Video: Simplify Complex Internal Investigations with Modern Workflows | Duration: 2812s | Summary: Simplify Complex Internal Investigations with Modern Workflows | Chapters: Welcome and Introduction (9.28s), Introduction to Webinar (137.655s), Reveal Product Suite (236.31499s), Data Collection Overview (581.74s), Data Integration and Search (990.90497s), Data Export and Sharing (1473.41s), Concluding Use Cases (1989.645s)
Transcript for "Simplify Complex Internal Investigations with Modern Workflows": Hi, everyone. Hello, everyone. Thank you so much for joining. Let me introduce myself. My name is Chantal, and I am the marketing manager here at Reveal. And today, I'm gonna be your event producer. I'm going to basically, before I turn this webinar over to our panelist, there are a few housekeeping items that I want to share with you, but let's wait a few seconds while everyone is joining. So let's give everyone a few minutes before joining. And thank you so much for joining on this webinar today. Okay. I see a couple of you joining. Okay then. So a few house, basically housekeeping items. The first one is that, there will be a live Q and A at the end of the webinar, so if you have any question please submit your question in the Q and A section on the right side of your screen and we will try to answer as many as we can at the end of the webinar. Also, at the end of the webinar, there will be a quick three question survey for you, so we would really love your feedback. So if you can take, thirty seconds to fill it out, that will be really, really great for us. This webinar also will be in demand, so you will receive an email tomorrow with the on demand version and it will also be available on our website. Lastly, if you would like to learn more about any of our products, so Reveal's product, you have a button that says, like, request a demo. So by clicking that button, basically, on the upper right hand side of your screen, you will be able to schedule a demo with our team. Yeah, that is with a great pleasure to turn this webinar over to our panelists. Thank you so much. Hello, everybody, and welcome to this webinar about simplifying complex internal investigations with modern workflows, hosted by Refill. It will be an introduction to the Refill products ONA and Logical. And my name is Daniel Schrodinger. I'm director of product strategy at review, and I joined review through the iPRO Xyleb acquisition about three years ago. And responsible for product management and part of the, product team at Reveal. And Andrew is joining me today. Hi, Samuel. Hi, Daniel. Hi, everyone. Andrew Punter. I'm a strategic sales engineer at Reveal. So helping our wonderful sales team demonstrate value to our prospects and clients about the Reveal suite. So, excited to be here, thanks. Great. Thank you, Andrew. So this webinar is about, review and internal investigations and the products ONA and Watchcall that we will demonstrate here. We full step a introduction session on review and the products. After that, Andrew will provide us with a nice demonstration of the solution. And after that, we will discuss some, of the use cases. And at the end, we'll have a q and a session. If you want, you can already drop your questions in the, conversation window so we can answer those at the end of this session. So let's first start about Reveal. Reveal is a e discovery solution provider. We developed software solutions to help you with your ediscovery needs. We provide a full suite of solutions from start to end to support your whole ediscovery workflow. Just a little bit, about the timeline of review. Review started already in 02/2011. And over the years, Reveal has acquired quite some, companies and solutions that are all integrated in the several systems that we offer. So like I said, I joined Refill in 2023 with the eyebrows, Isle of acquisition. But if you take a look at the, technology that has been acquired by Refill, like, for example, the BrainSpace acquisition in 2021, which was the leading visual analytics platform, all those technologies are now integrated within the Refill software suite, and that's something that, Andrew is going to, demonstrate. Also good to know that part of the, presentation will be out about ONA. ONA is also a new, product that was acquired, last year. One of the things that we did for ONA, which is a solution to collect and connect to various data sources, is that ONA is now also available in the European market. We have a data center here in EMEA for hosting the data and processing your data. And, also, the same is for Logical. In a few weeks from now, Logical will also be available for our European clients in the European area. If we take a look at the, the product suite that we have now at Reveal, it's quite a few, but, we try to support the full ediscovery workflow. Products we're going to talk about is ONA. ONA is a collection tool and connectivity tool. It allows you to connect, to various data sources for collection purposes, to get data, for example, from Office three six five or Google or other data sources that you need for your investigative purposes. We also offer a legal hold solution. It's slightly less popular here in the EMEA market. It's really focused also on The US and The US, laws that go with that. But legal hold is an application where you can inform your custodian or your person of interest that they are on under investigation or on a hold for a specific purses purpose. Besides that, legal hold also allows you to make sure that these persons of interest, are not able to delete any data anymore, from