Google Vault investigations

The investigation workspace for Google Vault.

Bring authorised Vault retrieval, evidence processing and investigation review into one controlled, traceable workflow, so HR, Legal, Compliance and Security teams spend less time preparing files and more time understanding what happened.

Google Vault remains the system of record.

Human investigators decide what the evidence means.

A clearer route to review

From authorised collection to a coherent investigation.

Authorised Vault collection
Evidence processing and context
Structured, source-linked review
Traceable notes and rationale

A controlled investigation working copy keeps review organised while the route back to source remains clear.

Time returned to the investigation

40+

From 40+ staff hours of manual handling to review in hours.

ScoopVault reduces the manual effort between authorised collection and review. Staff hours measure labour effort. They are not the same as elapsed, wall-clock time.

Move from days of preparation and hand-offs to review in hours.

Manual preparation can mean coordinating with IT, handling Vault exports, converting MBOX files into review-ready PDFs and sharing files with investigators. ScoopVault brings authorised retrieval, processing, conversion and review into one workspace, removing separate conversion and file-sharing steps.

Teams can reach review in hours once Vault retrieval has completed. Actual elapsed time depends on Vault retrieval duration and evidence volume.

One investigation workflow

Collect, reconstruct, review, understand and record.

Five connected stages carry authorised evidence from Vault into a structured, source-linked investigation record.

Deterministic retrieval

Direct matches and connected context, clearly distinguished.

Exact and Connected use deterministic rules. They do not ask AI to decide what belongs in the result.

Direct match

Deterministic

Exact

Finds material where investigator-specified terms appear.

Exact does not guess, correct spelling, perform semantic search or use AI to decide what looks important.

Related context

Fixed rules

Connected

Adds structurally related context to direct matches.

Connected states why each additional message was included. It does not infer intent, suspicion or wrongdoing.

Investigation workspace

Review the finding and return to its source.

Keep direct matches, related context, notes and rationale together without presenting sample material as real customer evidence.

Illustrative investigation interface · Sample records only

Communications reviewIn review
Exact resultProject planning14 Aug, 16:42 UTC
Connected contextReply in thread14 Aug, 17:08 UTC
Source-linked email · 14 AugProject planning follow-up

This illustrative message shows how an investigator can review a direct match alongside connected thread context and return to the underlying source.

Investigator note

Record rationale after reviewing the source material and surrounding context.

Human and AI boundaries

AI assistance and human judgement, clearly separated.

AI-assisted analysis is available by default as a separate, advisory layer.

01

Deterministic retrieval

Exact and Connected determine retrieval membership through specified terms and fixed structural rules, not AI.

02

Advisory assistance

AI can support analysis, prioritisation and source-linked questions without controlling Exact or Connected.

03

Investigator authority

Investigators return to source evidence and remain responsible for interpretation, fairness and any subsequent action.

Built for internal matters

Focused on teams using Google Workspace and Google Vault.

ScoopVault supports focused internal investigation workflows. It is not positioned as a general replacement for a full litigation eDiscovery platform.

HR and People

Review workplace concerns, grievances and communication chronology in a controlled evidence workflow.

Legal

Run focused internal factual inquiries with source linkage, provenance and a clear review record.

Compliance

Review policy, ethics and whistleblowing matters while documenting how conclusions were reached.

Security

Investigate authorised account and communication concerns across relevant custodians.

Trust and Security

A controlled working copy with a traceable route to source.

Google Vault remains the system of record. ScoopVault maintains a tenant-scoped investigation working copy, with message and attachment hashing, deduplication, audit and provenance controls.

Read about Trust & Security
01

System of record

Google Vault remains the authoritative source and collection system.

02

Recorded scope

The matter, custodian, date and term scope of each authorised search, together with its source, can be recorded.

03

Controlled access

Tenant scoping is mandatory across routes, evidence working copies and investigation activity.

04

Traceable material

Hashes, manifests, audit material and provenance help preserve how evidence was processed and reviewed.

How ScoopVault uses Google data

After an authorised Workspace user grants access, ScoopVault uses Google Vault eDiscovery scopes and read-only Google Cloud Storage access only for Vault-generated export files, plus basic account details for sign-in. ScoopVault does not currently request Google Drive access, sell Google user data or use it for advertising.

Frequently asked questions

Clear answers before the first conversation.

Does ScoopVault replace Google Vault?

No. Google Vault remains the source and system of record. ScoopVault creates and retrieves authorised Vault exports, then maintains a controlled investigation working copy for processing and review.

What is the difference between Exact and Connected?

Exact finds material where the investigator's specified terms appear. Connected adds structurally related messages using fixed rules and records why each additional message was included.

Where does AI fit?

AI-assisted analysis is available by default as a separate, advisory layer. Exact and Connected remain deterministic, and investigators return to source evidence and decide what the evidence means.

Who uses ScoopVault?

ScoopVault is designed for authorised HR and People, Legal, Compliance and Security teams in organisations that use Google Workspace and Google Vault.

Is ScoopVault a full eDiscovery litigation platform?

No. ScoopVault is a focused investigation workspace for Google Vault. It does not claim the breadth or operating model of a full litigation eDiscovery suite.

Discuss your workflow

Compare your current Vault investigation workflow with ScoopVault.

Talk through how your team handles authorised collection, evidence preparation, review and investigation records today.

Talk to the ScoopVault team