What Is ESI? A Practical Guide for Legal Teams
by Justin Smith
The modern discovery process no longer starts with a physical search; it begins with a rush of digital data. In a single minute, the global workforce generates millions of emails, Slack messages, and cloud-based file edits. This relentless surge of data has fundamentally shifted the legal landscape, moving the smoking gun from the file cabinet to the cloud.
Today, the challenge for legal teams is not just finding the needle in the haystack—it is managing a haystack that grows by several gigabytes every hour. To navigate this complexity, cooperation between parties and a mastery of electronically stored information (ESI) are no longer optional; they are the bedrock of a defensible legal strategy.
ESI is any electronic information that is created, manipulated, communicated, stored, and best utilized in a digital format. As organizations continue moving their operations almost entirely to digital-first environments, ESI has become the heart of modern litigation and investigations. Understanding its nuances is a fundamental requirement for legal professionals to fulfill their duty of competence and handle discovery requests with ease.
Key Takeaways for Legal Teams
The Data Deluge. ESI includes everything from emails and PDFs to ephemeral chat reactions, Internet of Things sensor data, and social media footprints.
Cooperation Is Efficiency. Early collaboration on ESI protocols prevents discovery about discovery, reducing costs and the need for court intervention.
The Power of Metadata. Unlike paper documents, ESI contains data about data, providing hidden context like authorship, timestamps, and GPS coordinates.
Strict Defensibility. Failure to preserve relevant ESI once litigation is reasonably anticipated can lead to severe sanctions, including adverse inference instructions.
ESI Protocols Save Time. Proactive planning through ESI protocols during the meet and confer phase prevents technical disputes and keeps costs predictable.
What Does ESI Mean in Practice?
While the term might sound technical, the legal definition of ESI is intentionally broad to keep pace with evolving technology.
While the Federal Rules of Civil Procedure (FRCP) don’t explicitly define ESI, FRCP 34(a)(1)(A) governs the production of documents, and states that a party may serve a request to produce “any designated documents or electronically stored information—including writings, drawings, graphs, charts, photographs, sound recordings, images, and other data or data compilations—stored in any medium from which information can be obtained either directly or, if necessary, after translation by the responding party into a reasonably usable form.”
In practice, this means that if information exists on a chip, a hard drive, or in the cloud, it is classified as ESI. For legal teams, the transition from physical paper to digital data has fundamentally transformed the nature of evidence, driven by both its overwhelming volume and its inherent persistence. While a single gigabyte of data can contain as many as 75,000 pages of text, modern discovery often spans terabytes, making automated review tools a necessity rather than a luxury. Moreover, digital information is notoriously difficult to permanently erase; even when a user clears their archives, ESI often leaves a lasting trail in slack space, system backups, or server logs, providing a level of evidentiary longevity that traditional paper files cannot match.
Furthermore, legal teams must distinguish between the content (the text of an email) and the metadata (the hidden information about that email). In many cases, the metadata—such as proving a document was accessed after a specific date—is more valuable than the document’s content itself.
ESI in Litigation
In the context of the modern litigation process, ESI is the primary driver of the discovery phase.
Under FRCP 26(f), parties are required to meet and confer early in the case to discuss the preservation and production of ESI. This conference is where legal teams must address the technical realities of the case, such as which data sources are relevant, how they will be searched, and what formats will be used for production. Because ESI is so pervasive, these discussions often dictate the timeline and budget of the entire legal matter.
ESI has also introduced the critical concept of proportionality, which has become a central discussion in the ediscovery process. Given that the volume of ESI can be astronomical, legal teams must be prepared to argue in court why certain data sources—like legacy backup tapes or fragmented metadata—are either central to the case or too costly to retrieve. Successfully navigating ESI in litigation requires a balance between aggressive advocacy for relevant facts and a pragmatic approach to the technical limitations of digital storage.
Common Types of Electronically Stored Information
As technology evolves, the list of ESI types grows. Legal teams must be prepared to identify and preserve data and relevant information across various categories.
1. Traditional Communication and Documents
Email and Attachments. Still the primary source of evidence. This includes the body of the email, header information (To/From/CC), and any attached files.
Business Documents. Electronic documents such as word documents, PDFs, presentations, and spreadsheets.
Databases. Structured data from CRM systems (like Salesforce) or financial software.
2. Modern Collaboration Tools
Chat and Instant Messaging. Platforms like Slack, Microsoft Teams, and WhatsApp. These are often ephemeral or highly informal, creating unique challenges for preservation.
Video Conferencing. Recordings and transcripts from Zoom, Webex, or Teams meetings.