their systems. So you can prevent any spoilation. Next to that, we have two review platforms. We've got Logical, which will be demonstrated today, which is a very easy to use, solution to perform a review of your documents and investigate your documents. It's easy to use, easy to start with, and also really fast to get started. So if you have, for example, a case to, like, investigate and you want to start tomorrow, then with Logical, that is definitely possible. Next step, we have Reveal, our flagship products. Reveal is a full featured eDiscovery platform. It has a very large set of AI powered features to help you with the analysis and review of your data. And last but not least, we have, trial director, which is a product that helps you present your case in court. And, that completes basically the the full suite that we have at Reveal. So focus today is on ONA and on Logical for your internal investigations. And, yeah, maybe good to know that, although you think maybe there are, let's say, two review systems available, review offers you a choice. So, you don't have to choose for a full suite or a smaller system. You can choose whatever you want to use for your purpose. And in some cases, it might be that you need a simple and easy to use system. And if you have, for example, larger cases with many reviewers, you may want to think about leveraging, the review solution. Yeah. Let's talk a little bit more about ONA. ONA is a solution that connects to, different cloud sources. We offer over 25 out of the box connectors to collect data from various sources. And that helps you in your ediscovery process to find, and to get access to the proper data that you need for your investigations. So it includes support for Google, Microsoft three six five, Zoom, Dropbox, various systems to easily access data that you need for your investigation. And besides providing access to the data, we also will process your data and make it searchable so you can also do, let's say, an early case assessment on the data. The other product that we're going to demonstrate is Logical. Logical is a very easy to use system for your investigations. So not only experienced investigators can use the software, but also people that occasionally do investigations or just need to review or search for a few documents can use this system, and start very quickly. One of the things that Logical is doing that it's also normalizing all the data. So it doesn't matter what type of data you have, whether these are emails, Word documents, PowerPoints, Excel, audio files or video files. All data will be processed by logical, normalized so that you can review all that data in the same system without leaving our application. But I'll bet that Andrew is going to show you more about, about all of the functionality in here. Talking about internal investigations, probably many of you will recognize this, but we see that there is, yeah, more and more data, but also data in various systems. So it's not just email where the data resides or SharePoint, for example, but we see also that there's a lot more communication in, for example, chat systems like Slack, Teams, and other types of systems. And even mobile messaging can sometimes be part of the investigation. So WhatsApp, Messenger, Signal, Telegram, those chats might also be important for your investigation. Of course, there's a lot of regulatory and compliance pressures. Also think about anonymization and reduction of data, because you don't want to leak any personal data. And what we also see, of course, is that lots of companies moved, many of the systems to the cloud due to, remote work, and that means that the data should be able to be collected from various cloud sources and various, devices. So it's also important that you have access to those types of system to be able to easily access the data that you need for your investigation. Also, an important thing is that, basically, there are lots of systems, where the data can reside. So it requires you sometimes a lot of time to collect all the data and get it from various sources. You may need to involve IT or other resources to, investigate the data. And what we will show you today is also that how you can overcome that. How you can overcome that you will need to, wait, for example, for legal, for you have to wait for IT resources, for example, to help you with processing and collection of your data. And, of course, important is leveraging the new technologies that are available to help you with your search filtering, but also with your other reduction purposes. So today, we're going to talk about this, modern approach about, ONA and a logical workflow. And just to summarize, ONA will help you to collect and centralize unstructured data from various sources. Make sure that you have that data ready available for your investigations. And Logical will help you to automate your review and search and investigate, filter your data. So I think it's over to you now, Andrew. Let me stop sharing my screen. Thanks, Daniel. And you're going to show us how it's done. Absolutely. So, yeah, really excited to be here today, to talk to you about how Reveal, can, offer two solutions, which integrate tightly together to help you make an internal investigation, and speed it into the twenty first century. Daniel covered on multiple pain points that we're seeing with multiple clients, across a huge different, waves of industry. But they're all seeing very similar challenges. How do we expedite, the requests? How do we collect more challenging forms of data? So things such as Slack, Teams