Question

A U.S. company using a SaaS collaboration platform receives a litigation hold notice requiring it to preserve all relevant emails, chat messages, and shared documents. The legal team is concerned because the data is stored and processed entirely by the cloud provider across multiple regions, and the provider's standard retention policy auto-deletes chat logs after 90 days. What is the MOST important action the company must take to meet its eDiscovery preservation obligations?

Accepted Answer

Ensure the cloud contract and provider capabilities support suspending automated deletion and enabling a legal hold on the relevant data, and coordinate the preservation scope with the provider

Answer

Immediately export all tenant data to on-premises storage so the company has full physical custody of the evidence

Answer

Rely on the provider's SOC 2 Type II report as evidence that data preservation controls are operating effectively

Answer

Terminate the provider's automated deletion job at the infrastructure level using the customer's cloud administrator credentials