Litigation requires preserving all records relating to a matter, overriding normal retention. How is that implemented?

The requirement

When a hold is placed, everything potentially relevant must stop being deleted — immediately and across every system — and must remain preserved and producible until released. Deletion after a hold is placed is spoliation, with consequences that exceed the underlying dispute.

What the architecture needs

• Hold evaluated as a blocking pre-check before any deletion, in every system with a retention job. A hold that is a policy statement rather than a technical control will be violated by a scheduled job that nobody associated with the matter.
• Holds scoped by custodian, subject and date range, since a hold over everything is unmanageable and a hold that is too narrow misses relevant material.
• Preservation without disruption, so a user under hold continues working normally — a hold that visibly changes behaviour risks alerting and altering conduct.
• A record of hold placement and release, with the scope and the reason, because the defensibility of the process is itself what will be examined.
• Coverage across every store, including collaboration tools, chat, email and personal drives, which is where most relevant material actually lives.

The conflict to resolve explicitly

Legal hold versus erasure requests. A subject requests deletion of data that is under hold. These obligations genuinely conflict, and the resolution is a documented policy — typically that the hold prevails, with the subject informed of the restriction rather than the request being silently ignored.

And a hold arriving after deletion is unrecoverable, which is the argument for evaluating holds as a blocking condition rather than as a reconciliation afterwards.

The failure that recurs

Holds released late or never. Data preserved indefinitely because nobody closed the matter accumulates cost and risk — it is discoverable in future matters and it violates the retention policy in the other direction. A release process with an owner is as necessary as the placement process.