Hanzo Illuminate User Guide

All the information you need to get started using Hanzo Illuminate.


Hanzo Illuminate is unique in its ability to rapidly identify relevant content through its analysis of Slack conversations or Google Workspace content, and allow for precise preservation of relevant material based on matter scope.  As custodians or matter scope evolves over time, the application instantly responds with expanded preservation or disposing of unneeded content within the Hanzo discovery repository. Similarly, as custodians interact with each application every day, added and edited data, deletions, and participation in new conversation channels are automatically accounted for in the scope of preservation.  The View Discovery portal provides for rapid search and analysis of content, facilitating efficient data culling to further reduce data volumes before exporting in review-ready format.

System Requirements

Hanzo is a SaaS application whereby the entire user interface experience is controlled via a web browser. System requires are listed below.

Operating Systems: Microsoft®Windows® or Apple macOS®
Supported Browsers: Google Chrome®, Apple Safari®
Unofficially supported: Browsers: Microsoft®Edge®, Firefox®

Required Disk Space: Dependent upon download needs
CSV reader: Most Hanzo Illuminate reports are delivered in a CSV format. There are multiple readers capable of viewing CSV files including Textpad or Wordpad for Windows®, Excel®, or Notepad++. Apple users can work with built-in text editors or applications such as Numbers®.
Decompression Software: Hanzo exports are written using the 7zip compression format (7z). PC users should download 7zip from 7-zip.org for their appropriate OS. Hanzo recommends Keka for Mac users which can be downloaded from keka.io or from the Mac App Store.

Hanzo Illuminate Time Zones

Hanzo utilizes two different time zones within Hanzo Illuminate. All user interface interactions including date field searching and displays are programmed to use your browser’s time zone. This helps you match information you may be comparing within Slack or Google Workspace to what you are seeing in the Hanzo Illuminate.
A second time known as UTC (Coordinated Universal Time) is used on CSV reports and on legal exports. Using UTC on exports provides a path for external systems to convert dates to a desired timezone. For example, data collected from custodians in EST may need to be reviewed in Central Standard Time (CST) with the desire to have the dates converted. Most review systems can convert dates automatically from UTC to the desired timezone. UTC provides a stable, universal time in which to convert to final timezone standards.

Slack Legal Holds

For Hanzo clients who utilize Hanzo’s PiP (Preserve in Place), it is important for you to realize what data is preserved within Slack and what is not. The list below details what to expect with Slack Legal Holds.

  • Messages and files sent by all members in a conversation will be saved regardless of Slack retention settings or if members edit or delete any content.

  • If a channel included as part of a legal hold is deleted, message and file data won’t be saved.

  • Messages and files from Slack Connect channels or direct messages are not included as part of a legal hold.

Slack Plans Summary:

Enterprise Grid - Discovery API and Legal Holds API
Enterprise Select - unlisted plan, has the Discovery API, but does NOT have the Legal Holds API.
Business Plus - no Discovery API, no Legal Holds API.


Google Workspace Legal Holds

For Hanzo clients who work with Gmail and GDrive data sources, it is important for you to realize what data is preserved and within Google Workspace. Below is a list of the Google Workspace rules.

  • Hanzo utilizes Google Vault for legal holds and data collection

  • Gmail/GDrive custodians are placed on legal hold using a Google Vault name starting with a Hanzo prefix of HNZ - <Matter Name>

  • GDrive legal holds contain both the custodian drive AND shared drive data for the user.

  • Data collection is initiated via a Google Vault API collection request.

Custodian versus non-custodian data sources

Certain data sources within Hanzo are considered “Custodian” sources. These sources include Slack, MS Teams, Google Mail, Google Drive, Box and others. Users will typically select collections based on users (members) or in legal technology terms, “Custodians”. Other data sources such as Confluence, Jira, Asana or others are considered non-custodian data sources (NCDS). These data sources are normally more broadly scoped to collect items such as Confluence Spaces, Jira Projects, Asana Projects, etc which are not directly linked to a single individual, rather a large group of collaborators.

Example of Hanzo Data Source Management Page

Table of Contents