E-discovery, explained

E-discovery for law firms: a practical guide for small firms

E-discovery has a reputation as big-firm territory — Relativity licenses, dedicated litigation-support staff, six-figure vendor invoices. But the underlying obligation applies the moment a small firm has a duty to preserve electronically stored information, which is most litigation matters today. This guide explains what e-discovery is, walks the stages of the process, and — the part small firms actually need — helps you judge how much tooling a given matter really warrants, from discovery management software that tracks the requests and deadlines to the review platforms that process the documents. It is not legal advice; confirm your obligations against your jurisdiction's rules and case law.

Lucas Barnes By Lucas Barnes, Founder Last updated September 8, 2026
The obligation, not the software

E-discovery is a duty first and a toolset second

E-discovery is the process of handling electronically stored information — ESI — in a legal matter: finding it, preserving it, collecting it, reviewing it for relevance and privilege, and producing what's responsive. The word conjures enterprise platforms and litigation-support departments, but strip that away and it's the same obligation paper discovery always carried. The difference is that the evidence now lives in email, text threads, cloud drives, collaboration apps, and phones, each file wrapped in metadata that can matter as much as the content.

That distinction — duty versus tooling — is the one small firms most need to internalize. The duty to preserve relevant ESI attaches when litigation is reasonably anticipated, and it does not care whether you're a fifty-lawyer firm or a solo. Courts have imposed spoliation sanctions in small-firm matters exactly as in large ones. What does scale with the matter is the practical burden: a two-custodian dispute and a multi-district class action sit at opposite ends of a spectrum, and the tooling each warrants is wildly different.

This guide takes the obligation seriously and the tooling proportionately. It walks the stages of the e-discovery process, then spends most of its energy on the question a small firm actually faces: for this matter, how much is enough? None of it is legal advice — the rules and the case law that govern preservation, proportionality, and sanctions vary by jurisdiction, and you should confirm your obligations against your own.

The process

The operational core of the EDRM

The Electronic Discovery Reference Model (EDRM) is the industry-standard map of the e-discovery process. The full model runs from information governance on the front end through analysis and presentation at trial, but the six stages below are its operational core — the ones that carry most of the work and nearly all of the risk for a small firm. They're drawn as a sequence, but real matters loop: you re-collect when a new custodian surfaces, you re-review when the scope shifts.

Figure A · The process

Six stages, one defensible record

The EDRM's operational core. The first two stages carry the most legal risk; the middle three carry the most cost; the last is where the work becomes visible to the other side.

Every stage must be defensible — you may have to explain it to a court. Organizing principle
1

Identification

Map who holds relevant ESI (the custodians) and where it lives — mailboxes, drives, phones, apps.

2

Preservation

Issue the legal hold — suspend auto-deletion so relevant data can't vanish before it's collected.

3

Collection

Gather the preserved ESI in a forensically sound way that keeps metadata and chain of custody intact.

4

Processing

De-duplicate, filter by date and keyword, and convert files into a reviewable form.

5

Review

Read for relevance and privilege, redact, and tag what's responsive, privileged, or hot.

6

Production

Deliver the responsive set to the other side in the agreed format, with a privilege log for what's withheld.

The formal EDRM adds information governance upstream, places analysis alongside review, and ends with presentation at trial — the six above are where small-firm matters spend their time.

Identification and preservation come first, and they're where matters go wrong. The moment litigation is reasonably anticipated, the clock starts. Identify the custodians and the systems, then preserve — which in practice means suspending the routine deletion that would otherwise destroy evidence: email auto-purge, chat-retention windows, device turnover, backup rotation. A hold implemented a month late, after a departing employee's mailbox was wiped, is a classic spoliation fact pattern — and while the severest ESI sanctions turn on a finding of intent rather than mere negligence, even the curative measures a court can order for prejudice are a place no firm wants to be.

Collection, processing, and review are where the cost lives. Collection has to keep metadata and chain of custody intact — a drag-and-drop copy can strip the very dates that make a document meaningful. Processing culls the collected set down to something reviewable through de-duplication and targeted filtering. Review — reading for relevance and privilege — is historically the most expensive stage, which is exactly why proportionality and good culling matter so much to a small firm's budget. Production, the final stage, is the visible one: the responsive, non-privileged set goes to the other side in the format the parties agreed to, accompanied by a privilege log for what you've withheld.

When it lands on you

How e-discovery reaches a small firm

The trigger is almost always the same: a matter becomes litigation, or litigation becomes reasonably foreseeable, and suddenly there's ESI that has to be preserved. For a small firm that arrives in a few recognizable shapes. An employment dispute where the relevant evidence is two years of email and Slack between a handful of people. A contract fight where the deal history lives in a shared drive and a chain of PDFs. A personal-injury or family matter where a client's phone holds the messages and photos that decide the case.

