Google Vault

Google Vault é uma ferramenta central de governança da informação e eDiscovery para organizações que usam o Google Workspace. Com o Google Vault, você pode reter, pesquisar e exportar dados do Google Workspace dos usuários (como Gmail, Drive, Groups e Meet) para apoiar litígios, conformidade regulatória e investigações internas.

O Vault oferece a administradores e equipes jurídicas controles poderosos para gerenciar o ciclo de vida das comunicações empresariais. Você pode colocar dados em legal hold, criar matters para agrupar atividades de eDiscovery, pesquisar conteúdo de mensagens e arquivos em toda a organização e exportar dados relevantes para revisão.

Os principais recursos do Google Vault incluem:

  • Search & Export: Pesquisar no Gmail, Drive, Groups e Meet por dados relevantes e exportar os resultados para análise.
  • Matters & Holds: Criar matters (casos) e aplicar legal holds para reter dados de usuários além das políticas padrão de retenção.
  • Retention Rules: Definir regras de retenção para manter ou excluir dados após um período definido, atendendo a necessidades de negócio e conformidade.
  • Audit & Review: Monitorar a atividade do Vault e aplicar conformidade com políticas em toda a organização.

No Zoen, a integração do Google Vault permite que seus agentes de IA gerenciem de forma programática matters, exports e holds do Vault. Isso habilita fluxos automatizados para discovery jurídico, arquivamento de conformidade e gestão de retenção de dados na sua organização. Os agentes podem iniciar novos exports, listar holds disponíveis, gerenciar matters jurídicos e recuperar arquivos exportados diretamente pelos seus processos automatizados, garantindo que suas necessidades de conformidade e governança da informação sejam atendidas de forma eficiente e segura.

Usage Instructions

Connect Google Vault to manage the full matter lifecycle, create and manage holds and exports, and save reusable search queries for eDiscovery and compliance.

Actions

google_vault_create_matters_export

Create an export in a matter

Input

ParameterTypeRequiredDescription
matterIdstringYesThe matter ID (e.g., "12345678901234567890")
exportNamestringYesName for the export (avoid special characters)
corpusstringYesData corpus to export (MAIL, DRIVE, GROUPS, HANGOUTS_CHAT, VOICE)
accountEmailsstringNoComma-separated list of user emails to scope export (e.g., "user1@example.com, user2@example.com")
orgUnitIdstringNoOrganization unit ID to scope export (e.g., "id:03ph8a2z1enx5q0", alternative to emails)
startTimestringNoStart time for date filtering (ISO 8601 format, e.g., "2024-01-01T00:00:00Z")
endTimestringNoEnd time for date filtering (ISO 8601 format, e.g., "2024-12-31T23:59:59Z")
termsstringNoSearch query terms to filter exported content (e.g., "from:sender@example.com subject:invoice")

Output

ParameterTypeDescription
exportjsonCreated export object

google_vault_list_matters_export

List exports for a matter

Input

ParameterTypeRequiredDescription
matterIdstringYesThe matter ID (e.g., "12345678901234567890")
pageSizenumberNoNumber of exports to return per page
pageTokenstringNoToken for pagination
exportIdstringNoOptional export ID to fetch a specific export (e.g., "exportId123456")

Output

ParameterTypeDescription
exportsjsonArray of export objects
exportjsonSingle export object (when exportId is provided)
nextPageTokenstringToken for fetching next page of results

google_vault_delete_matters_export

Delete an export from a matter

Input

ParameterTypeRequiredDescription
matterIdstringYesThe matter ID (e.g., "12345678901234567890")
exportIdstringYesThe export ID to delete (e.g., "exportId123456")

Output

ParameterTypeDescription
successbooleanWhether the export was deleted

google_vault_download_export_file

Download a single file from a Google Vault export (GCS object)

Input

ParameterTypeRequiredDescription
matterIdstringYesThe matter ID (e.g., "12345678901234567890")
bucketNamestringYesGCS bucket name from cloudStorageSink.files.bucketName
objectNamestringYesGCS object name from cloudStorageSink.files.objectName
fileNamestringNoOptional filename override for the downloaded file

