HaystackID

10/19/2026

🌴 Mahalo, EDI.

Last week, the HaystackID® team joined industry leaders on Kaʻanapali Beach to celebrate the Summit's 16th year and the Electronic Discovery Institute's 20th anniversary at the 2026 EDI Leadership Summit 🌟.

🎤 Our experts took the stage for two sessions on the next phase of and how organizations are using automation and AI to strengthen programs, improve oversight, and manage risk more proactively.

Thank you to all the leaders who attended our sessions, stopped by to connect, and shared their perspectives throughout the week.

🙌 And congratulations to the Electronic Discovery Institute on 20 years of bringing the community together.

The conversations don't stop here.

🌍 For the rest of the year, our team will be sharing insights at events from Europe to Scottsdale and beyond.

➡️ Learn where we’ll be throughout this fall: https://hubs.ly/Q04BCPFp0

10/19/2026

✨ The Sedona Conference Working Group 11 (WG11) Midyear Meeting is happening this week, and HaystackID® experts will sit on three expert presentations, including:

🎤 Mechanisms and Approaches for Achieving Efficient and Effective Discovery in Data Breach Litigation
📅 Tuesday, October 20, 2026, 10:30 am CDT

HaystackID's Anya Korolyov and other drafting team members will lead a dialogue on their draft Commentary regarding informal discovery mechanisms that may facilitate efficiencies for the parties and the court in data breach litigation. The draft Commentary – and the dialogue during this session – will also focus on certain questions that consistently arise at the outset of data breach litigation:

✅ Was the named plaintiff actually affected by the data breach, and, if so, what data elements were involved and do they align with the alleged harm(s)?
✅ Is CAFA or personal jurisdiction proper?
✅ Are there issues related to arbitration agreements?
✅ Lastly, what of asymmetrical information access, given that plaintiff’s knowledge may be limited to publicly available information?

🎤 Practical Privacy Disclosures
📅 Tuesday, October 20, 2026, 3:45 pm CDT

HaystackID's Christopher Wall and fellow brainstorming group members will lead a dialogue on their outline that addresses (1) whether there are potential frameworks for privacy statutes that require privacy policies to be both comprehensive and genuinely intelligible to the public, and (2) whether such potential frameworks should be addressed in a Commentary by WG11.

🎤 Responsible Use of Personal Data
📅 Wednesday, October 21, 2026, 9:00 am CDT

In a special crossover session, a panel of WG6 (International Electronic Information Management, Discovery, and Disclosure) brainstorming group members, including Korolyov, will lead a dialogue on their outline that explores principles, frameworks, and practical guidance that a prospective drafting team can prepare to support defensible, risk-based decision-making regarding how personal data is used throughout its lifecycle – particularly in contexts such as cross-border data transfers in connection with litigation, investigations, cybersecurity incident response, analytics, and artificial intelligence.

🔗 Learn more: https://hubs.ly/Q04Bs7sx0

10/17/2026

🚨 A ransomware-recovery vendor allegedly told clients it had "proprietary recovery tools" while secretly paying the criminals who locked their files.

That's the claim at the center of a new federal indictment against the owner of Florida-based MonsterCloud.

💼 Prosecutors say the company charged clients for "trade secret" decryption while making dozens of ransom payments totaling over $8 million.

The charges are allegations, and the defendant has pleaded not guilty.

📂 The bigger lesson may be for the organizations that hired such a vendor.
If you paid a ransom without your knowledge, your incident file, board briefings, and forensic reports may tell a story that isn't true.

🚧 That creates real exposure under OFAC sanctions rules, New York DFS reporting requirements, and future CIRCIA obligations, along with headaches in litigation, insurance disputes, and regulatory inquiries.

💬 "When an organization is dealing with ransomware, they're already having one of their worst days. They have to be able to trust the people they bring in to help. That means being transparent about what was done, why it was done, and making sure the organization has a clear record of those decisions when the dust settles," said Jeffrey Fleming, HaystackID® Managing Director, in an interview with Newsline.

Dig into the Newsline coverage to learn practical steps to protect your organization, such as:

✉️ Engagement letters that require written approval before contacting threat actors.
📄 Invoices that break out ransom payments separately.
💻 Keeping vendor attestations in your own systems under your own retention schedules.

When the next incident hits, make sure your records tell the true story of your recovery.

👉 Read the full article: https://hubs.ly/Q04BmklB0

MonsterCloud owner charged with secretly paying ransomware attackers. What it means for OFAC screening, NYDFS and CIRCIA reporting and IR vendor diligence.

10/16/2026

🌎 When evidence sits in China or elsewhere in Asia, U.S. discovery obligations can run straight into local data privacy laws, blocking statutes, and transfer restrictions.

Collecting, reviewing, and producing that data without violating either side's rules requires careful planning and close cross-jurisdictional coordination, and the margin for error is small.