None of those require an enterprise platform, but all of them require the discipline. The failure mode isn't buying too little software — it's moving too slowly on preservation, or collecting sloppily and stripping metadata, or letting a client "just forward the relevant emails" and calling that a defensible collection. The obligations are real at any scale; what a small firm gets to do is meet them proportionately.

The client is often the biggest risk. Custodians who are also your clients will, left unguided, delete "irrelevant" messages, factory-reset a phone before turning it over, or keep using an auto-deleting chat app. Part of the small firm's e-discovery job is a plain-language preservation instruction to the client, early and in writing — the same legal-hold logic, aimed at the person most able to accidentally destroy the evidence.

The small firm's leverage

Proportionality is your best cost control

The single most useful concept in e-discovery for a small firm is proportionality. Federal Rule of Civil Procedure 26(b)(1) limits discovery to what's proportional to the needs of the case, weighing factors like the amount in controversy, the importance of the issues, the parties' relative access to the relevant information, their resources, and whether the burden of the discovery outweighs its likely benefit. Many states have adopted parallel language. It is the rule that keeps a modest dispute from generating big-case discovery bills.

In practice, proportionality is a negotiation you get to lead. Rather than accept an opponent's demand to collect and review everything, a well-prepared small firm proposes a scope: a defined set of custodians, a bounded date range, a reasonable list of search terms, agreed file types. Getting that scope into a Rule 26(f) conference or an ESI protocol — ideally agreed with opposing counsel and blessed by the court — is what turns an open-ended obligation into a defined, budgetable project. The firms that struggle with e-discovery cost are usually the ones that never made a proportionality argument and defaulted to collecting everything.

Proportionality also drives the tooling question. A narrow, agreed scope often collapses a matter to a volume that careful manual work and modest tools can handle. A broad scope — many custodians, large mailboxes, exotic data types — is what pushes a matter toward a purpose-built platform. So the two questions are linked: how much ESI, and how much is at stake?

How much is enough

Matching tooling to the matter

There's no single right answer to "what e-discovery software do we need," because the honest answer is "it depends on the matter." The useful way to think about it is a spectrum keyed to ESI volume and the stakes of the case. At the low end, careful manual collection and general-purpose document tools are genuinely defensible. In the middle, hosted review platforms priced per matter or per gigabyte have made real e-discovery tooling reachable without an enterprise contract. At the high end, full litigation-support platforms and often a vendor or consultant become the proportionate choice.

Figure B · Picking a tooling level

The choice comes down to two numbers

ESI volume and the stakes of the matter decide how much tooling is proportionate. Most small-firm matters sit in the first two bands; the crossover is real, not a cliff.

FEW CUSTODIANS · LOW VOLUME

Manual + document tools

Careful, documented collection; PDF tools for review and redaction; disciplined folders. Defensible when scope is narrow and stakes are modest.

MODERATE VOLUME OR STAKES

Hosted review platform

The crossover band — a per-matter or per-gigabyte e-discovery tool for de-duplication, search, and defensible review, without an annual enterprise contract.

HIGH VOLUME · HIGH STAKES

Full platform or vendor

Many custodians, large data sets, or bet-the-firm stakes. An enterprise review platform and often a litigation-support vendor or consultant become the proportionate choice.

less ESI, lower stakes more ESI, higher stakes →
aThe volume and variety of ESI across the relevant custodians and systems.
bThe stakes — amount in controversy and risk — which set how much defensibility the matter demands.

The two ranges most small-firm matters live in are the first two; the third is where a vendor's expertise, not just a license, is what you're buying.

Two cautions on the manual end. First, "manual" never means "casual" — a defensible manual collection still preserves metadata, documents its method, and maintains chain of custody. Second, the manual approach breaks down quietly: a matter that started as a two-custodian dispute can balloon when discovery opens up, and the firm that planned for a hosted platform as a fallback fares better than the one that has to re-collect under deadline. Pick the level for the matter you have, but watch for the one it's becoming.

The canonical hold

Where your document system fits

A recurring point of confusion is the relationship between e-discovery tooling and your firm's document or practice-management system. They do different jobs. The review platform is a working surface — where de-duplication, search, tagging, and privilege review happen. Your matter document system is the system of record — where the collected source files and the final production sets live, tied to the matter, access-controlled, and auditable.

The clean division is worth stating plainly: the matter document system holds the authoritative copies and the produced sets; the review tooling holds the working copy and the work product. Don't do privilege review by renaming files in the document system, and don't treat the review platform's export as your only copy of a production. In a firm running on a practice-management system, the matter's document area is the natural home for the source collection, the privilege-log documents, and each outgoing and incoming production set — with the access discipline that privileged and withheld material demands. Organizing that material well is a document-management problem in its own right, covered in the document management guide and, for permissions specifically, the permissions guide.

