Skip to content

Definitions and comparisons

Legal hold vs retention policy: can you license data under a hold?

By SourceX Editorial · Reviewed by Noah Loul ·

Short answer

A legal hold overrides a retention policy: the policy is a routine schedule for keeping and deleting records, while a hold is a duty to preserve specific records once litigation, an investigation or an audit is reasonably anticipated. Records under a hold can sometimes be licensed as prepared copies, but only with litigation counsel's sign-off and originals left untouched.

Key takeaways

  • A retention policy sets routine keep-and-delete rules; a legal hold suspends deletion for specific matters, custodians and systems.
  • When the two conflict, the hold wins until counsel releases it.
  • Licensing usually works on prepared copies, which does not by itself breach a hold, but every step must leave originals unaltered.
  • Records about the dispute itself, privileged communications and documents received under protective orders should stay out of any license.
  • Records kept only because of a hold are a weak basis for licensing, because the business reason to keep them has already expired.

A retention policy is a company's standing schedule for how long each record type is kept and when it is deleted. A legal hold is a specific instruction to preserve records, overriding that schedule, because the company reasonably anticipates litigation, a government investigation or an audit. The policy is routine; the hold is triggered by events.

When the two conflict, the hold wins. Automatic deletion jobs, mailbox purges, helpdesk retention settings and system retirements must pause for covered records until counsel lifts the hold.

What is the difference between a legal hold and a retention policy?
DimensionRetention policyLegal hold
PurposeKeep records as long as needed, then dispose of themPreserve potential evidence
TriggerAdopted as standing policyLitigation, investigation or audit reasonably anticipated
ScopeRecord types across the companyNamed matters, custodians, systems and date ranges
OwnerRecords, legal or compliance teamLitigation counsel
DurationSet periods per record typeUntil counsel releases the hold
Effect on deletionSchedules deletionSuspends deletion for covered records
Licensing implicationDefines which records still existRestricts how covered records may be handled

Can you license data that is under a hold?#

Licensing data under a hold is sometimes possible, because licensing usually works on prepared copies rather than originals, but it needs litigation counsel's explicit sign-off. A hold requires covered records to be preserved in their original form; it does not automatically forbid copying them for another legitimate purpose.

The risk lies in the process rather than the idea. Exports that alter metadata, preparation run on live systems instead of copies, or a migration that deletes the source after extraction can all damage preserved evidence. Counsel will also weigh whether licensing records related to the dispute could look like disclosure of evidence or put privilege at risk.

Which records should stay out regardless of hold status#

Some categories should stay out of a license whatever the hold status, because the risk falls on litigation strategy and third-party rights rather than on preservation alone. The table sets out common situations and the usual treatment.

The categories overlap in practice. A project manager's mailbox can hold privileged advice, documents produced by the other side and ordinary operating correspondence in the same folder, so exclusion usually happens at the custodian and date level first, then more finely if the rest is wanted.

Which records should stay out regardless of hold status
Record situationUsual treatmentReason
Records about the matter under holdExcludeThey are the evidence; licensing them invites disputes about disclosure and use
Communications with counsel about the matterExcludeSharing can put privilege at risk
Documents received from other parties in discoveryExcludeProtective orders usually limit their use to the case
Covered records unrelated to the dispute's substanceCopy-based licensing only with counsel sign-offOriginals stay preserved and untouched
Records kept only because of a hold, past their retention dateUsually excludeThe business reason to keep them has expired
Records outside any hold and within retentionNormal rights and privacy reviewNo preservation conflict

Why held records past their retention date are awkward#

Records kept only because a hold suspended their deletion are awkward to license because the company's own policy says they should already be gone. They exist for one purpose, preserving evidence, and using them for another can conflict with retention commitments made to customers, employees and regulators.

