Weekly Google Vault legal hold health check to Slack

Every Monday at 8:00am ET, run an agent that audits our Google Vault footprint and posts a legal hold health report to our legal and compliance Slack channel.

Start by calling List Matters in Google Vault with state=OPEN to enumerate every active matter. For each open matter, call List Holds to enumerate the holds attached to that matter, and List Exports to see what data extractions are pending or available for download.

For the highest-risk matters (matters with the largest number of holds, matters whose names suggest active litigation or regulatory response, or matters flagged as high priority in prior reports), call List Hold Accounts on their holds so we can report the exact number of custodians whose data is being preserved. You do not need to enumerate accounts on every hold. Just the ones that matter most this week.

Then produce a written summary and post it to Slack using Send a Message via the Slack Bot integration. The report should cover:

• Total open matters and total active holds across the org, plus how many accounts each of the top holds preserves.

• Exports still available for download versus exports nearing expiry. Google Vault deletes export files 15 days after they complete, so flag any export whose completion date is more than 10 days ago as at risk. Include the matter name and export name so legal can go grab it.

• Matters with no visible activity in the past 90 days (no new holds, no new exports) as candidates for closure. Compliance best practice is a quarterly hold review, so this catches matters that may have gone dormant.

• Anomalies worth a human glance: holds with zero accounts attached, matters with many holds but no exports, exports stuck in an in-progress state, or any pattern that looks off compared to the previous week.

Format the Slack message using Slack mrkdwn: bold section headers using *asterisks*, matter names in bold, and short bullet lists under each section. Keep the whole message scannable in under 30 seconds. Start with a one-line headline ("Vault weekly health check for the week of ...") and end with a short "what to look at first" call to action so the legal team knows where to spend their attention.

This gives our legal and compliance team a defensible weekly touchpoint on the hold register without anyone having to open the Vault UI.