messaging. How do we review those where, and search over them in a simple format, a simple syntax? Well, owner has that way to centralize your collections, to centralize, your data. It can also act as archives for your Slack, your Google repositories, and everywhere in between so that you can come into your owner instance. You can identify the scope of your investigation really quickly. You can export it and promote it into logical, where the investigating work can commence. You can also do this, as part of your compliance team or your HR team or legal team. You don't need to be part of your IT team to request data, coming to ONA and search over it. Both platforms offer simple, easy to use solutions, so you can get going and become an expert within days. So let me jump into the tool. So what we see here is ONA, a very clean, nice, usable interface. I'm gonna jump into my Reveal Gold workspace, which currently has multiple connectors into multiple bits of data. I can see I have connectors into OneDrive, Outlook, Slack, Teams, highlighting that I can connect into multiple things at once. Now if I wanted to increase the scope of my project, I can add more data sources. Clicking on the more the add source button, I can see all of the different, connector suites, as Daniel mentioned earlier, that I can connect into. Now these can be created with low and no code, so you simply can authorize a connection, an owner can start, syncing data, from there. For example, if I'm going to add into a Slack, I can come into my Slack enterprise, connector, and you'll also notice I have two separate synchronization modes. Now this offers and showcases what Oner can offer, for for corporations above investigations. I can do a one time sync where I can target specific people, their their Slack environment, over a specific date range. Really useful when you know, investigations affect specific people. I can also do what's called an auto sync and archive. Now this will build an incremental index that will also follow your retention policies mirrored in owner, and will continually collect your Slack instance. Therefore, if we have a new matter appearing tomorrow, I can go into that index. I can search across my Slack. I can identify relevant material really quickly, and I can promote it to my review tool of Logical so that I can identify wrongdoing much, much quicker. Within Ono itself, I can come into if I go back, into my workspace, I can search across multiple different data sources with one syntax, eliminating the need to go into Vault, Purview, Slack, etcetera, and search across different things to explore my data. I can come into my super easy search tool, and I can come into and I can start searching with all the Boolean operators I'd expect. I can search over times or different tags, keywords. I can build out a complex search in our search builder, and I can save these searches as well. As the search, continues, I can see I've got one document ready for and responsive from my, result. Now this is a great example of what Slack is replied in owner. I can see I've got news links, which I can click on and go forward. But what's even better is I have reactions. I can see how people have responded and which people have responded with which reaction. I've extracted the text, below, and it will highlight where I've even my search words appear. I can flip into my more details function, which will, exceed, metadata that has been extracted with the, with the document, so the different accounts that are, and participants within this chat. Any attachments can be linked here, and I can also see in our general stuff I have some elementary tagging. So I can come into and tag this is relevant and I want to export it. Now back into search, we can continue building out these searches until I have my a relevant population that I know will need review for my investigation. The great, advantages about this, about about owner and search from within owner, means that I don't need to commit to my search and, export strategy instantly. I can test the waters to make sure that what sort of data I'm going to be reviewing or my team is going to be reviewing actually contains relevant material. From here, I can do multiple functions with my search results. I can save or tag these queries so I can come back later. I can copy these into a folder or I can straightaway export. I'd also like to point out, before I go too much further, we have within owner, we have something called smart alerts. Now as your in your data continues to, to be built and your index continues to be built and data is ingested into the tool, I can apply if and then statements. This becomes massively useful at the onset of investigations where I'm trying to identify data really quickly. For example, if I work at a fintech company and I know I'm I'm, being regulated by, for example, the FCA, I could have certain words and certain phrases, that if they are met within Slack conversations or emails, I need to notify, my investigations team that there could be a potential, action happening, and they may need to, preserve this data and folder it away for future regulatory action. Going back into my my areas, you can see under my cloud data sources project, I have different review, folders. Folders are a really useful way within ONA to segregate data, and let them, and let other people access it. I can always do a preliminary review or a sample to make sure that what I'm going to then, and investigate is relevant, which leads me on to the tight integration we have with Logikal. Once I've identified my my population