently.

    Start an engagement

    Secure what’s next.

    Speak with the engineering team to define scope, walk through the methodology, and decide whether Faltrox is the right team to test and run your environment.

    Contact us