Output

ParameterTypeDescription
filefileDownloaded Vault export file stored in execution files

google_vault_create_matters_holds

Create a hold in a matter

Input

ParameterTypeRequiredDescription
matterIdstringYesThe matter ID (e.g., "12345678901234567890")
holdNamestringYesName for the hold
corpusstringYesData corpus to hold (MAIL, DRIVE, GROUPS, HANGOUTS_CHAT, VOICE)
accountEmailsstringNoComma-separated list of user emails to put on hold (e.g., "user1@example.com, user2@example.com")
orgUnitIdstringNoOrganization unit ID to put on hold (e.g., "id:03ph8a2z1enx5q0", alternative to accounts)
termsstringNoSearch terms to filter held content (e.g., "from:sender@example.com subject:invoice", for MAIL and GROUPS corpus)
startTimestringNoStart time for date filtering (ISO 8601 format, e.g., "2024-01-01T00:00:00Z", for MAIL and GROUPS corpus)
endTimestringNoEnd time for date filtering (ISO 8601 format, e.g., "2024-12-31T23:59:59Z", for MAIL and GROUPS corpus)
includeSharedDrivesbooleanNoInclude files in shared drives (for DRIVE corpus)

Output

ParameterTypeDescription
holdjsonCreated hold object

google_vault_list_matters_holds

List holds for a matter

Input

ParameterTypeRequiredDescription
matterIdstringYesThe matter ID (e.g., "12345678901234567890")
pageSizenumberNoNumber of holds to return per page
pageTokenstringNoToken for pagination
holdIdstringNoOptional hold ID to fetch a specific hold (e.g., "holdId123456")

Output

ParameterTypeDescription
holdsjsonArray of hold objects
holdjsonSingle hold object (when holdId is provided)
nextPageTokenstringToken for fetching next page of results

google_vault_update_matters_holds

Replace the name, query, and scope of an existing hold. This is a full-resource update: fetch the current hold first (Vault List Holds) and resupply every field you want to keep — any field left blank is cleared, not left unchanged.

Input

ParameterTypeRequiredDescription
matterIdstringYesThe matter ID (e.g., "12345678901234567890")
holdIdstringYesThe hold ID to update (e.g., "holdId123456")
holdNamestringYesName for the hold
corpusstringYesData corpus of the hold (MAIL, DRIVE, GROUPS, HANGOUTS_CHAT, VOICE)
accountEmailsstringNoComma-separated list of user emails covered by the hold (e.g., "user1@example.com, user2@example.com")
orgUnitIdstringNoOrganization unit ID covered by the hold (e.g., "id:03ph8a2z1enx5q0", alternative to accounts)
termsstringNoSearch terms to filter held content (e.g., "from:sender@example.com subject:invoice", for MAIL and GROUPS corpus). Resupply the hold's current terms to keep them — this replaces the hold, so leaving it blank clears any existing filter.
startTimestringNoStart time for date filtering (ISO 8601 format, e.g., "2024-01-01T00:00:00Z", for MAIL and GROUPS corpus). Resupply the hold's current value to keep it — leaving it blank clears any existing date filter.
endTimestringNoEnd time for date filtering (ISO 8601 format, e.g., "2024-12-31T23:59:59Z", for MAIL and GROUPS corpus). Resupply the hold's current value to keep it — leaving it blank clears any existing date filter.
includeSharedDrivesbooleanNoInclude files in shared drives (for DRIVE corpus). Resupply true if the hold currently includes shared drives — leaving it false/blank clears that setting.

Output

ParameterTypeDescription
holdjsonUpdated hold object

google_vault_delete_matters_holds

Delete a hold and release its covered accounts

Input

ParameterTypeRequiredDescription
matterIdstringYesThe matter ID (e.g., "12345678901234567890")
holdIdstringYesThe hold ID to delete (e.g., "holdId123456")

Output

ParameterTypeDescription
successbooleanWhether the hold was deleted

google_vault_add_held_accounts

Add accounts to an existing hold

Input

ParameterTypeRequiredDescription
matterIdstringYesThe matter ID (e.g., "12345678901234567890")
holdIdstringYesThe hold ID to add accounts to (e.g., "holdId123456")
accountEmailsstringYesComma-separated list of user emails to add to the hold (e.g., "user1@example.com, user2@example.com")

Output

ParameterTypeDescription
responsesarrayPer-account results of the add operation
accountjsonHeld account (accountId, email)
statusjsonStatus (code, message) if the add failed

google_vault_remove_held_accounts

Remove accounts from an existing hold

Input

ParameterTypeRequiredDescription
matterIdstringYesThe matter ID (e.g., "12345678901234567890")
holdIdstringYesThe hold ID to remove accounts from (e.g., "holdId123456")
accountIdsstringYesComma-separated list of Admin SDK account IDs to remove from the hold (e.g., "accountId1, accountId2")

Output

ParameterTypeDescription
statusesarrayPer-account removal status, in request order

google_vault_create_matters

Create a new matter in Google Vault

Input

ParameterTypeRequiredDescription
namestringYesName for the new matter
descriptionstringNoOptional description for the matter

