In Google Vault, a matter is a container for all the data related to a specific topic, such as a legal case or investigation.
A matter includes:
Saved search queries
A list of accounts with data on litigation hold
A list of the accounts that can access the matter
Export sets for the matter
An audit trail for the matter
Holds are different from retention rules because they never expire. If a user has any data placed on hold, their account can’t be deleted by a Google Workspace Admin until the hold is removed. Additionally, as an Admin, you can't transfer a user's data if it is subject to a hold.
Data placed on hold can be purged only after a Vault user deletes the hold, a custodian is removed from the hold, or a user no longer has a Vault license.
In this exercise, you will create a matter and place two user accounts on hold.
Another email has come in from Sam regarding email retention for Project X.
Step 1
If you’re not already signed in, sign in to your domain as the Administrator at admin.google.com.
Step 2
Open a new browser tab, and navigate to vault.google.com. This will open Google Vault.
Step 3
Click the Matters card. Then click Create. In the dialog box, enter Project X as the matter name, and click CREATE.
Step 4
Click the HOLDS tab, then click Create.
Step 5
Enter a Name of Project X related messages.
Step 6
In the Service field, select Gmail, then click CONTINUE.
Step 7
Ensure Type is set to Specific accounts and enter the following email addresses into the box below:
lars.e@yourdomain, kalani.b@yourdomain
Step 8
Click CONTINUE.
At this point, you could use the conditions section to refine the data to hold. For example, if Project X only started two months ago, you might want to retain only messages after the project started. Or you might want to use search terms to hold only messages that make reference to Project X. In this case, however, we’ll retain all messages for the two accounts above.
Step 9
Click Create.
Messages for the two users will now be retained until the hold is lifted. You can share and edit the hold as needed.
You can explore more about matters and holds in the Google Workspace Admin Help Center.