A legal hold is a process that an enterprise can use to preserve all forms ofpotentially relevant information when litigation is pending or reasonablyanticipated. Applying a hold to items prevents any user from deleting them fromBox.
Legal Holds can be managed and assigned to folders and files through the BoxAPIs.
Legal Holds are a feature of the Box Governance package, whichcan be added on to any Business Plus or Enterprise account.
Policies, Assignments, and Holds
Working with Legal Hold Policies requires a developer to work with threedistinct resources.
- Policies: A Legal Hold Policy describes the general behaviorof the hold. It determines which files should be affected, based on the dateand time the files were created or updated.
- Assignments: A Legal Hold Policy Assignment is a relationbetween a policy and custodian. In this case, as custodian can be a user,folder, file, or file version. Creating an assignment puts a hold on all thefile versions that belong to the custodian. For example, if an assignment iscreated on a folder the policy is applied to all file versions within thatfolder.
- Holds: A File Version Legal Hold represents all the policies thatare assigned to a specific file version. Note that every file version can havea maximum of one file version legal hold and this hold contains a list ofevery assigned policy.
Example Use Case
If an order of discovery is received or the customer is part of an ongoinglitigation, a legal hold policy can be created to keep track of everything thatneeds to be held. The actual holding is done by assigning a policy to a specificfiles or folder. When the holds are no longer needed, the policy can be releasedby deleting the assignment.
Required Scopes
Before using any of the Legal Hold APIs, an application must have the GCM andManage Legal Hold scopes enabled. These are not available in theDeveloper Console and need to instead be enabled by contacting customersupport.