What is a Litigation Hold? Notice, Process & Email Preservation Explained

author
Published By Mansi Joshi
Anuraag Singh
Approved By Anuraag Singh
Published On June 29th, 2026
Reading Time 5 Minutes Reading
Category Forensics

Quick Answer:

Litigation hold (also called a legal hold), is a directive that stops a company from deleting or altering any data, especially emails. Which may be relevant to an anticipated or active lawsuit. The moment litigation is expected, the hold must begin. Deletion of data after that point can result in severe court penalties.

Blog Overview – Imagine a company receives lawsuit notice on a Monday morning. On Tuesday, an employee accidentally deletes a chain of emails that would have been the most critical evidence in the case. Legal team is now exposed, not only to losing the case, but for additional sanctions for destroying evidence.

This scenario is exactly what a litigation hold is designed to prevent. Understanding:

  • What it is.
  • When it kicks in
  • How to properly preserve email evidence.

This can be the difference between defensible case and a legal disaster.

93%
Business evidence is stored electronically
#1
Email is the top data type requested in litigation
$3M+
Average sanction cost for spoliation failures

What is a Litigation Hold & Why It Matters

Litigation hold is an internal process, where an organization instructs its:

  • Employees
  • IT team
  • Records Managers

To stop deletion, modification and moving any data that can relate to a legal matter. It can be thought of as a crime scene tape. Once it goes up, nothing inside gets touched.

what is litigation hold

The legal term behind it is the duty to preserve Electronically Stored Information (ESI). ESI is broader term we can think of it as a every digital footprint your company leaves:

  • Emails
  • Chat logs
  • Spreadsheets
  • Calendar entries
  • Documents

When litigation hold is issued ESI preservation becomes a legal obligation, not a suggestion.

? Note

Litigation hold vs. legal hold – They are the same thing. Almost. A legal hold is a broader term, covering any legal proceeding. A litigation hold refers specifically to civil lawsuits. In practice, legal teams use both terms interchangeably.


When Does a Litigation Hold Get Triggered

Litigation hold gets triggered the moment litigation is anticipated. Not after lawsuit is officially filed, think of this as a smoke alarm: it doesn’t wait for the fire to reach you.

  • If any customer threatens to sue.
  • Any regulatory inquiry begins.
  • If a whistleblower complaint is raised.

The hold starts at that very moment. Some common triggering events are as follows:

  • Employment disputes – HR investigation launched.
  • Contract breach – Opposing party sends a demand letter.
  • Regulatory audit – Government agency request records.
  • Product liability – Customer inquiry complaint filed.

?? Spoliation Warning

Destroying, losing, or altering evidence after a triggering event is called spoliation. Courts can issue adverse inference instructions — meaning the jury is told to assume the deleted evidence was damaging to your case. This is a legal hole one cannot dig out of.

Who Issues It and Who Receives It?

The in-house legal team or outside counsel typically issues the litigation hold. It goes to anyone who have relevant data, called custodians. Custodian is like a librarian responsible for specific files. That can be a sales representative, finance manager, IT admin. Even former employee who still holds company data.

In sensitive cases, like fraud investigations, IT may implement a silent hold on a custodian’s data without notifying them. This prevents intentional deletion before investigation begins.


What is a Litigation Hold Notice & What It Includes

Litigation hold notice (also called a litigation hold letter or hold order) is a formal written document that communicates the preservation obligation to custodians. It is legally binding and once custodian receives it, they are obligated to comply. Think of it as the official rulebook handed to every player before the game begins.


The Litigation Hold Process (Step by Step)

  • Identification of triggering event: Legal counsel confirms, litigation is reasonably anticipated and initiates the hold process immediately.
  • Mapping of custodians and data sources: IT and legal work together to identify who holds relevant data. This includes email accounts, shared drives and archived records.
  • Issuance of litigation hold notice: Formal notice is distributed to all custodians with a clear instructions and an acknowledgement requirement.
  • Suspend deletion and retention policies: Automatic email purges, document recycling, and routine data cleanup are paused for all data within the hold’s range.
  • Preserving and Collecting data forensically – Data is preserved by making forensically sound copies of digital information is executed. Chain of custody is maintained so it remains court-admissible.
  • Monitor, Remind and Release: Periodic reminders go to custodians throughout the case, Once matter is resolved hold is formally released.

We hope now you have some clarity on what is a litigation hold.


Litigation Hold Across Email Platforms

Platform Hold Feature Limitation
Microsoft 365 / Exchange In-place hold, mailbox litigation hold Requires E3/E5 license; limited forensic depth
Gmail / Google Workspace Vault holds Limited to active accounts; no cross-platform
On-premise Exchange / PST Manual archiving No automation; high spoliation risk
MailXaminer Forensic-grade multi-platform preservation None, it supports 25+ formats, court-admissible

When legal stakes are high, you need forensic-grade preservation of email evidence through a  professional email forensics software.


Frequently Asked Questions

Q – When litigation hold is received, what does management do ?

A – Management must immediately stop all routine data deletion, suspend automated retention policies, notify all relevant custodians. Management must start working with  IT department to preserve the identified data in a documented, forensically sound manner. Acknowledging receipt and confirming compliance with legal counsel is required.

Q – How do I remove a litigation hold ? 

A – Litigation hold is released only when a legal matter is fully resolved. Through a settlement, final judgement. Legal counsel issues a formal release notice to all custodians, after which normal data retention and deletion policies resume.


 

author

By Mansi Joshi

Tech enthusiast & cyber expert for the past 5 years. Love to solve complicated scenarios to counter cyber crimes with in-depth technical knowledge.