The document system also matters for the preservation stage. A matter-centric system where documents already live in the matter — rather than scattered across personal drives and inboxes — is easier to place under a hold and easier to account for later. It isn't a substitute for a proper legal hold on the original custodial sources, but it does mean the firm's own copies of relevant material start out organized and auditable instead of as an afterthought. How the hold sits over a matter file that is already in suit — alongside the court file, the exhibit numbering, and the drafts moving under a filing deadline — is the subject of the litigation document management guide.

The category, defined

What discovery management software actually covers

Alongside the review platforms, a separate category shows up in small-firm searches: discovery management software. The name gets used loosely, but the category is real and worth defining, because it solves a different problem than either of the tools discussed above. Discovery management software manages the process of discovery — the requests and responses, the deadlines, the productions coming in and going out, the privilege log — rather than the documents themselves. It's the ledger of the discovery phase: what each side asked for, what was served in response, what's still owed, and when each of those things is due.

The distinction from e-discovery software is the questions each answers. A review platform answers "which of these thirty thousand documents are responsive, and which are privileged?" — it exists to process, search, and tag ESI at volume. Discovery management software answers "what did we ask for, what did they give us, what do we still owe, and by when?" — it tracks obligations, not file contents. And a general document management system answers neither; it stores files well but has no idea that one folder is a served production with a Bates range and a response deadline attached. The three categories overlap at the edges — some review platforms bolt on deadline features, some practice-management systems add task templates for discovery — but conflating them is how firms buy the wrong tool.

What a small or mid-sized firm actually needs from the category is a short list. Intake of productions: a record of what arrived, from whom, on what date, and covering which Bates range, made at the moment the production lands rather than reconstructed later. Organization by matter and custodian, so a document's provenance survives the shuffle between review and the matter file. Deadline tracking tied to the discovery calendar — response dates, meet-and-confer obligations, supplementation duties — because a missed response deadline does damage no amount of good document handling undoes. And privilege-log support: withheld documents tracked with the log entry that explains each withholding, kept in lockstep so the log never drifts from the set. Everything past that list is either review functionality or document management wearing a different label.

Honest buyer guidance: most small firms don't need to buy this as software at first. A litigation practice with a handful of active matters can run discovery management as a discipline rather than a purchase — a request-and-response tracking spreadsheet per matter, deadlines entered in the firm's existing calendar with reminders, and a consistent production folder convention inside the practice-management system, like the one walked through in the discovery documents workflow guide with Bates-aware naming from the naming conventions guide. That setup is genuinely adequate, not a compromise, when one or two people run the discovery on each matter and the calendar holds.

Dedicated litigation discovery software starts paying for itself when the spreadsheet becomes the bottleneck: many concurrent matters with staggered deadlines, productions arriving faster than anyone logs them, several people touching the same matter's discovery so the tracking sheet is always someone else's stale copy — or a deadline that already slipped through the cracks once. Those are process failures, and process failures are what this category fixes. As with review platforms, match the tool to the caseload you have, not the one the demo assumes — and whichever way you go, the produced sets themselves still belong in the matter's system of record, per the division above.

Putting it together

From collection to the matter file

E-discovery for a small firm is a duty met proportionately: preserve early and defensibly, scope with a proportionality argument, match the tooling to the matter's volume and stakes, and keep the review surface separate from the system of record. Do those four things and the enterprise reputation of e-discovery stops being intimidating — most matters a small firm sees are handled well without an enterprise budget.

The last mile is getting the collected files and the final production sets into the matter as authoritative copies. Once a production set is prepared and Bates-stamped, filing it into the right matter folder with the right access control is its own workflow, walked through in the discovery documents to Clio guide, with folder conventions in the folder structure guide.

Moving many files into a matter one at a time is where paralegal hours disappear, so firms doing regular productions build a faster path — from Clio's bulk upload to browser extensions like Send to Case that upload straight from a download page into the matter. However the files get there, the principles above are what keep an e-discovery matter defensible: preserve early, scope proportionately, and keep an organized system of record. None of this is legal advice — confirm your preservation and production obligations against your own jurisdiction's rules.

E-discovery FAQ

E-discovery FAQ

Got more? Email [email protected].

Q.01

What is e-discovery, in plain terms?

+

E-discovery (electronic discovery) is the process of identifying, preserving, collecting, reviewing, and producing electronically stored information (ESI) in response to a legal matter — litigation, an investigation, or a regulatory request. It's the electronic counterpart to traditional paper discovery, but the volume, the number of sources (email, texts, cloud drives, chat apps, phones), and the metadata attached to each file make it a distinct discipline. The core obligation is the same as paper discovery: preserve relevant evidence and produce what's responsive and non-privileged.

