Data SAR Request G-Suite How do you do it?

[djm968]

Hi all, got me stumped this one.

 

I've had a data SAR request and some of the data sits in Google (The School was migrated to Office 365) Office 365 data isn't a problem but i'm not a Google person and completely stumped, how do I get the required SAR data out of Google? I do have access to the Google Admin Consol

 

Thanks.

[jthompson]

Google Vault? It'll allow you to run searches across users' email, chat and drive data.

[djm968]

Google Vault? It'll allow you to run searches across users' email, chat and drive data.

 

Tried Vault but I get a Bad request error, the URL is https://ediscovery.google.com/discovery/u/0/

[Ditto]

Tried Vault but I get a Bad request error, the URL is https://ediscovery.google.com/discovery/u/0/

 

Are you a Super Admin? Is Vault turned on. If yes, check retention period. Another area to also check in the console is Reports -> Audit. For an ICO complaint invest the email log search proved useful, but also Drive.