Skip to main content
Druva Documentation

Governance and Legal Hold for Slack data

inSync Cloud Editions: File:/tick.png Elite Plus       File:/tick.png  Elite File:/cross.png Enterprise File:/cross.png Business

Before you begin

You can place only inSync users on Legal Hold. Check the Users' tab to view a list of Slack and inSync users within your Org.  The Slack user that you want to place on legal hold must also be an inSync user. For more information on how to add users to inSync, see Add and manage users.

Legal Hold

With legal hold, you can preserve Slack users' backup data and avoid data deletion. When you keep a Slack user on legal hold, the backup data for that user is excluded from compaction. Administrators can analyze user data by using eDiscovery tools.

  •  When you place a Slack user on Legal Hold, the entire Org to which the user belongs is put on legal hold. However, all the users within the Org may not be placed on Legal Hold. On the Users' tab, you can view the details of specific Slack users that are put on Legal Hold.
  • When you remove a Slack user from Legal Hold, it is recommended to initiate one successful backup for the Slack Org to which the Slack user belongs.
  • To view the user usage data details for the Collected Data and Total Collected Data column for Slack users put on legal hold, ensure that at least one successful backup is completed for the Org to which the user belongs.
  • For a Slack user put on Legal Hold, the user usage data details for the Collected Data and Total Collected Data column are displayed 20 minutes after the first backup is successfully completed for the Org that the user belongs to. The user usage details are then updated once a day for subsequent backups.

Legal hold can be used by both, the inSync Cloud administrator and legal administrator. However, each role has its capacity of permissions and access. To learn more about the roles and responsibilities of the Cloud administrator and legal administrator, see About Legal Hold

Enable eDiscovery for Slack data 

As an inSync Cloud administrator, you can place Slack users' on legal hold, thereby reducing the amount of time that IT personnel spend manually collecting and managing data. You can then access the user's legal hold data from Slack by using WebDAV. For more information about how the Slack data is arranged within WebDav, see How the Cloud Apps data is arranged.

The following options are available in the WebDAV Access field:

Field Description
All Collected Data

Select this option if you want to access the data of all versions (created, updated, and deleted) of metadata, channels, and messages.

Last Collected Data

Select this option if you want to access the Slack data (metadata, channels, and messages) of the latest snapshot.

Note:

  • The data is displayed with the snapshot version information by default. To disable viewing the version information when you access the data, contact Druva Support. You can avail this option provided you have an Elite or Elite Plus license.
  • Deleted  and updated  messages and channels  are not displayed for the Last Collected Data WebDav access.
Data within a Date Range

Select this option if you want to access all versions (created, updated, and deleted) of metadata, channels, and messages backed up data during a specific date range. In the Date Range fields, select the start date and the end date for accessing the legal hold data.

By default, administrators have access to all backup data. If you want administrators to access only deleted files (metadata, channels, and messages) select the Include Deleted Files Only checkbox.

For example: Selected Start date is 10 Jan 2020 and the End date is 20 Jan 2020. If your first restore point date is 18 Jan 2020 and last restore point date is 25 Jan 2020. All the data that is created between 18 Jan 2020 and 25 Jan 2020 will be displayed for the selected date range.

If a user who has Slack app is put on legal hold, the data is made available via WebDAV based on the Data Access Settings:

WebDav_URL.png

Scenarios

Let's take a look at the different scenarios listed below:

Scenario 1: For the All Collected Data option, the data for messages is made available via WebDAV as follows:

  • Attachments are available in the parent or native file format.
  • Messages are available in messages.<version>.json file format. 
  • Edited or deleted messages with all versions in edits.<version>.json file format. 
  • Metadata of the channels in metadata.<version>.json file format. Multiple entries for each version when the metadata changed.

All_backup - Copy.png

Scenario 2: For the Date Range option, the messages data is made available via WebDAV as follows:

  • Attachments are available in the parent or native file format.
  • Messages are available in messages.<version>.json file format. 
  • Edited or deleted messages with all versions in edits.<version>.json file format. 
  • Metadata of the channels in metadata.<version>.json file format. Multiple entries for each version when the metadata changed.

Scenario 3: For the Last Collected Data option, if the Show files without versions in WebDAV option is NOT enabled, the data is made available via WebDAV as follows:

  • Attachments are available in the parent or native file format.
  • Messages are available in messages.<version>.json file format. 
  • Metadata of the channels in metadata.<version>.json file format.

Last_backup_with versions.png

Scenario 4: For the Last Collected Data option, if the Show files without versions in WebDAV option is enabled, the latest snapshot with the date and timestamp is displayed. Click on the latest snapshot to view the data.

Last_backup_with show without versionsflag enabled.png

The messages data is made available via WebDAV as follows:

Last_backup_version_flag enabled_inside the folder - Copy.png

Procedure

To enable eDiscovery for Slack data 

  1. Create a legal hold policy to preserve the user's Slack backed up data and avoid data deletion. To create a legal hold policy, see Create a legal hold policy.
  2. Access the user's legal hold data from Slack by using WebDAV. For more information, see  Access legal hold data using WebDAV.

As an inSync Cloud and Legal administrators, there may be a scenario for which you want to download data for users placed on legal hold. inSync provides an easy-to-use utility, inSync Direct Download utility, using which you can download WebDAV data for users placed on legal hold. You can then share this data with your legal team for further action. For more information, see the inSync Direct Download utility for Legal Holds page.

If you plan to use an external eDiscovery tool such as Exterro, then, you may have to integrate inSync with these external eDiscovery tools. For more information, see the eDiscovery  Software integration page.

  • Was this article helpful?