✅ Learn how to balance U.S. discovery obligations with local compliance at the 2026 Georgetown Law Advanced eDiscovery Institute (AEDI) during the expert presentation, "Cross Border Discovery: Asia Focus."

📅 Friday, November 20, 2026, 12:30 pm – 1:30 pm EST

Navigate the complexities of cross-border discovery involving evidence located in China and other parts of Asia.

🎤 This panel will address data privacy laws, blocking statutes, and transfer restrictions that shape discovery strategy. Learn how to balance U.S. discovery obligations with local compliance while coordinating across jurisdictions defensibly.

➕ Todd Liao (Moderator), Morgan, Lewis & Bockius LLP
➕ Christopher Wall, HaystackID®
➕ Denise Backhouse, Littler Mendelson, PC
➕ Jamie Brown, Shook, Hardy & Bacon LLP

Fragmented eDiscovery tools slow teams down, obscure costs, and make it harder to prove compliance when it counts.

👋 Stop by Table 7 to see how HaystackID CoreFlex™ brings matter management, user access, data workflows, and reporting into a single cloud-native interface, so you can self-manage when it makes sense and scale to full-service support when it doesn't.

Learn more: https://hubs.ly/Q04Bmkj00

10/16/2026

📦 On Oct. 1, the Justice Department's National Fraud Enforcement Division directed its prosecutors to prioritize corporate investigations of tariff evasion, import fraud, and forced labor.

For importers, the first challenge isn't legal. It's evidentiary.

➡️ When a subpoena arrives, can your team find, explain, and produce the records behind every declaration made to CBP?

Trade fraud has been climbing the DOJ agenda since the Trade Fraud Task Force launched in 2025, and the task force reported passing the $1 billion mark this July 📆.

The new directive also tells prosecutors to place heavy weight on management's complicity and any efforts to conceal fraud, both of which are often proven or disproven through a company's own data and communications.

The exposure can arrive from several directions at once:
🔹 Civil customs penalties that scale with culpability.
🔹 False Claims Act liability, including treble damages and whistleblower suits.
🔹 Criminal charges, including for concealing or destroying import records.

That's why preservation has to start early, and not just internally.

🚋 Customs brokers and freight forwarders often hold filings the importer doesn't. The rest of the evidence is scattered across ACE exports, ERP systems, and WhatsApp and WeChat messages spanning multiple jurisdictions.

If a subpoena landed tomorrow, how long would it take your team to reconcile years of entries against the records behind them?

✍️ Read our recent article to learn more:
https://hubs.ly/Q04BbHdP0



HaystackID®

10/15/2026

🎡 It was a privilege to join the community at the 2026 Legal Geek Leaders in Tech Law Awards at Pan Pacific London.

HaystackID® was named a finalist in four categories: Product of the Year (AI), Product of the Year (Non AI), Innovation Trailblazer for John Wilson, and Women Leaders in Tech for Esther Birnbaum.

🏆 Congratulations to all of this year's winners and finalists, and thank you to Legal Geek for bringing together such an inspiring group of legal innovators.

This week's conversations made one thing clear ➡️ as moves deeper into legal operations, has to keep pace.

HaystackID AI Governance Services help organizations build visibility, operational controls, and defensible oversight across their AI initiatives so that they can innovate with confidence.

💬 “As AI moves into higher-impact use cases, friction often appears in approvals, assurance, and oversight. HaystackID AI Governance Services materially reduce that friction by standardizing controls and producing reusable, audit-ready documentation. The result is faster deployment without sacrificing accountability.”

Learn more: https://hubs.ly/Q04Bk0390



Law.com International

10/15/2026

⏩ October's theme for ? Prove it.

Regulators want importers to back up every customs declaration. The FTC wants to see the prompts behind AI-assisted review. Courts are also asking whether keyword searches and tools actually find what matters.

🗞️ This month's HaystackID® Discovery Insights Newsletter rounds up what's shaping the conversation.

⚖️ DOJ's Fraud Division has put tariff evasion on its corporate priority list. See how importers can preserve, reconcile, and explain the evidence behind their declarations.

🤖 Defensibility, not speed, is now the real test for AI in . Our experts break down , validation, and the FTC's new requirements for prompts, recall, and precision.

💬 Courts are highlighting the limits of keyword searches for text and chat messages, where slang and shorthand often hide what matters.

🔒 Will courts enforce protective order restrictions on AI use? Recent sanctions in the Uber and Acetaminophen litigation raise new questions.

📍 And we're on the road this fall, with expert sessions at the Galloway Claims & Litigation Conference, the GICLI Annual Meeting, and the Georgetown Law Advanced eDiscovery Institute.

📩 Read the full newsletter: https://hubs.ly/Q04BbHcc0

10/14/2026

👣 Every step has to be fast, discreet, and defensible in white-collar investigations.

