SPECIALTY COURSE · RELEASING NOVEMBER 2026
Cloud for Legal and E-Discovery
Chain of custody, privilege and client confidentiality when matter data sits in someone else's data center.
All coursesOpens November 2026
You will get the most from it if you are…
- Law firm IT and security teams who run or choose the cloud services that hold client matters
- Litigation support and e-discovery staff who preserve, collect, review and produce electronically stored information
- In-house legal operations teams who set outside counsel guidelines and manage legal technology vendors
- Consultants who help firms and legal departments prepare for client audits, discovery and vendor decisions
What it covers.
- 01The duties that reach the cloudCompetence, reasonable efforts and supervision, and why they follow matter data into a provider's data center
- 02The client as the practical regulatorOutside counsel guidelines and security questionnaires, answered from one record
- 03E-discovery in the cloudPreservation, legal holds, proportionality and collection when the data lives in cloud services
- 04Chain of custodyDefensible collection: who touched the data, what was done, and how a copy is shown to match
- 05Privilege, confidentiality and where data sitsInadvertent disclosure, Rule 502 orders, data location and cross-border access
- 06Generative AI, vendors and exitClient data in AI tools, choosing and contracting providers, and leaving them cleanly
9 short lessons, part by part.
The duties that reach the cloud
- Matter data in someone else's data center
- Say who this course is for, what it builds on from the Foundations course, and what it does not do
- Name the three duties that follow matter data into a cloud service: confidentiality, preservation and privilege
- Describe the fictional firm used throughout the course and the questions it must answer about its cloud services
Job aid: Matter data in the cloud: the first-day checklist
- Competence, reasonable efforts and supervision
- Explain the technology language in the competence rule and the reasonable efforts standard in the confidentiality rule, with its factors
- Describe how the supervision rules reach cloud providers, and the factors that shape what is reasonable
- Summarize what ABA Formal Opinions 477R, 483 and 498 add, and where to read each in full
Job aid: The duties that reach the cloud: a one-page guide
The client as the practical regulator
- Outside counsel guidelines and security questionnaires
- Explain why client guidelines and questionnaires act as the practical regulator for a law firm's cloud services
- Answer a questionnaire from one control record and its evidence, rather than drafting fresh answers each time
- Recognize the commitments in a questionnaire answer that need a lawyer's or a decision maker's approval
Job aid: Answering a client's security questionnaire: a one-page guide
E-discovery in the cloud
- Preservation and legal holds in cloud services
- Explain when the duty to preserve arises and what Rule 37(e) asks of a party that loses electronically stored information
- Identify the features of cloud services that work against preservation, such as retention policies, auto-delete, user deletion and account removal
- Prepare a hold runbook that maps each cloud service to its preservation method, owner and evidence
Job aid: Legal holds in cloud services: a one-page runbook guide
- Proportionality, collection and production
- Explain the proportionality factors in Rule 26(b)(1) and how the Sedona Principles apply them to electronically stored information
- Compare the common ways of collecting from cloud services and what each preserves or loses
- Prepare the cloud facts a legal team needs for the early discovery conference and for choosing a form of production
Job aid: Cloud collection and the early conference: a one-page guide
Chain of custody
- Defensible collection and chain of custody
- Describe the elements of a chain of custody record and why each one matters if a collection is challenged
- Explain how hash values and the provider's own logs support the integrity of a cloud collection, including under Federal Rule of Evidence 902(14)
- Identify the cloud-specific gaps in custody, such as provider-side steps, multi-tenancy and mutable sources, and how to record them honestly
Job aid: Chain of custody for cloud collections: a one-page form guide
Privilege, confidentiality and where data sits
- Privilege, inadvertent disclosure and data location
- Explain the three conditions of Federal Rule of Evidence 502(b), the clawback procedure in Rule 26(b)(5)(B), and why parties seek a 502(d) order
- Describe the cloud settings and review practices that count as reasonable precautions against inadvertent disclosure
- Explain why storage location does not by itself settle who can compel access to data, with reference to the CLOUD Act and cross-border transfer rules
Job aid: Privilege protection and data location: a one-page guide
Generative AI, vendors and exit
- Generative AI tools and client data
- Summarize what ABA Formal Opinion 512 says about competence, confidentiality, communication, supervision and fees when lawyers use generative AI
- Identify the facts about a generative AI tool that the firm needs before client information goes in: retention, training use, access, location and terms
- Help turn a firm's AI policy and its clients' guidelines into an approved tools list, configurations and records
Job aid: Generative AI tools and client data: a one-page review guide
- Vendor selection, contracts and exit
- Apply the vendor due diligence factors from the ABA's opinions and Rule 5.3 to choosing a cloud or e-discovery provider
- List the contract terms that carry a firm's duties into a provider relationship, from confidentiality and breach notice to legal process and data return
- Plan matter closure and provider exit so that held data is kept, other data is returned or deleted, and the record shows it
Job aid: Providers from selection to exit: a one-page guide
How it is delivered.
- Narrated lessons in short parts you can take one at a time
- A one-page job aid for each lesson
- A short check at the end of each lesson
- A lens for your role: security, cloud architecture or compliance
Narration is AI-generated (OpenAI's Cedar voice). The courses teach preparation and method; they certify no one, grant no approval or authorization, and do not stand in for your assessor, auditor or regulator.