E-Discovery Without the Associate Bill: The IT Setup That Pays for Itself

Most managing partners at commercial litigation firms think about e-discovery spend in terms of vendor invoices — productions in this range often run five figures once a Relativity shop, contract reviewers, and a per-gigabyte consultant are in the mix.

That’s the visible cost. The invisible one is associate hours: the time spent manually pulling emails from Outlook, organizing files into folders with inconsistent naming conventions, burning a USB drive to hand off to opposing counsel, and then doing it again when they say the format was wrong.

The IT infrastructure that eliminates most of that work isn’t exotic. It’s a specific configuration of tools your firm probably already licenses — just not set up to do this job.

The Problem Isn’t the Big Productions

For a large production — hundreds of thousands of documents, complex privilege logs, tight court deadlines — you’re going to use a vendor. That’s not changing, and this post isn’t arguing otherwise.

The problem is the smaller matters. The breach of contract case with 8,000 emails. The partnership dispute where you need to produce two years of communications between three custodians. The commercial landlord-tenant case where the other side requests “all documents related to the lease.”

These productions aren’t big enough to justify a full Relativity engagement, but they’re too large to handle cleanly with a shared drive and a paralegal spending three days manually sorting attachments. Firms in Henderson and Las Vegas see this pattern regularly — often enough that the associate-hour leak adds up — and most are spending that time on work that a properly configured Microsoft 365 environment would handle in a fraction of the time.

The Foundation: Matter-Tagged Storage from Day One

The single biggest source of e-discovery pain is unstructured data — emails in personal inboxes, documents saved to desktops, files scattered across a shared drive with no consistent organization.

The fix isn’t a new document management system (though that helps). It’s enforcing a tagging and folder structure at the matter level from the moment a file is opened.

In SharePoint Online (included in Microsoft 365 Business Premium), you can create a site structure where every matter gets its own document library with consistent metadata columns: matter number, client name, document type, custodian, date range. When documents are saved to that library, they inherit those tags automatically based on where they’re stored.

When a discovery request comes in, you’re not hunting across three shared drives and four attorneys’ OneDrive folders. You run a filtered view — matter number, date range, document type — and the responsive set surfaces in minutes.

This doesn’t require custom software. It requires a deliberate setup and the discipline to use it. Firms that build this habit when they open a file spend dramatically less time on collection when discovery starts.

Exchange Online Retention: The Litigation Hold You’re Probably Not Using

Microsoft 365 Business Premium includes mailbox Litigation Hold, Exchange Online Archiving, DLP, and eDiscovery Content Search. Those are the tools most litigation practices have never touched. This is a significant missed opportunity.

SharePoint Online in Business Premium is SharePoint Plan 1. It does not have the same in-place hold as E3. To preserve SharePoint and OneDrive content, use Microsoft Purview retention policies — not a mailbox-style litigation hold.

Here’s what the mailbox and search tools do:

Litigation Hold freezes a custodian’s mailbox content — emails, calendar items, contacts — so that nothing can be permanently deleted, even if the user deletes it from their inbox. You can place a hold on specific custodians the moment litigation is reasonably anticipated, which satisfies your preservation obligation under FRCP 37(e) without any manual intervention.

To place a hold or run a collection: Microsoft Purview → eDiscovery. Create a case, add custodians or locations, and apply a hold. You can set a duration or leave it indefinite. The user’s experience doesn’t change — they can still delete emails normally — but everything is preserved in the background. (The old Exchange Admin Center → Mailbox features path is not the current workflow.)

Retention Policies let you set firm-wide or matter-specific rules: retain all email for seven years, then delete. Or retain everything in a specific SharePoint site for the life of the matter plus three years. These policies run automatically, without anyone remembering to do anything — and they are how you preserve SharePoint/OneDrive on Business Premium.

Content Search (in Microsoft Purview eDiscovery) lets you search across all preserved mailboxes and SharePoint sites simultaneously, filtered by custodian, date range, keywords, or any combination. You can export the results in PST format for review, or in native format for production. For a matter with three custodians and a two-year date range, a well-constructed search takes minutes to run and returns a defensible, auditable collection.

