Legal document review is the process of examining documents and digital records to find material relevant to a lawsuit, investigation, or business transaction, while protecting privileged communications from disclosure. In federal litigation, discovery can involve millions of electronic files, and the review phase typically consumes the largest share of legal costs in a case. Getting it right determines whether privileged communications stay protected, whether a court imposes sanctions for missing evidence, and whether the legal team builds its case on solid ground.
When Document Review Happens
The most common trigger is litigation discovery. Under federal rules, each side can request relevant, non-privileged information from the other, and the scope extends to anything proportional to the needs of the case. Courts weigh factors like the amount in controversy, each party’s access to the information, and whether the cost of the review outweighs its likely benefit before allowing broad requests to proceed unchecked.1Legal Information Institute (LII). Federal Rules of Civil Procedure Rule 26 – Duty to Disclose; General Provisions Governing Discovery The review team sorts through everything collected to decide what must be handed over, what can be withheld as privileged, and what is simply irrelevant.
Corporate transactions drive a second category of review. Before a merger or acquisition closes, legal teams examine the target company’s contracts, financial records, internal communications, and governance documents to spot risks. A buried indemnification clause or an undisclosed lawsuit can reshape the economics of a deal, and that kind of problem only surfaces through careful review.
Government investigations and regulatory inquiries create a third category. When an agency requests records or a company launches an internal investigation into potential compliance failures, the review team must locate responsive documents while shielding privileged material. The stakes differ, but the mechanics are the same: collect, review, protect, and produce.
The Stages From Collection to Production
Reading documents is only the middle step of a longer sequence. Each stage feeds the next, and mistakes compound. Sloppy collection leads to incomplete review sets. Poor processing creates duplicates that waste reviewer time. Inconsistent coding forces expensive quality-control passes.
- Preservation. Once litigation is reasonably anticipated, the organization must issue a litigation hold, telling employees and IT teams to stop deleting potentially relevant files. Routine data destruction policies get suspended for anything that might be relevant. Failures here can trigger sanctions before the case even reaches review.
- Collection. Relevant data is gathered from email servers, cloud storage, laptops, phones, shared drives, and sometimes paper files. Forensic collection methods preserve metadata like creation dates and edit history, which matter for authentication later.
- Processing. Raw data is ingested into an e-discovery platform. The system removes exact duplicates, extracts text from images using optical character recognition, and indexes everything so reviewers can search the full dataset. Processing also strips out file types that clearly have no relevance, like system files.
- Review. Reviewers examine documents and code them against predefined criteria. This is the most labor-intensive and expensive stage.
- Production. Documents tagged as responsive and non-privileged are formatted according to the agreed-upon protocol and delivered to the requesting party. Production involves applying redactions, stamping documents with identifying numbers, and converting files to the required format.
Teams that run efficient reviews invest heavily in the early stages to keep the review stage manageable.
Who Does the Work
Large-scale reviews are rarely staffed by a single firm’s associates. The economics don’t work. Most sizable projects rely on contract attorneys hired for the engagement. These are licensed lawyers, often with subject-matter experience, brought on at hourly rates that typically range from roughly $25 to $75 per hour for standard relevance review, with specialized or foreign-language work commanding significantly more. Rates have largely flattened across geographic markets since remote review became standard.
A typical review team has layers. First-level reviewers handle the bulk coding, tagging each document for relevance and flagging potential privilege issues. Second-level or senior reviewers examine flagged documents more closely, making final privilege calls and resolving borderline coding decisions. A project manager coordinates workflow, tracks productivity metrics, and adjusts search parameters as patterns emerge. A supervising attorney from the law firm or legal department bears ultimate responsibility for the quality and defensibility of the review.
Paralegals and litigation support staff manage the technology platform, run searches, prepare privilege logs, and handle production formatting. On the largest matters, legal staffing firms supply dozens or even hundreds of contract reviewers who work in shifts to meet court-imposed deadlines.
How Reviewers Code Documents
When a reviewer opens a document on the review platform, they’re answering a series of structured questions. The most fundamental is relevance: does this document relate to the issues in the case? Beyond that, reviewers may tag documents by specific issue (breach of contract, knowledge of defect, executive communications) and flag anything that might be privileged or confidential.
Most projects run in multiple passes. In the first pass, reviewers sort documents into responsive, non-responsive, and needs-further-review categories. Documents that survive move to a second pass, where more experienced reviewers make privilege determinations and identify material requiring redaction. A quality-control pass follows, with senior reviewers sampling coded documents to check consistency and catch errors. If error rates exceed a preset threshold, batches get sent back for re-review.
