Before you can put backup data on hold, you must define at least one preservation policy. The preservation policy defines which files are included in the legal hold and how long to keep files under legal hold. This article describes how to create a preservation policy that you can apply to different legal matters. (In the Code42 Legal Hold web app, a legal matter is the collection of all the custodians and backup data associated with a litigation.)
Legal hold is a part of the eDiscovery process undertaken in response to actual or prospective litigation. For information on how to leverage Code42 for Enterprise for eDiscovery, see our eDiscovery Integration Guide.
- You must create a preservation policy before you create a matter.
- Consult with your legal team before creating a preservation policy. The settings and configuration choices should align with the needs of your legal and compliance teams.
- For example, to back up files outside the user's home directory, you may decide to include the device's entire main drive.
- As another example, if the standard backup policy is to purge deleted files after a period of time, you may decide to keep deleted files forever for a legal hold.
Our Zapproved partnership enables you to use Zapproved to manage your legal hold process. Learn more about how to integrate Code42 and Zapproved for eDiscovery.
- File exclusions added under the Global Exclusions in the administration console also apply to all preservation policies. Learn more about best practices for file exclusions and legal hold.
- If there is more than one legal hold placed on a user (and the user's devices), only the file exclusions shared by both legal holds are applied.
Existing legal holds migrated with upgrade to 6.x
If you created a preservation policy with the default settings in version 5.x of the Legal Hold web app, the Remove deleted files setting is not applied properly. When you create a new preservation policy, the Remove deleted files setting indicates that it is set to Never. However, if you do not change the default frequency and version settings, the preservation immediately removes deleted files from the backup archive, which can result in data loss.
To resolve this issue:
- Create a new preservation policy or policies and update the matter(s) to the new preservation policy. This issue does not apply to new preservation policies created in version 6.x of the Legal Hold web app.
- Contact Code42 for Enterprise support . Our Customer Champions will apply a script to your existing preservation policies to ensure the setting is applied correctly.
- Upgrade your Code42 environment to version 6.0.4 or later.
This issue does not apply to preservation policies where the settings have been changed from the default.
Before you begin
The steps in this tutorial require one of the following roles:
- All Org Legal Admin (version 6.5.x and later in Code42 environments with an authority server
- Legal Admin (version 6.0.x and earlier)
- Org Legal Admin (this role can only restore files for users within the administrator's organization and its child organizations)
- Customer Cloud Admin (Code42 cloud environment only)
- SYSADMIN (Code42 environments with an authority server only)
- A custom role with appropriate permissions. Users with the legalhold permission are able to view all legal holds.Copy the Legal Admin role to create an appropriate role.
Step 1: Create a preservation policy
- Sign in to the administration console.
- Navigate to the Legal Hold web app.
- (Version 6.5.x and later) Choose Legal Hold in the left navigation menu.
- (Version 6.0.x and earlier) From the application selector in the upper right, choose Legal Hold.
Note: In versions 6.0.x and earlier, the first time you sign in to the Legal Hold web app, you are prompted to create a preservation policy. From All Matters, click the action menu , and choose Manage preservation policies.
- From All Preservation Policies, click the create preservation policy icon (+) .
- Enter the preservation policy's name in the Create Preservation Policy dialog.
The new preservation policy is created and appears in the list of policies.
Step 2: Configure general backup schedule
The default schedule is usually optimal for legal holds. Backups run continually by default. Changes to the default schedule may cause backups to take longer to complete.
To choose the backup schedule for this preservation policy:
- From the list of all preservation policies, click the name of the policy.
- In the General Backup section, click Edit.
- Set backups to run always or between specified times.
- Change the schedule for file verification scans if necessary.
- Click Save.
Step 3: Configure file selection
The file selection for the policy is a critical setting. Consult with your legal and compliance teams to decide on the optimal settings. If you do not modify this setting, only the file selection of the custodian's organization (or root org) and the custodian's customized file selections (if allowed) will be backed up.
- In the File Selection section, click Edit.
- Under Included files, click Select file path.
Choose substitution variables corresponding to the folders and files you wish to include.
- (Optional) Under Excluded files, click Select file path.
Choose substitution variables corresponding to the folders and files you wish to exclude.
- Click Save after updating the settings.
Step 4: Configure filename exclusions (optional)
By default, no files are excluded from the preservation policy's backup set. However, file exclusions added under the Global Exclusions setting in the administration console also apply to all preservation policies.
Learn more about best practices for file exclusions and legal hold.
- In the Filename Exclusions section, click Edit.
- Enter the file extension or regular expression to exclude. A regular expression allows you to search for particular patterns of text. Talk to your system administrator if you require help creating regular expressions.
- Choose the Regular Expression option to enter a regular expression rather than a file extension.
- Alternatively, you can import filename exclusions:
- Choose the operating system that the exclusion applies to.
- Click Import.
The Import dialog appears.
- Insert the filename exclusions from a text file into the dialog.
- Click Add.
- Repeat steps 1 - 4 for each file exclusion or regular expression.
- Click Save after you have added all filename exclusions.
Step 5: Configure frequency and versions
The frequency and version settings are critical for any preservation policy. Consult with your legal and compliance teams to determine the best retention policy for data that is placed on legal hold.
- In the Frequency and Versions section, click Edit.
- Set the frequency at which versions are saved.
- Change the version retention sliders to the desired values:
- For one week, keep a version: Indicates which versions to keep from last week (not including today).
- After one week, keep a version: Indicates which versions to keep from last 90 days (not including last week).
- After 90 days, keep a version: Indicates which versions to keep from last year (not including the last 90 days).
- After one year, keep a version: Indicates which versions to keep from previous years (not including last year).
- Remove deleted files: Period after which deleted files are removed from the archive.
- Click Save.
Step 6: Configure advanced settings (optional)
We recommend that you do not change the advanced settings for a legal hold.
- In the Advanced Settings section, click Edit.
- Change the advanced settings to the desired values:
- Data De-duplication: Controls data de-duplication rate.
- Compression: Controls how your backup is compressed.
- Encryption enabled: Indicates whether encryption is turned on.
- Watch file system in real-time: Indicates whether files are constantly monitored for changes.
- Back up open files: Indicates whether files that are open (in use) at the time of back up will be backed up.
- Click Save.
Step 7: Test your preservation policy
We recommend you create a matter, and use a test device to make sure your preservation policy is adding files to legal hold as expected.
When you are testing, you may want to see how updating the preservation policy affects the files in legal hold. The Code42 app applies updates from the preservation policy only after a file verification scan. So to see the changes, you must first start a file verification scan. Open the Code42 app on the test device, go to the Backup Set Settings, and choose Scan for file changes