within Ona, I can promote this data into Logikal ready to use all the review features and functionality. Owner helps alleviate IT pain. It helps push this, this collection and responsibility onto the actual teams doing the investigation. They understand the scope. They understand what data is relevant and what's not relevant, leaving IT resources to conduct their day jobs. Once I've identified my data, I can push this into Logical. Logical, as we've talked about before, is a wonderful tool for investigations. I can simply search using multiple different searching methodologies, whichever one suits you and suits your team. I can easily see documents. I can review documents. I can collaborate with team members, and I can make sure that once I need to download data or export data for the investigation, I have an easy methodology to do so. Pushing data from owner into logical. Once the data has been transferred, which is incredibly quick, I can move into my search functionality. Now in searching within owner, I have three main areas to do so. So searching within logical. Sorry. Firstly, we have our, my my my search bar. I can type in a simple keyword, for example, golf, and see what appears below. I can enhance that with my search builder. Now my search builder, I can use easy metadata that has been exported via processing. Sample file name. And continue my searching methodology there. I can add Boolean operators. I can add, different ands, ors, brackets to make the search incredibly complex. And finally, I can also do keyword selection over bulk. Again, for our investigation, I've identified specific keywords within owner. So this can be a more surgical, like, a scalpel approach rather than a all inclusive identification of population. And finally, to get a more comprehensive view of my data, I can use my carousel to filter down to identify pockets of data that are relevant to specific parts of my investigation. Maybe I have a team looking into emails and another team looking into Slack. Well, easily, I can identify by my document type, emails, or messages. During processing and upload, we go through a stage of auto tagging so we can identify PII on the onset. We also email Fred so that I can reduce my review population and only look at the most inclusive emails and not emails that have been sent to, from, to, from, to, from building up that chain. Scrolling further across, I come to my email, domains. Maybe I'm now specifically looking into a conversation between two people. And identifying those conversations is incredibly quick. So here I can see two people from Cayman to Kay's Law, and I have those 78 documents ready, ready below, ready for review. Jumping into documents themselves, I can now see, for example, I have an an an email, a PDF representation of the email ready for review. My tagging profile allows me to easy classify these documents based upon are they relevant, irrelevant, privilege, etc. For my review. I can see similar docs. If I identify a really hot document, I can see the similarities or what other documents are also talking about similar themes. Really important for investigations when you're trying to work out the wide scale, effect or what other things have similar content. I also want to highlight highlight that it looks like we have spelling mistakes within this document. If I'm in Microsoft Word, I'll see squiggly lines if there's spelling mistakes or grammatical errors. Well, in Logical, we like to auto identify PII. This becomes incredibly important for investigations where you then need to disclose but withhold PII, or in order to not, come under the wrath of the GDPR. And Logikol helps massively here. Once we've identified relevant material, the next step is redactions or making sure we have a privilege review. Now Logical can do multiple steps. I can redact all of my PII with one fell swoop. And as you can see, I've redacted addresses, email addresses, names, and phone numbers whilst keeping the relevant material ready for review. I can go a step further, and now my lawyers and attorneys, can go and actually do a genuine privilege review. Whilst 90% of the the PII review has already been done, saving you time and legal costs. Now as I come forward and identify these, these these these, privileged terms, I can use a thing called bulk redaction, where I can redact over a population. Similar to keywords, I can come into here and type those in, giving me real time results of what my action's going to happen. I can also use patterns. So identifying different patterns, different numbers, and and therefore expanding what I want within my bulk redaction. Once I've identified my population that's relevant for my review, getting data out of Logical is as easy as getting data in. In our downloads function, I can follow a simple wizard that will identify, all my relevant documents via my saved searches. I also have a massive warning if anything has been tagged privileged, thus making sure we help you within your QC. If those documents are tagged privileged, you can simply go back to your safe search and highlight those using our filters really, really quickly. I can templatize. So if you have multiple different investigations or you're regulate reporting back to a a regulatory, body, you can create templates so you don't have to do these on the fly every time. Load files, I can, add different load file features. Again, these can be fully templatized. And finally, I can identify images and native and text options. Before I download the, the the the production, I get a download summary. I get something