When the hold lifts, the schedule resumes and those records are normally deleted. Some companies ask whether de-identified copies could be kept for licensing instead. That question turns on the same tests that apply to any record past retention: whether the de-identification holds, whether contracts or notices promised deletion, and whether counsel agrees. Decide it deliberately, not as a side effect of the hold.

How to license around an active hold#

Licensing around an active hold works when the hold and the license run as separate tracks with a shared checkpoint. The steps below keep preservation intact while the rest of the archive moves forward.

A buyer usually needs to know which records are excluded, not the details of the matter behind the exclusion. Describe exclusions by system, custodian and date range.

  • Get the hold register from litigation counsel: matters, custodians, systems and date ranges.
  • Remove covered custodians' mailboxes and matter folders for the covered dates from the first scope.
  • Work only on exported copies; never run preparation or deletion on source systems under hold.
  • Record a chain of custody for each export: who ran it, when, from which system and with what settings.
  • Have litigation counsel sign off on the final scope before any sample or delivery.
  • Pause any system retirement that would delete held originals after extraction.

Who decides what when a hold and a license overlap#

When a hold and a license overlap, litigation counsel decides what must be preserved, and the business decides what it wants to license from what remains. Keeping those roles separate avoids the most common failure: a licensing project quietly making preservation decisions.

In practice the general counsel or outside litigation counsel owns the hold register and approves scope, IT owns the exports and the chain of custody, and the executive sponsor of the license owns the commercial decision. If those three meet once before scoping and again before release, most conflicts surface while they are still cheap to fix.

Illustrative: a mechanical contractor with one disputed project#

Illustrative: a fictional mechanical contractor runs service and installation work in ServiceTitan, keeps project files in Procore and uses company email. A customer dispute over a large installation leads counsel to issue a hold covering that project's records and the mailboxes of the project manager, superintendent and estimator for the relevant period.

At the same time, the company is preparing to license years of service records: calls, estimates, work orders, technician notes and callbacks. Counsel and the COO agree that the disputed project and the covered mailboxes are out of scope entirely. Service records unrelated to the project are licensed from exported copies, with customer names and addresses removed.

A planned retirement of an old email archive is postponed until the hold lifts, because it contains covered messages. The license proceeds on the service records, and the exclusions are documented by system and date range without describing the dispute.

How SourceX handles records under a hold#

SourceX asks about holds, retention schedules and pending matters during the Rights step of the SourceX five-step transaction, and works only from exports the supplier provides, so preservation of originals stays with the supplier and its counsel.

The SourceX Evidence Packet records provenance and release authorization for each package, including the systems and date ranges covered, which helps counsel confirm that nothing under hold was included without approval.

Frequently asked questions

Does licensing a copy of held records count as spoliation?

Spoliation generally concerns destroying or altering evidence. Making a prepared copy while preserving originals does not by itself destroy anything, but careless exports and preparation on live systems can. Counsel should approve the process, and the safer course is to exclude the matter's records entirely.

Can a hold reach records stored in SaaS tools?

Yes. Helpdesks, CRMs and project platforms are often in scope. Many SaaS tools apply their own retention settings or delete data when a subscription ends, so suspend automatic deletion, check plan retention limits and confirm exports before relying on the vendor to keep anything.

What if we plan to retire a system during a hold?

Retiring a system that holds covered records generally means preserving those records first, through a defensible export or an archive the hold can reach. Counsel should approve the method. The retirement can then proceed, and the same export may later support licensing of records outside the hold.

Does a regulatory inquiry or audit trigger a hold?

It can. Holds are typically triggered when litigation, a government investigation or an audit is reasonably anticipated, not only when a lawsuit is filed. Counsel decides when the duty begins and what it covers, and the scope can widen as the matter develops.

Should the retention schedule change to support licensing?

Retention schedules should reflect legal requirements and genuine business needs. Some companies decide that de-identified operating records have a continuing business use, but that belongs in a reviewed policy update, not in a workaround during a hold.

Related resources

See if your company qualifies

A short company assessment. No data uploads are needed.

See if you qualify