Category Archives: Preservation & Collection

Court Decision in Lubrizol vs. IBM Provides Important Guidance on MS Teams Discovery

By John Patzakis

Recently, a federal district court in Ohio issued a ruling concerning an eDiscovery dispute involving both Teams and Slack, Lubrizol Corp. v. IBM Corp., No. 1:21-CV-00870-DAR (N.D. Ohio May 15, 2023). This decision is important as it provides and serves as a template and guidepost on how to collect and produce messages from MS Teams, a challenge which many litigants are struggling with today.

This case involves a breach of contract claim where plaintiff Lubrizol corporation, a major chemical manufacturer, purchased an SAP ERP system, and then hired IBM to implement the enterprise software. The project eventually went off the rails and now the parties are in litigation fighting over eDiscovery.

As you might imagine on an IT project like this, there’s a lot of evidence in Teams and also in Slack. Plaintiff Lubrizol wanted IBM to produce the entire channel of their messages if there was even a single relevant message within the channel. However, in its written opinion, the court determined that the production of an entire Slack or Teams channel, with only a few relevant messages within, would be overbroad per the rules of proportionality. IBM conversely took a counter position that was equally extreme, claiming that they only needed to produce the actual message that the keyword hit on without any context of the broader conversation around it. The court rejected this approach.

Eventually the plaintiff came back to the court with a proposed compromise, which the court agreed with and adopted as its final order as follows:

“IBM to produce: (1) the entirety of any Slack conversation containing 20 or fewer total messages that has at least one responsive message; and (2) the 10 messages preceding or following any responsive Slack message in a Slack channel containing more than 20 total messages. Within 28 days, Lubrizol shall do the same with respect to its Microsoft Teams messages.”

While this ruling is very instructive, many parties struggle with executing such a targeted collection and production effort. The problem with Teams discovery, as outlined in a previous post, is that most eDiscovery tools require parties to collect and export entire Teams channels, with the production format being very problematic due to no efficient ability to provide automated and targeted productions as the court outlines above.

The exception is X1. X1 Enterprise Collect provides, in our opinion, the industry’s best eDiscovery support for MS 365. And many independent eDiscovery, experts, agree. X1’s support for MS Teams is one example. Among the reasons why our MS Teams support stands out, is the ability to produce a specific number of preceding and subsequent messages for automated input into a review platform, all in context. See the screenshot below.

Winston & Strawn eDiscovery partner Bobby Malhotra notes the importance of this capability: “With the vast number of users and unyielding amount of data in collaboration applications such as Teams, having the ability to target and triage data by specific custodians and threads allows organizations to handle discovery in an efficient and pragmatic manner. X1 provides the unique ability to seamlessly collect and search across numerous web, collaboration, and social, data sources.”

X1 recently hosted a webinar demonstrating how to collect from MS Teams in an effective, defensible and proportional manner. You can watch it here on demand.

The X1 Enterprise Collect Platform is available now from X1 and its global channel network in the cloud, on-premise, and with our services available on-demand. For a demonstration of the X1 Enterprise Collect Platform, contact us at sales@x1.com. For more details on this innovative solution, please visit www.x1.com/x1-enterprise-collect-platform.

1 Comment

Filed under Best Practices, Case Law, Cloud Data, ECA, eDiscovery, eDiscovery & Compliance, Enterprise eDiscovery, law firm, MS Teams, Preservation & Collection

eDiscovery Journal Highlights X1’s Game Changing Support of MS 365

By John Patzakis

Greg Buckles of the eDJ, arguably the top independent eDiscovery industry analyst, penned an important article outlining X1’s support for MS 365 data sources within the X1 Enterprise Collect platform and how it even surpasses in many respects Microsoft’s own Premium Purview services. In his post, Buckles first listed X1’s “top level take-aways” as follows:

• X1’s Teams support targets individual custodians and specific messaging threads, displacing any need to mass download Teams chats and channels.
o X1 collects and searches Teams content directly without relying on the Microsoft Graph content search API, which has known gaps.
• X1 indexes, searches and processes Teams data in-place, removing any reliance on premium processing or supplemental services.
o Modern attachments are collected and searched in place and automated data formatting enables one-click upload into Relativity for review.
• Unified search and collection of on-premise and cloud data sources, including Teams, OneDrive, SharePoint, Mail, laptops and file-shares for an optimized workflow
o Provides True ECA and processing capabilities at the point of collection. Assess, process, and collect only what is needed, narrowing funnel at point of collection.

Buckles then notes that “archiving and enterprise search products like Autonomy IDOL struggled to deliver a ‘universal index’ for decades.” Similarly, Microsoft 365 “can struggle to meet the stringent eDiscovery/compliance requirements.” Specifically, Buckles noted that Microsoft Purview faces significant throughput limitations as documented by his own performance testing: “Past Purview advanced indexing performance testing for eDJ corporate clients resulted in limiting SLA’s to 1-3 full custodians per day.” Conversely, Buckles writes that “X1’s distributed index approach allows them to expand a user’s M365 sources to include desktops, file shares and 3rd party content such as Dropbox. It offloads much of the processing overhead to endpoint devices and avoids some of Purview Premium’s throughput limits for larger custodial matters.” As noted in the article, X1’s benchmark testing of 25 mailboxes in 4-8 hours and we have seen that scale in parallel.

Many customers report to us that Microsoft Purview Premium’s documented inability to timely handle anything other than small matters due to their 2GB per hour throughput limit (which X1 is not subject to due to our direct connection approach) is disqualifying for them. eDiscovery and investigation matters need to be addressed expediently. X1 can address a matter involving 100 custodians at 10GB of MS 365 data each within 24 hours (search, collection and export), while Microsoft Purview Premium, per Buckles’ performance testing and Microsoft’s own documentation, would take up to several weeks.

Additionally, Buckles’ generally referenced, including linking to Microsofts’ documentation, identifying other Purview Premium limitations such as not searching files and attachments over 150 MB, not addressing hidden mail folders, and not accessing files and emails without “compliance copies.” X1 is not subject to these limitations.

The X1 Enterprise Collect Platform is available now from X1 and its global channel network in the cloud, on-premise, and with our services available on-demand. For a demonstration of the X1 Enterprise Collect Platform, contact us at sales@x1.com. For more details on this innovative solution, please visit www.x1.com/x1-enterprise-collect-platform.

Leave a comment

Filed under Best Practices, Cloud Data, Corporations, ECA, eDiscovery, eDiscovery & Compliance, Enterprise eDiscovery, ESI, MS Teams, OneDrive, Preservation & Collection, SharePoint