The range of records that pass through this process is broad. Federal rules define discoverable material to include writings, drawings, charts, photographs, sound recordings, images, and any other data stored in a medium from which information can be retrieved.2Legal Information Institute (LII). Federal Rules of Civil Procedure Rule 34 – Producing Documents, Electronically Stored Information, and Tangible Things Email is the single largest category by volume, followed by instant messages, text messages, shared documents, spreadsheets, and presentations. Social media posts, voicemails, database records, and data from collaboration platforms like Slack or Teams have become routine review targets as workplace communication has fragmented.
Protecting Attorney-Client Privilege
Privilege is the highest-stakes part of document review. If a privileged communication gets produced to the other side, the sending party risks waiving privilege over that document and potentially over the entire subject matter the communication addressed. In fast-moving reviews involving millions of documents, accidental production is a constant threat.
When a party withholds documents as privileged, federal rules require it to describe the withheld items in enough detail for the other side to evaluate the claim, without revealing the protected content itself.1Legal Information Institute (LII). Federal Rules of Civil Procedure Rule 26 – Duty to Disclose; General Provisions Governing Discovery This takes the form of a privilege log, which typically lists the document’s date, author, recipients, general subject, and the basis for the claim. Building a defensible privilege log on a large case is painstaking work and one of the main reasons second-pass review exists as a separate stage.
The most important safety net for accidental disclosure is a clawback order under Federal Rule of Evidence 502(d). A federal court can order that privileged material disclosed during the litigation does not constitute a waiver, and that protection extends to every other federal and state proceeding as well.3Legal Information Institute (LII). Federal Rules of Evidence Rule 502 – Attorney-Client Privilege and Work Product; Limitations on Waiver Experienced litigators negotiate these orders early, often during the initial discovery conference where parties discuss how they will handle electronic records and privilege claims.
Even without a court order, federal rules provide a backstop: an inadvertent disclosure does not waive privilege if the holder took reasonable steps to prevent it and acted promptly to correct the error once discovered.3Legal Information Institute (LII). Federal Rules of Evidence Rule 502 – Attorney-Client Privilege and Work Product; Limitations on Waiver What counts as reasonable depends on the circumstances, but courts look at the size of the review, the procedures in place, and how quickly the team caught and addressed the mistake. A well-documented review protocol with clear privilege criteria and quality-control sampling goes a long way toward meeting that standard.
Preservation Duties and Spoliation Risk
The duty to preserve relevant documents kicks in the moment litigation is reasonably anticipated, not when the complaint is filed. Waiting for a formal lawsuit before issuing a hold is one of the most expensive mistakes an organization can make. The hold notice should go to every employee and department likely to have relevant material, it should explain what to preserve and why, and it should suspend any automatic deletion schedules for the relevant data.
When electronically stored information is lost because a party failed to take reasonable preservation steps, and the lost data can’t be recovered through other discovery, the court has several options. If the opposing party was prejudiced by the loss, the court can order remedial measures to address the harm. If the court finds that the party intentionally destroyed the evidence, the consequences escalate: the court may instruct the jury to presume the lost information was unfavorable, or in extreme cases, dismiss the action or enter a default judgment.4Legal Information Institute (LII). Federal Rules of Civil Procedure Rule 37 – Failure to Make Disclosures or to Cooperate in Discovery Courts reserve the harshest sanctions for parties that acted with intent to deprive the other side of evidence.
If the collection was incomplete because the hold was too narrow, reviewers can’t find what was never collected. And if a court later discovers that relevant data was destroyed after the hold should have been issued, no amount of thorough review will undo the damage.
Technology-Assisted Review and AI
Manually reading every document in a large case stopped being practical years ago. A complex commercial litigation can involve tens of millions of files. Technology-assisted review, commonly called TAR or predictive coding, uses machine learning to prioritize and categorize documents based on decisions made by human reviewers.
The basic concept: a senior reviewer codes a training set of documents as relevant or not relevant. The software learns from those decisions and scores the remaining documents by likely relevance. Reviewers focus their time on the documents the system flags as most likely relevant, and the system’s accuracy improves as it receives more human feedback. In 2012, a federal court became the first to formally approve the use of computer-assisted review, noting that it should be seriously considered in large-data cases where it could save significant legal fees.5Justia Law. Da Silva Moore v Publicis Groupe et al Courts have since treated TAR as a standard tool, holding it to the same defensibility standard as keyword searches or manual review rather than demanding additional proof of reliability.