Q.02

What counts as ESI?

+

Electronically stored information is broad by design. It includes email, word-processing documents, spreadsheets, PDFs, text and chat messages, voicemail, photos and video, social-media content, database records, and the metadata that travels with each of those — creation and modification dates, authors, revision history, and so on. Under the Federal Rules of Civil Procedure, ESI is a distinct category of discoverable material, and courts increasingly expect parties to address it deliberately rather than treat it as an afterthought.

Q.03

Does e-discovery really apply to small firms?

+

Yes, when the duty to preserve attaches. That duty doesn't scale with firm size — it attaches when litigation is reasonably anticipated, regardless of whether you're a solo or an AmLaw 100 firm. What scales is the practical burden and the tooling. A small firm handling a two-custodian dispute has genuine e-discovery obligations but can often meet them with careful manual collection and modest tools. The mistake small firms make is assuming e-discovery is someone else's problem; the obligation is yours the moment a matter involves ESI, and courts have imposed spoliation sanctions in small-firm matters just as in large ones.

Q.04

What is a legal hold?

+

A legal hold (or litigation hold) is the process of preserving potentially relevant information once litigation is reasonably anticipated. In practice it means identifying who holds relevant ESI (the custodians) and what systems it lives in, then suspending routine deletion — auto-delete rules, email retention purges, device wipes — so that evidence isn't lost. The hold is a defensible, documented process, not a single email. For ESI, Federal Rule of Civil Procedure 37(e) governs the consequences of losing it: on a finding of prejudice a court may order curative measures, but the harshest sanctions — an adverse-inference instruction or case-ending dismissal — are reserved for cases where the court finds the party acted with the intent to deprive an opponent of the information. Negligent lateness alone generally doesn't reach that bar, which is exactly why prompt, documented preservation is worth the effort.

Q.05

What is the EDRM?

+

The Electronic Discovery Reference Model (EDRM) is the industry-standard framework that maps the phases of e-discovery, from information governance through identification, preservation, collection, processing, review, analysis, production, and presentation. It's a reference model, not a rigid checklist — real matters loop back and skip stages. For a small firm the useful takeaway is the operational core: identify and preserve first, collect defensibly, then process, review, and produce. The upstream governance and downstream presentation stages matter, but the six operational stages are where most of the work and most of the risk live.

Q.06

What is proportionality and why does it matter for small firms?

+

Proportionality is the principle — codified in Federal Rule of Civil Procedure 26(b)(1) — that discovery must be proportional to the needs of the case, weighing factors like the amount in controversy, the importance of the issues, and whether the burden or expense outweighs the likely benefit. For small firms it's the most important concept in e-discovery, because it's the argument that keeps a modest dispute from triggering big-firm discovery costs. A firm that can articulate a proportionality position — narrow custodians, targeted date ranges, reasonable search terms — can often resolve ESI scope by agreement rather than by buying enterprise tooling.

Q.07

What is discovery management software?

+

Discovery management software is the tooling for the logistics of discovery — tracking requests and responses, deadlines, custodians, and what was produced when — as distinct from e-discovery review platforms, which exist to process, search, and review the documents themselves. The two get conflated constantly, and firms buy the wrong one as a result. Small and mid-size firms usually need the management layer first: a reliable record of every request, its due date, and its response status, plus organized intake of what arrives. That layer can be dedicated software, but for modest caseloads it is often a disciplined combination of practice-management folders, a deadline calendar, and a production log — the section on discovery management software in this guide covers when the spreadsheet approach stops being enough.

Q.08

Do we need dedicated e-discovery software?

+

It depends entirely on volume and stakes, and for many small-firm matters the answer is no. A dispute with two or three custodians and a few thousand documents can often be handled with careful collection, PDF tools for review and redaction, and disciplined folder organization. A matter with many custodians, large mailboxes, or complex data types benefits from a purpose-built review platform — hosted e-discovery tools now offer per-matter or per-gigabyte pricing that puts them within reach of small firms without an annual enterprise contract. The decision comes down to two numbers: the volume of ESI and the risk or value of the matter.

Q.09

Where does our practice-management or document system fit in e-discovery?

+

It's the canonical hold and the organizing layer, not the review tool. Your practice-management system's document area is where the collected source files and the final production sets live as the matter's system of record — auditable, access-controlled, and tied to the matter. It typically isn't where you run de-duplication, threading, or predictive coding; that happens in a review tool or with document utilities. The clean division: the matter document system holds the authoritative copies and the produced sets; the review tooling is the working surface. Getting the collected files organized into the matter is a document-management problem, covered in the guides linked below.

Related guides

Keep going