Output

ParameterTypeDescription
matterjsonCreated matter object

google_vault_list_matters

List matters, or get a specific matter if matterId is provided

Input

ParameterTypeRequiredDescription
pageSizenumberNoNumber of matters to return per page
pageTokenstringNoToken for pagination
matterIdstringNoOptional matter ID to fetch a specific matter (e.g., "12345678901234567890")

Output

ParameterTypeDescription
mattersjsonArray of matter objects
matterjsonSingle matter object (when matterId is provided)
nextPageTokenstringToken for fetching next page of results

google_vault_update_matters

Update the name and/or description of a matter

Input

ParameterTypeRequiredDescription
matterIdstringYesThe matter ID to update (e.g., "12345678901234567890")
namestringYesNew name for the matter
descriptionstringNoNew description for the matter

Output

ParameterTypeDescription
matterjsonUpdated matter object

google_vault_close_matters

Close a matter

Input

ParameterTypeRequiredDescription
matterIdstringYesThe matter ID to close (e.g., "12345678901234567890")

Output

ParameterTypeDescription
matterjsonClosed matter object

google_vault_reopen_matters

Reopen a closed matter

Input

ParameterTypeRequiredDescription
matterIdstringYesThe matter ID to reopen (e.g., "12345678901234567890")

Output

ParameterTypeDescription
matterjsonReopened matter object

google_vault_delete_matters

Permanently delete a matter (must be closed first)

Input

ParameterTypeRequiredDescription
matterIdstringYesThe matter ID to delete (e.g., "12345678901234567890")

Output

ParameterTypeDescription
matterjsonDeleted matter object

google_vault_undelete_matters

Restore a deleted matter

Input

ParameterTypeRequiredDescription
matterIdstringYesThe matter ID to restore (e.g., "12345678901234567890")

Output

ParameterTypeDescription
matterjsonRestored matter object

google_vault_add_matters_permissions

Add a collaborator (or transfer ownership) to a matter

Input

ParameterTypeRequiredDescription
matterIdstringYesThe matter ID (e.g., "12345678901234567890")
accountIdstringYesAdmin SDK account ID of the user to add as a collaborator/owner
rolestringYesPermission level to grant: COLLABORATOR or OWNER
sendEmailsbooleanNoSend a notification email to the added account
ccMebooleanNoCC the requestor on the notification email (only relevant if sendEmails is true)

Output

ParameterTypeDescription
permissionjsonCreated matter permission (accountId, role)

google_vault_remove_matters_permissions

Remove a collaborator from a matter

Input

ParameterTypeRequiredDescription
matterIdstringYesThe matter ID (e.g., "12345678901234567890")
accountIdstringYesAdmin SDK account ID of the collaborator to remove

Output

ParameterTypeDescription
successbooleanWhether the collaborator was removed

google_vault_create_saved_query

Save a reusable search query in a matter

Input

ParameterTypeRequiredDescription
matterIdstringYesThe matter ID (e.g., "12345678901234567890")
displayNamestringYesName for the saved query
corpusstringYesData corpus to search (MAIL, DRIVE, GROUPS, HANGOUTS_CHAT, VOICE)
accountEmailsstringNoComma-separated list of user emails to scope the query (e.g., "user1@example.com, user2@example.com")
orgUnitIdstringNoOrganization unit ID to scope the query (e.g., "id:03ph8a2z1enx5q0", alternative to emails)
startTimestringNoStart time for date filtering (ISO 8601 format, e.g., "2024-01-01T00:00:00Z")
endTimestringNoEnd time for date filtering (ISO 8601 format, e.g., "2024-12-31T23:59:59Z")
termsstringNoSearch query terms (e.g., "from:sender@example.com subject:invoice")

Output

ParameterTypeDescription
savedQueryjsonCreated saved query object

google_vault_list_saved_queries

List saved queries in a matter, or get a specific one if savedQueryId is provided

Input

ParameterTypeRequiredDescription
matterIdstringYesThe matter ID (e.g., "12345678901234567890")
pageSizenumberNoNumber of saved queries to return per page
pageTokenstringNoToken for pagination
savedQueryIdstringNoOptional saved query ID to fetch a specific saved query

Output

ParameterTypeDescription
savedQueriesjsonArray of saved query objects
savedQueryjsonSingle saved query object (when savedQueryId is provided)
nextPageTokenstringToken for fetching next page of results

google_vault_delete_saved_query

Delete a saved query from a matter

Input

ParameterTypeRequiredDescription
matterIdstringYesThe matter ID (e.g., "12345678901234567890")
savedQueryIdstringYesThe saved query ID to delete

Output

ParameterTypeDescription
successbooleanWhether the saved query was deleted

On this page