to make sure I know what exactly what is going out of my system. A great QC method because we're also split down via tags. Thus begins another issue within investigations. How do I get data to opposing counsel, to the data subjects themselves, to the person that's requesting this data and therefore, meriting it? Many solutions stop here, and I can stop I can go from downloading the data myself, emailing it across, or uploading to an FTP site, which adds an a level of administrative burden. Logical solves this with our secure share. I can add an email address a link will go to, included in a message to say what they are receiving. This link will expire after a certain amount of time, and it will also audit how much, you are going to sorry. It will also audit so you can see when someone has accessed the link and download it, thus giving your legal team reassurance and audit accountability. Hopefully, during that presentation, you've seen how easy it is to, to to use logical and owner in combined within your within your, your workflow. Daniel, back to you for the for the PowerPoint. Thanks, Andrew. So just to summarize. Right? So we have seen ONA, and that's basically making connections to all your data repositories like email, Teams, Slack. It's collecting all the data, making it searchable for you so you can identify quickly relevant documents based on, let's say, person names or keywords that you want to use, and then you promote the data to Logical to do your final review, do the redactions, and do all the work which you want to do with your investigative team on that data. Right? Absolutely. Absolutely. And what we will do, because this is the first webinar in one of these, in this series, we will dive more into detail in the individual projects in, follow-up webinars that, Andrew and I will host in the coming months, so watch out for our event calendar. So let's go back and go over a few of the use cases where this process is being used. So first of all, one of the use cases we see where this solution is used for often is, let's say, misconduct and HR investigations. Like Andrew already showed you, for example, in, in the logical software, it's very easy to select and find the data of the communication between two people. Just by selecting their names, you can find their, email messages, their chat messages. All that information can be easily identified between two people. So let's say if there is a complaint about workplace harassment, then it's easy to identify the employee files and the potential person who's harassing. And by doing that, you quickly identify the proper documents to investigate. So with ONA, you can collect all the relevant messages. And, what many organizations do is that ONA already keeps a copy of lots of the data to make sure that it's instantly accessible, if you don't have waiting times to start your investigation. And then with Logical, you can quickly filter, and review the conversations between certain individuals within your organizations. I think it's really important to mention the, the the the speed at which you can get data and start investigating with Ono and Logical. Now misconduct and HR investigations are incredibly troubling for the person who is, who has has brought the claim to light. They don't want to be waiting on IC, to fulfill their backlog of collections, to go out to different, providers as well. You need to investigate these with the absolute, speed and integrity that you need to do to make sure your workspace, one runs efficiently. Yeah. And I also think, like, we you showed in Logical, that's really easy to use. So also, let's say, people that don't have their investigation, don't do investigations all the time. They can easily, leverage the logical system with little training to get started and help with the investigation. Absolutely. Yeah another one, which you see a lot is of course the fraud and financial misconduct investigations, internal audits, something that Andrew already showed with in ONA with the smart alerts that for specific keywords, you can be flagged and be prompted for certain communication or certain data that you will find in documents, which will help you to quickly respond to those situations. And if needed, of course, you can then leverage that information in Logical to dive deeper into these documents and also share these documents with your other, investigators. I think also here I think one of the challenges here is, also recordings, phone recordings, Zoom and team recordings, especially communication with clients, especially in financial institutions that data is stored and is available, and may contain, let's say, the information that you need for your investigation. Also, Logical helps you with that. The, Logical has an option to transcribe all audio and video so that you can easily search it and also, of course, review the data within Watchcall. Another use case, data leaks and insider threat investigations. I know of one of our clients that's actually actively doing this. For example, when employees are departing that they will scan their mailboxes if there's no data leakage, for example, that people don't send any potential confidential information to, for example, their own email addresses. And I know, of course, that there is, many organizations have data leakage prevention tools in place, to prevent all that. But, yeah, in many cases, or in some cases, it might be useful to have, let's say, additional investigation on, an employee that is departing. Adding on to that, owner has a great way of being able to, preserve and archive, and