Modern Attachments (Linked Content). A growing area of dispute involves whether hyperlinked files—files shared via a Google Drive or SharePoint link rather than a traditional attachment—should be treated as modern attachments. Courts are increasingly treating these links as part of the document itself.
3. Mobile and Social Media
Mobile Device Data. SMS/MMS text messages, GPS location history, call logs, voicemail, and application-specific data.
Social Media. Public posts, private messages, and likes from platforms like LinkedIn, X (formerly Twitter), or Facebook.
4. Emerging Data Sources
Cloud-Stored Files. Data residing in Google Drive, Dropbox, or iCloud.
Internet of Things. Data from smart devices, wearable fitness trackers, or connected vehicles.
The volume and variety of these data types matter legally because they dictate the search strategies and technical tools required for a defensible discovery process. Collecting a Slack thread is vastly different from exporting an Outlook PST file; failing to account for these differences can lead to data gaps that opposing counsel may exploit.
Why ESI Matters in Litigation and Investigations
ESI is the single greatest factor influencing the cost, risk, and timeline of a legal matter.
1. Driving Cost and Complexity
The explosion of data means that manual review is no longer feasible. Organizations must invest in sophisticated ediscovery software to process, deduplicate, and analyze ESI. Without these tools, the cost of paying attorneys to review millions of documents would be prohibitive.
2. Defensibility and Sanctions
The duty of preservation of ESI begins as soon as litigation is reasonably anticipated. If a party fails to stop the routine deletion of emails or allows a key custodian to wipe their phone, they may face spoliation sanctions. Courts can issue adverse inference instructions, telling a jury to assume the lost evidence was harmful to the party that lost it.
3. Regulatory and Government Investigations
In the context of a Department of Justice or Securities and Exchange Commission investigation, the ability to produce specific ESI quickly is a sign of cooperation. Conversely, an inability to manage ESI can lead to increased scrutiny and harsher penalties.
4. The Privacy Paradox
As ESI is collected, it often contains sensitive or personally identifiable information, or data protected by regulations like GDPR or CCPA. Legal teams must balance their discovery obligations with privacy mandates, often requiring sophisticated redaction and data-minimization techniques before production.
How ESI Fits Into the Ediscovery Process
ESI is the raw material that travels through the Electronic Discovery Reference Model. Understanding this journey is essential for maintaining the chain of custody.
Identification. Determining which ESI is relevant and who the custodians (the people in control of that data) are.
Preservation. Issuing a legal hold or litigation hold to ensure that ESI is not altered or deleted.
Collection. Transferring ESI from its original location to a secure ediscovery platform. This must be done in a way that preserves metadata.
Processing. Reducing the data volume by removing duplicates (deduplication) and filtering by date or keyword.
Review and Analysis. Evaluating the ESI for relevance, privilege, and key themes.
Production. Delivering the ESI to the requesting party in the agreed-upon form of production (usually as load files that include text, images, and metadata).
Managing ESI well requires proactive planning. Waiting until a production deadline to realize that your data is in an unreadable format is a recipe for disaster.
From Understanding ESI to Defining an ESI Protocol
Understanding ESI is the foundation for formal agreements. Once a legal team understands the landscape of their ESI, the next step is to formalize how that data will be handled in a specific case. This is done through an ESI protocol.
An ESI protocol is a written agreement—often turned into a court order—that governs the technical details of discovery. It covers things like:
Which metadata fields will be produced.
How threaded conversations (like email chains) will be handled.
The file formats for production (e.g., Native files vs. TIFF images).
Procedures for handling inadvertently produced privileged information (Clawback agreements).
ESI protocols exist to provide a roadmap for the entire discovery process. By reaching an agreement early, parties can avoid discovery about discovery—expensive side-litigation over how the data was searched or produced.
Beyond Compliance: The Strategic Future of ESI
Mastering ESI is no longer a matter of technical compliance; it is the strategic differentiator that defines the modern litigator.
As the digital landscape continues to fragment into increasingly complex formats, the ability to harness this information will separate the teams that are buried by data from those that are empowered by it. The future of discovery lies in moving beyond mere collection toward a state where advanced analytical tools and generative AI act as the bridge between a mountain of raw data and a clear, actionable narrative.
By embracing these technological shifts, legal professionals don’t just solve the problem of discovery volume; they unlock a new standard of precision that fundamentally elevates the pursuit of truth in the digital age.
Justin Smith is a Senior Content Marketing Manager at Everlaw. He focuses on the ways AI is transforming the practice of law, the future of ediscovery, and how legal teams are adapting to a rapidly changing industry. See more articles from this author.