Legal hold register
- On hold: 0 sources, 0 records at risk.
- Released with a reason: 0.
Legal Intelligence
Legal holds, defensible retention, chain of custody, authorised evidence collection and an investigation chronology.
Demonstration: Dunmore Building Services (fictional) · Construction services. Fictional data and a scripted answer.
Which data sources must be placed on hold now so evidence is not lost?
Review each flagged record: confirm it or dismiss it. The totals and the answer below follow your decisions.
| Source | Custodian | Deletes | Records at risk | Finding | Decision |
|---|---|---|---|---|---|
| Email, project team | Project manager | Never (archived) | 41,000 | Matched | None needed |
| Chat channel #site-4 | Site team | After 30 days | 12,600 | Deletes automatically after 30 days; the matter covers last quarter | |
| Site CCTV | Facilities | After 14 days | 280 | Overwritten every 14 days; footage from the relevant week may already be gone | |
| Finance system | Finance | Never | 8,800 | Matched | None needed |
| Departed manager's laptop | IT | Wiped on redeployment in 20 days | 3,300 | Device scheduled to be wiped and reissued | |
| Personal phone messages | Project manager | User-controlled | 900 | Not company-controlled; preservation depends on the individual |
Simulated answer. Written for this fictional case, not produced by a live model. Only the figures in it are computed, from what you decided above.
Four sources delete or are wiped on a cycle shorter than the matter will run [S1]. The CCTV may already have overwritten the key week; that gap should be recorded now, not discovered later. A personal phone is outside the company's control, so preservation there is a request to the individual, not an instruction [S2].
You have placed 0 on hold (0 records at risk) and released 0; 4 sources are undecided. Anything undecided keeps deleting.
Relies on: S1 · Retention and deletion scheduleS2 · Matter scope memo
The legal operations manager with the investigation lead decides. Approving issues the holds to IT and the custodians for the sources placed on hold. It does not collect or read any data.
Not ready to approve. 4 flagged sources are still undecided. Confirm or dismiss each one first.
In the product this is a different person with the right permission. Here you play that role to see the rule.
The Legal Intelligence story · This capability in the full register