Every message about one thing.
Somebody has asked your company for the correspondence, and the honest answer is that nobody knows where all of it is. We find it, in full, and hand it over in a form that holds up.
- Scope
- Search & review
- Source-linked export
The request always arrives with a deadline
Your attorney asks for the file: everything about one matter, one vendor, one customer or one project, across whichever mailboxes touched it, usually with a date on it. Or an insurance carrier or an auditor wants the correspondence that supports a claim or a number, and a folder of forwarded emails is not going to satisfy them.
Sometimes a dispute turns on what was said. An employment matter, a contract disagreement, a payment nobody can account for. The answer is in the mail, along with a great deal that is not the answer. And sometimes somebody left, and before the mailbox is closed you need to know what it holds that the business still needs, and what left with the person who used it.
Handed to a member of staff, any of these becomes one person clicking through folders for a week, guessing at search terms, and quietly missing the attachments, which is usually where the actual record lives.
Read all of it, not a sample
- 01
Every folder, including the deleted ones
Inbox, sent, archives, subfolders somebody made in 2019, and the recoverable items most searches never reach. A year of one busy mailbox is tens of thousands of messages, and we read all of them rather than the first page of results.
- 02
The attachments, opened and read
Contracts, invoices, statements and packets are searched as text rather than as filenames. Scanned paper and photographed documents are read too, so a term that only appears inside a scan still turns up.
- 03
Names, numbers and amounts matched across documents
Account numbers, serial numbers and figures that reappear across unrelated files get connected to each other automatically, which is how a set of records becomes a story rather than a pile.
- 04
Exported so it survives being questioned
Every item examined is cryptographically fingerprinted, and what we hand over ships with a sealed manifest, so it is verifiable later that the set is exactly what was found and nothing was quietly edited on the way out.
A named scope, agreed before we start
A discovery engagement covers named mailboxes, for a stated question, over an agreed window, and it is your own company's records we are reading. We don't run standing surveillance on staff, and we won't be talked into it. Where legal questions arise we work under the direction of your attorney, and we are careful not to get ahead of them.
If preservation matters, say so on the first call. It is usually possible to stop the clock on a mailbox before anything else happens, and that decision is much easier to make early than to explain later. Retention windows do close, and once they have, no amount of budget reopens them.
You don't have to be a managed client. This is a standalone engagement, scoped and priced in writing before anything is examined, and it works fine on a Microsoft 365 tenant somebody else administers.
Two neighbouring questions
If the question is less "find me the records" and more "I think something is wrong here," that is the email fraud review: the same reading at scale, aimed at altered documents, redirected payments and paperwork reused under another name.
And if what you actually need is to know who still has access to all of this, that is the Microsoft 365 cleanup and audit, which covers departed staff, admin rights and the app permissions nobody remembers approving.
Tell us the question and the deadline
Which mailboxes, what you're looking for, and when it's due. You'll get a straight answer on whether it's findable, what it would cost, and what to preserve today so the answer still exists next month.