Continuous active learning has largely replaced earlier fixed-training-set approaches. Every reviewer’s coding decisions feed back into the model in real time, continuously reranking the remaining documents, so the system adapts as the review progresses.
Generative AI is pushing document review further. Current tools do more than rank documents by relevance. They generate summaries of individual documents and entire case folders, flag inconsistencies across witness statements, and produce structured outputs like timelines and issue maps. A critical design principle for these tools is traceability: responsible systems link every assertion back to the source document, addressing the hallucination problems that plagued earlier models. These tools don’t replace human judgment on privilege calls or complex relevance questions, but they reduce the time reviewers spend getting oriented in a large dataset.
Cross-Border Data and Security
Document review in international matters runs into data privacy laws. The European Union’s General Data Protection Regulation restricts how personal data of individuals in the EU can be transferred and processed, and it does not carve out an exception for U.S. litigation discovery. An American company that collects employee emails from its London office for a U.S. lawsuit may find itself caught between a federal court’s production order and the GDPR’s transfer restrictions.
Limited exceptions exist. The GDPR permits data transfers that are necessary for establishing, exercising, or defending legal claims.6GDPR Info. Art 49 GDPR – Derogations for Specific Situations Relying on this derogation requires careful documentation and is narrower than many litigants assume. Similar privacy regulations are expanding across the United States at the state level, with California’s consumer privacy law being the most prominent example. Review teams handling cross-border data need protocols that address where the data is hosted, who can access it, and how personal information unrelated to the legal matter is handled.
Data security runs alongside privacy. E-discovery platforms hosting sensitive litigation data should encrypt information both at rest and in transit, limit user access to what each person’s role requires, and maintain detailed audit logs tracking who viewed what. Lawyers have an independent ethical duty to make reasonable efforts to prevent unauthorized access to client information.7American Bar Association. Rule 1.6 – Confidentiality of Information Choosing a vendor with strong security certifications and conducting due diligence on its infrastructure is part of meeting that obligation.
What a Review Costs
Document review is almost always the most expensive phase of e-discovery, often consuming 70 percent or more of a case’s total discovery budget. The cost breaks into people and technology.
On the people side, contract review attorneys typically charge between $25 and $75 per hour for standard relevance review, with specialized work like foreign-language review or highly technical subject matter pushing rates well above $100 per hour. A review of one million documents might require 20 to 50 reviewers working for several weeks. Senior reviewers, project managers, and supervising attorneys add additional layers of cost at higher rates.
On the technology side, e-discovery platforms charge for data processing (converting raw files into reviewable form) and ongoing hosting (storing the data on the platform during the review). Processing fees typically run from $25 to over $100 per gigabyte depending on complexity, while hosting costs generally fall below $15 per gigabyte per month. A large case with several terabytes of data can accumulate hosting charges that run for years if the litigation drags on.
Technology-assisted review reduces costs by letting reviewers focus on the documents most likely to matter rather than grinding through the entire dataset page by page. The upfront investment in training the model and validating its output is real, but the savings on reviewer hours in a large case are substantial. For a 10-million-document review, TAR can reduce the number of documents requiring human eyes by 80 percent or more.
Supervision and Ethical Obligations
The lawyers overseeing a review can’t hand off the work and walk away. Under professional responsibility rules, a lawyer with direct supervisory authority over non-lawyers must make reasonable efforts to ensure those individuals’ conduct aligns with the lawyer’s own ethical obligations.8American Bar Association. Rule 5.3 – Responsibilities Regarding Nonlawyer Assistance Partners and managing lawyers carry an additional duty to put firm-wide measures in place that provide reasonable assurance the review team is working appropriately. If a supervising lawyer knows about a problem and fails to take corrective action while there’s still time to fix it, that lawyer shares responsibility for the resulting ethical violation.
In practice, supervision means establishing clear written review protocols, running regular quality-control checks, holding training sessions at the start of each project to walk reviewers through the privilege criteria and coding scheme, and staying available to answer questions about borderline documents. The supervising attorney doesn’t need to review every document personally, but the system needs to catch mistakes before privileged material goes out the door or responsive documents get improperly withheld.
This responsibility extends to the choice of technology and vendors. If a firm uses an offshore review team or an AI-powered coding tool, the supervising lawyer still bears the same obligation to ensure the output meets professional standards. Redaction is a particularly high-risk area. Before production, documents must be scrubbed of privileged content, personal identifiers like Social Security numbers and financial account numbers, protected health information, and any material covered by a protective order. A single failed redaction can expose a client’s most sensitive information to opposing counsel and the public record.