One Platform. Complete Archiving. Compliance Without Compromise.

Search built for the meet-and-confer, storage built for the auditor, productions built for the court — one platform, section by section.

Rated 5 out of 5. “From 4–6 months to minutes.” — EMSL

Search & Discovery

A real search grammar – Phrases, wildcards, fuzzy matching, proximity (w/5, pre/5), grouped field queries, and date ranges — plus semantic concept search for when the words differ but the meaning matches.
It shows its work – The query builder previews “how many does this find?” before you run it, and the parsed query stays editable as text — search you refine in place, not a job you submit and wait on.
Thirteen searchable fields – Custodian, sender, domain, recipients, participants, subject, body, dates, file type, tags, classification, and matter. A tag is searchable the instant it is applied.
Audit-ready logs – Every query, view, and export is tracked for defensibility.

Grotabyte — Search

"side letter" w/5 guarantee AND custodian:(smith OR chen)

How many does this find?1,204 documents · 0.03 s

RE: side letter — fee guarantee2024-11-02 · sealed

…we can guarantee the fee via a side letter if…smith

契約書の修正版2025-03-14 · sealed

CJK indexed per character — found exactly, not skipped

Q3 pricing addendumsemantic · sealed

concept match — no shared keyword with the query

phrase · wildcard · fuzzy~ · w/5 · pre/5 · date ranges · 13 fields

eDiscovery & Productions

Assessment before the index – Custodian ranking, timelines, external exposure, and off-hours anomalies run before any index is built, and every figure links through to the documents behind it.
Recall you can defend – TAR/CAL holds out a control set, estimates recall with Wilson score intervals, tests elusion on the discard pile, and states its methodology in terms you can disclose.
Redaction that removes – Text is taken out of the produced copy, never covered by a black box over selectable words. Each span records one of seven stated bases — privilege, work product, PII, PHI, non-responsive, confidential, trade secret — while the sealed native stays byte-identical.
Volumes the other side can load – Concordance DAT and Opticon OPT load files, family-aware Bates numbering that continues across volumes, a privilege log, a chain-of-custody report, and no document cap. Term hit reports carry incremental counts for the meet-and-confer.

Compliance & Governance

Retention with citations – Ten policy templates, six citing their statute — SEC 17a-4(a)/(b), FINRA 4511(c), SOX §802, HIPAA, MiFID II. Nothing is in force until you enable it, and the longest applicable rule wins.
Legal holds as standing predicates – A hold matches material that arrives next month without being reapplied. Releasing one requires a second approver.
Holds scoped to a person, not a mailbox – Every message carries the internal parties to it, so a hold reaches mail collected through a journal — including the blind copies a journal envelope recovers and the message itself never carried. One stored copy, not a duplicate per recipient.
Custodian identities – One person, every address they send or receive on, imported from your directory. Without it a hold on somebody using two address patterns reaches half their mail and reports success.
FOIA & public records – Deadlines computed from versioned statutory rules, fee calculation, an exemption library, and a search recorded against the specific request.
Certified destruction – Crypto-shred, physical reclamation, index removal — and a certificate that queries the index at the moment of issue and reports what it found.

Supervision & Review

Lexicons with citations – Eight review lexicons — MNPI, collusion, guarantees, complaints, gifts, harassment, off-channel, pressure — each naming the regulation behind it.
Every alert closes – A typed reason ends each one: cleared, escalated, or referred. There is no state where an alert simply stops being looked at.
Sampling you can reproduce – Review populations are drawn deterministically by hash, so the same document gives the same answer when the examiner repeats the draw.
Detectors that hold up – Eighteen DLP detectors across twelve countries and regions, every national identifier checksum-verified so a random sixteen digits never becomes a card alert — and matched evidence masked by construction.

Grotabyte — Supervision & DLP

MNPI · lexicon (SEC 10b-5)CRITICAL

“…not public yet, but the filing lands Thursday…”escalated · r.patel

DLP · CARD (Luhn-verified)HIGH

“…please wire to ⟦45••••••••31⟧ before Friday…” — evidence masked by constructioncleared · reason typed

Review coverage3.0% of population

sampled deterministically by hash — same document, same answer

8 lexicons citing their regulation · 18 detectors, 12 countries · dispositions, not dashboards

Security & Privacy

Isolation by architecture, not by filter – In the cloud, each customer gets their own compute and their own storage, and no catalog is shared between customers. There is no multi-tenant index for a query to be scoped against, because there is no shared index.
Role-based access – Twenty-five permissions across ten least-privilege roles, including an auditor who can verify the chain of custody without being able to read a document.
Encryption per record – AES-256-GCM under a tenant → custodian → record key hierarchy, so one document can be crypto-shredded without touching the sealed container around it.
Tamper-evident by construction – A hash-chained ledger records every action; verification detects alteration, gaps, and excision. No delete path exists — for anyone.
Data residency you choose – Your archive can be placed in a binding jurisdiction — objects stored there do not leave it — decided when the account is created, because storage cannot be moved afterwards without copying every object.
Dual control – Purges, GDPR erasures, and hold releases require a different person holding approval rights. Refused erasures are ledgered with the legal basis.

Data Sources & Capture

Every mailbox you have – Microsoft 365, Google Workspace, on-prem Exchange (journal or mailbox), and any IMAP or POP3 server — with journal unwrapping that preserves BCC and distribution-list recipients.
The AI channel – Claude Enterprise through Anthropic’s Compliance API: chats, projects, attachments, and agent sessions, each turn a sealed record.
Files and legacy archives – OneDrive, SharePoint, Drive, Teams chats, S3, R2, SFTP, NAS — and browser uploads of PST, OST, EML, MSG, MBOX, EMLX, and DXL, expanded safely.
Collection-window guardrails – A schedule that cannot survive the vendor’s retention window is refused by name, stalled sources alarm before material is lost, and a revoked credential returning empty runs is caught by its watermark.

M365 · Google

Exchange · IMAP

S3 · NAS · PST

AI assistants

Grotabyte — Sources

Exchange Online · delta09:41 · 1,204 new

checkpoint kept · original MIME preserved

Claude Enterprise09:38 · 312 turns

chats, projects, attachments, agent sessions

Teams chatsdaily · OK

vendor keeps 21 days — schedule verified against the windowguardrail

A schedule that cannot survive the vendor's retention window is refused, by name

User Experience & Productivity

Self-service archives – Employees search their own historical mail directly, scoped to their own custodianship at the database layer — retrieval without an IT ticket.
Review at scale – TAR/CAL with continuous learning, statistical recall estimates, and elusion testing on the discard pile; coding that supersedes rather than overwrites, so the prior call stays visible.
Early case assessment – Custodian ranking, communication maps, date histograms, and volume projections before a single document is reviewed — every figure links to documents.
Ethical walls – A reviewer sees only the matters they are on, enforced at one engine accessor covering hits, counts, facets, exports, and productions.

Operations & Extensibility

No search cluster to run – Embedded engines over object storage or a plain filesystem. One variable configures an on-prem deployment; no Elasticsearch, no always-on fleet.
Continuously verified – Search, retention, supervision and destruction are exercised end to end against a real-world reference corpus before anything ships. Documents are read back, decrypted and re-fingerprinted against what was sealed.
Nothing fails quietly – Collection-gap grading, stalled-watermark detection, ingest-trouble notices, and a weekly digest.
Migration without lock-in – PST and OST read natively (no Outlook required), legacy archives imported byte-faithfully — and PST written natively on the way out, because your exit matters too.

Ready to see it in action?

Tell us your sources and your rules — we’ll stage the demo around them.

Book a Demo Contact Sales