Fraud, bribery, embezzlement, insider trading, money laundering: these matters often involve massive data volumes, ephemeral messaging apps like WhatsApp and Signal, cross-border privacy rules like GDPR, and intense media scrutiny.

✅ That's where HaystackID's White Collar Investigation Practice comes in.

"At HaystackID, we tackle complex white-collar investigations by combining forensic expertise with AI-powered tools, ensuring fast, actionable insights. Our approach is tailored to meet the unique demands of each case, whether it's uncovering financial misconduct or handling cross-border compliance challenges." — Bryan Bellack, EVP, Business Development, HaystackID®.

Our team brings together:

🔍 Digital and financial forensics
🕵️ Discreet intelligence and asset tracing
🤖 AI-powered analytics and blockchain analysis
🌍 Multi-jurisdictional investigation management
⏱️ 24/7 rapid response teams

All backed by ISO 27001, SOC 2/3, and HIPAA-certified security 🔒.

🔗 Learn how HaystackID helps legal teams and organizations handle high-stakes investigations: https://hubs.ly/Q04B59fX0

10/14/2026

⌛ can now get through millions of documents in a fraction of the time.

But regulators and opposing counsel are asking a harder question, and many teams aren't ready to answer it.

✏️ In the recent HaystackID® article, "The Burden of Proof Moves Upstream: Validating AI in eDiscovery," leaders share what they've learned defending AI-assisted review in front of clients, opposing counsel, and federal regulators.

Imagine your team hits 90% recall on a second request for four million documents, and the deadline finally looks achievable.

📃 Then the agency asks for your prompts, metrics for every specification, and every instance where a reviewer overruled the AI.

The review took weeks. Defending it could take longer. Capability is no longer the real test. Defensibility is, and it's decided long before anyone pulls a validation sample. Someone's name ends up on the production.

💬 "Somebody ultimately is going to have to sign that, and that person is going to be held accountable for whatever comes from that AI use,” said Jeffrey Fleming, Managing Director, HaystackID.

Recent FTC second requests and CIDs include expectations that didn't exist a year ago.

👆 For the first time, the agency formally defines AI-assisted review and sets standards that could reshape your workflow, timeline, and disclosure obligations.

Some of these requirements hide traps that aren't obvious until you fall into one. Many terms are negotiable, but pushing back carries its own risk.

💬 "A combination of a data expert and a legal expert has done really well at talking about modifications to these regulations and these modified CIDs,” said Todd Haley, EVP, Operations, HaystackID.

Meeting the new bar starts well before review.

❌ The biggest AI risks often have little to do with the model itself.

They hide in vendor contracts that say less than you think, in tools your employees adopted without telling anyone, and in reviewers who click "okay" without actually reviewing.

⌨️ Once they click, they own the AI's answer.

Then there's the measurement trap ➡️ a 1% gain in recall may not be a gain at all, and one number tells you whether it is.

The teams that respond quickly to regulators won't necessarily have the best AI.

They'll have the best record ✅.

🔗 Read the full article: https://hubs.ly/Q04B1zRB0

10/13/2026

🚢 Trade fraud is no longer treated as a back-office customs issue.

In the recent HaystackID® webcast, "Trade Fraud Investigation Best Practices," legal and experts explained how these schemes work, how companies can test their defenses, and what to do when a concern turns into an investigation.

Most trade fraud schemes come down to three simple questions:

✅ What the goods are.
✅ What they were worth.
✅ Where they were made.

Problems arise when customs paperwork doesn't match the underlying records, whether a product is described under a lower-duty tariff code, a supplier issues one invoice for customs and a higher one for finance, or goods suddenly arrive from a new country even though manufacturing never moved.

Whatever the scheme, the investigative approach is the same 👉 compare what was told to customs against purchase orders, payments, shipping records, and communications, and look closely wherever the two stories diverge.

Many organizations have mature programs that were built for other risks, and the gaps often show up in the details:

❌ Supplier certifications that are never verified.
❌ Audit clauses that are never exercised.
❌ Tariff codes that change without anyone asking why.

The companies in the strongest position test real transactions and pay close attention whenever suppliers, routes, or pricing shift after new tariffs take effect.

💬 As expert panelist Kevin Harnisch, Head of White Collar Defense and Investigations, United States, Norton Rose Fulbright US LLP, put it, it's "much more of an art than a science." Intent, the scale of the conduct, executive involvement, and the strength of the compliance program all shape the answer.

is helping investigators move through multilingual records, scanned documents, and messaging data faster than ever, but faster doesn't mean looser.

🔎 Every finding still needs to trace back to its source with a clear chain of custody, and outside counsel, forensic accountants, and eDiscovery specialists need to work together from the start.

📑 Read the transcript to learn how to spot these risks early and respond with confidence when the government comes calling: https://hubs.ly/Q04zYJ-l0