None of this replaces attorney review for privilege. It replaces the paralegal spending two days manually exporting individual mailboxes and the associate spending an afternoon trying to merge them into something coherent.

Secure Handoff: Stop Emailing Zip Files to Opposing Counsel

The way many firms handle document productions to opposing counsel is a security and chain-of-custody problem dressed up as a workflow.

Emailing a zip file of responsive documents is not a production. It’s a file transfer with no access controls, no audit trail, no confirmation of receipt, and no way to revoke access if you later realize you included a privileged document by mistake.

The better approach is a SharePoint external sharing link, configured correctly:

Create a dedicated folder in SharePoint for the production set
Generate a sharing link with an expiration date (30 days is typical) and password protection
Require the recipient to verify their email address before accessing
SharePoint logs every access — who opened the link, when, and from what IP address

If you need to claw back a document, you revoke the link. The recipient loses access immediately. Compare that to a zip file that’s already been downloaded, forwarded, and saved to three different devices.

For firms handling matters with confidentiality orders or sensitive trade secret productions, this isn’t optional hygiene — it’s the minimum defensible standard. And it’s built into the Microsoft 365 licenses most firms already pay for.

MFA on the receiving end matters here too. If opposing counsel is accessing a production portal, you want that access protected by more than a link. SharePoint’s external sharing can require the recipient to authenticate with a one-time code sent to their email — a lightweight form of MFA that doesn’t require them to install anything.

What This Actually Costs vs. What It Saves

Microsoft 365 Business Premium runs about $22 per user per month at current U.S. list (annual commitment; prices are subject to change). Most firms are already paying for Microsoft 365 at some tier — the question is whether they’re using the compliance and security features they’re already licensed for.

The Purview eDiscovery portal, mailbox litigation hold, Exchange Online Archiving, DLP, retention policies, Content Search, and SharePoint external sharing are all included in Business Premium. They’re not add-ons. Remember the SharePoint caveat: preserve sites and OneDrive with retention policies, not an E3-style in-place hold.

Now consider the alternative, as illustrative math: a single modest e-discovery production handled manually — collection, processing, export, handoff — might run 15–20 associate hours at $250–$400/hour. That’s $3,750–$8,000 in write-offs or unbillable time, per matter, for work that a properly configured M365 environment handles in two to three hours.

For a firm doing six to ten of these smaller productions per year, the math is straightforward. The IT setup pays for itself on the first matter where it works correctly.

What This Doesn’t Replace

To be direct about the limits: this setup is for the 80% of matters where the production is manageable in scope and the review is straightforward. It is not a substitute for Relativity, Everlaw, or a qualified e-discovery vendor when you’re dealing with:

Productions over 50,000 documents
Complex TAR or predictive coding workflows
Multi-party litigation with coordinated productions
Matters where the opposing party or court has specific technical format requirements

For those matters, use a vendor. Vendor productions in this range often run five figures. The point of building good in-house infrastructure is that it makes those engagements faster and cheaper too — because your data is already organized, already preserved, and already searchable when you hand it off.

The Configuration Checklist

If you want to audit whether your current setup supports this workflow, here’s what to look for:

Microsoft 365 Business Premium licenses (or equivalent with Purview compliance features)
SharePoint site structure with matter-level document libraries and consistent metadata
Mailbox litigation hold capability enabled and tested on at least one mailbox (Purview → eDiscovery)
Retention policies covering SharePoint and OneDrive, not just Exchange
Content Search access for at least one designated administrator
External sharing configured with expiration dates and email verification required
MFA enforced on all attorney and staff accounts

MFA is listed last on the checklist but is the prerequisite for everything else. A litigation hold that can be bypassed because an attorney’s account gets compromised isn’t a litigation hold — it’s a liability.

Getting the Setup Right

The tools are all there. The gap, for most litigation firms, is configuration — knowing which settings to enable, in which order, and how to verify they’re actually working before you need them in a live matter.

If you’re not sure whether your current Microsoft 365 environment supports this workflow, our IT assessment covers exactly this ground. It takes about ten minutes and gives you a clear picture of what’s in place, what’s missing, and what it would take to close the gap.