off board employees really easily so that you can use them for, use the data for any regulatory requirements later on, which massively helps with this element here. How do you make sure that when as a comp as a employee is leaving, they're leaving compliantly. Yeah. Especially in cases where, let's say, employees are not departing, let's say, out of, completely free will because of a new challenge, but there has been a conflict. And in those situations, it's definitely helpful to make sure that, your data is secure and is not leaked. Absolutely. And one other one. Yeah. The the regulators that we have in the various countries, requesting information, so regulatory and compliance investigations. Let's say a regulator requests certain records from a company. Yeah, That can be challenging. Where is your data? Do you have the data accessible right away? But also very important that sometimes this data that you are about to disclose to a regulator that you need to be able to also redact the sensitive data in that. And that's also where logical again comes in that it can ultimately flag and redact sensitive data. Absolutely. And, I think one of the other things here is is is is just the large data footprint that many companies have. Being able to search across everything very quickly within owner with one syntax means that, again, we'll be able to respond to the regulatory request much quicker in a much more efficient way. And like you say, Logical helps that with the with the compliance piece, making sure that what's leaving your, your company is, meets your compliance name. Your your compliance team can come in and make sure that everything's been sanitized effectively and efficiently, and and therefore you're not having the data leak in almost almost intentionally just by negligence. Yeah. Imagine that you have to do, let's say, a search separately, first in Slack, then in the email boxes of several people, and then in the SharePoint of certain people, and then also in the the Teams chats, for example. Yeah. That will take a very long time to complete that, whereas with Ona, with one single search, you can access all the, the sources. So those are a couple of the the use cases, where this modern solution is being used for internal investigations. It's now time for our q and a, so you can fill out your questions in the Q and A section on your screen. Let's move over to the Q and A. Awesome. So let's see if there are any questions. One question that I see, Andrew, can you tell me about volume of data that ONA or Logical can handle? Really good question. Yeah. So ONA can handle terabytes and terabytes and terabytes of data. We can mirror, large, very, very large, Slack instances, Google Workspaces. We can we can mirror business units. And one of the key parts of ONA is being able to search on multiple different large data sources quickly. Being able to then call and filter out some of the noise to promote what is truly relevant or worth investigating into logical, after. So being able to use owner as that preliminary calling, helps a huge amount with, with data volumes as well. And for logical? Is that Logical, again, we can have we can have massive litigation. We can have tiny investigations. It's, it's truly a bit of a chameleon in that sense. Yeah, you can it will grow exponentially with with your, your data sizes, we can have multiple teams reviewing platform and within the platform, so you can hit a huge amount of data in it. Yeah. Maybe this is also a good moment to, let everybody know that we will host another webinar in a few weeks from now about a collection of proportionally collect data for your eDiscovery cases. So then we will address this topic in more detail. Another question that I see is, how does how long does it take before I can get started? So if I have a case, I would like to start soon. How fast can that Well, logical logical, you can be up and running in a matter of hours. I used to think it's also a tool which you can become an expert in hours rather than years. So you can if we you went on and requested a logical instance, we could get you set up, set up very quickly. Tomorrow morning, you'll be loading data in, and tomorrow afternoon, you'll be an expert. So you can very quickly get up to speed. Owner, is slightly different depending on the approach you want to take, we can have tools archiving constantly so you can be almost near time looking at your your live data. We can have archives that are indexes that are slowly incremental sorry. Quickly incrementally, building. So you are up to speed and you are collecting the most up to date data as well. Yeah. And I think that's also something that is important to understand is how can how fast can you start an investigation? It's actually how fast can you get to the data that you need to collect. So if you need to get the data from your client first, wait for an export, or maybe you can collect directly from their system. Not sure how you can make arrangements on that, with your client, but those are all, variables that have to be taken into account. But setting up a project in Logikol, we can do that within an hour, I think, or two weeks. Oh, absolutely. Yeah. I don't see any other questions popping up. So I think we're good. Andrew, thanks for You know. Popping out on this webinar. And as mentioned before, we will continue with other webinars about internal investigations. It will be posted on our website as well, so keep an eye on that. And thanks everybody for staying on, and I wish everybody a very nice rest of their day. Thank you. Thanks, El. Bye.