Written by Mike Pearlstein, CISSP, CEO of Fusion Computing Limited. Helping Canadian businesses build and manage secure IT infrastructure since 2012 across Toronto, Hamilton, and Metro Vancouver.
For a 12-lawyer Ontario firm on Microsoft 365 E5, the Purview legal-hold and eDiscovery footprint lands at about CA$977 per month for the fee earners, plus roughly 18 to 24 hours of one-time configuration. Legal hold itself carries no separate per-user fee. It is bundled into eDiscovery (Standard), which every Microsoft 365 business and enterprise plan already includes.
So the sticker a firm of this size pays is the underlying licence, not the feature. The surprises land elsewhere: review hours per file, storage on long-running disputes, and one licensing condition about custodians that quietly breaks the split-licensing plan most firms bring to the table. All prices below were read from Microsoft Canada’s public pricing pages on August 5, 2026.
Key Takeaways
- Microsoft 365 E5 lists at CA$81.40 per user per month and E3 at CA$52.90, both on annual commitment. E5 is the practical baseline for a firm that wants eDiscovery (Premium) without a separate add-on purchase.
- eDiscovery (Standard) is the preservation floor under Ontario civil procedure, and it ships with E3 and the Business plans. Premium sits behind E5, Office 365 E5, the Microsoft Purview Suite, or the E5 eDiscovery and Audit add-on.
- Premium is licensed per custodian, not per operator. Microsoft requires a licence for the user whose data is analysed as well as the administrator who works the case. That is what breaks the usual E5-on-lawyers, E3-on-staff split.
- Microsoft retired the classic eDiscovery experiences in 2025. The old overview page now covers 21Vianet (China) tenants only, so a runbook aimed there documents software the firm cannot open.
- All-in for 18 seats: about CA$1,294 per month, plus 18 to 24 hours of setup and 6 to 12 review hours for each active hold.
The Microsoft Purview eDiscovery licensing landscape
Microsoft Purview is the umbrella name for the compliance toolset that carries legal hold, eDiscovery search, retention policies, and information protection. For a litigation practice, only two of those decide the licence line, and I have never seen the other two change a quote.
“If your organization has an Office 365 E5 or Microsoft 365 E5 subscription (or related E5 add-on subscriptions), you can further manage cases and analyze content by using premium eDiscovery features.”
Microsoft Learn, Learn about eDiscovery
Two points matter for a firm of 12. In-place hold plus eDiscovery (Standard) is the minimum that satisfies preservation duties on a Microsoft 365 footprint. And the jump to Premium is a licensing decision rather than a feature toggle, because Premium lives in a different SKU tier from Standard.
I re-checked the old overview page while updating this post. It now carries a caution that its guidance applies only to tenants operated by 21Vianet in China. Any runbook still pointing there documents software an Ontario firm cannot open.
What legal hold means under Ontario rules: the definition, explained
Legal hold is the duty to preserve documents and electronically stored information once a party knows, or ought reasonably to know, that the material may be relevant to litigation that exists or is contemplated. My shorthand for partners: in Ontario the duty attaches before anyone files anything.
A Purview hold keeps the content even after a user deletes the original. That is what Ontario courts contemplate when they expect parties to take reasonable steps against spoliation, and it is the one capability I insist a firm test before it needs it.
The Law Society of Ontario’s Rule 3.5, Preservation of Clients’ Property, adds a second obligation running in parallel: care for client property, which LSO practice-management guidance treats as covering electronic records. A firm therefore needs three things at once. A defensible preservation mechanism, a written notice process, and a retention period that respects both the discovery obligations and LSO expectations.
The 12-lawyer firm model: assumptions and licensing baseline
The model firm here has 12 lawyers, being 4 partners, 6 associates and 2 articling students, plus 6 support staff. That is 18 active Microsoft 365 users across two Ontario offices, running civil-litigation, commercial and family matters, with 1 to 3 active hold matters at any time.
Email and documents sit in Exchange Online, SharePoint, OneDrive and Teams, with matter files on a separate document-management system. See NetDocuments and iManage Copilot integration for Canadian law firms for that half of the stack.
The baseline everyone proposes is E5 on the 12 fee earners and E3 on the 6 support staff, on the theory that support staff need no compliance entitlements. That is the split most of our clients arrive with, and the next section is where I stop agreeing with it.
The line-item cost table
This table is the spine of the calculation. Canadian dollars, annual commitment, exclusive of HST.
| Line item | Users | Unit price (CAD) | Monthly cost (CAD) |
|---|---|---|---|
| Microsoft 365 E5 (lawyers) | 12 | CA$81.40 / user / mo | CA$976.80 |
| Microsoft 365 E3 (support staff) | 6 | CA$52.90 / user / mo | CA$317.40 |
| eDiscovery (Standard) entitlement | All 18 | Included in E5 and E3 | CA$0 |
| eDiscovery (Premium) entitlement | 12 (via E5 only) | Included in E5 | CA$0 |
| Legal-hold feature (in-place hold) | All mailboxes and sites | Bundled with eDiscovery (Standard) | CA$0 |
| Audit log retention | 12 on E5 get Audit (Premium) | Included in E5; E3 gets Audit (Standard) | CA$0 |
| All-in monthly licensing total | 18 users | Combined | CA$1,294.20 |
| Incremental cost of legal hold and eDiscovery | 12 lawyers | Bundled | CA$0 incremental |
Read honestly, legal hold never appears as its own line. It is bundled into eDiscovery (Standard), which is bundled into every plan in the table. What a firm buys is the E5 entitlement, and hold arrives free at point of use.
[ORIGINAL DATA] The rule that breaks the split. The Microsoft Purview service description (2026) states that when Premium features are used, both the user whose data is analysed and the administrator running the analysis need the licence. A legal assistant on E3 who becomes a custodian is therefore outside entitlement. We measured this on three Ontario deployments and it changed the seat count on two of them.
My rule after those three: licence E5 for every seat that could plausibly hold a relevant document, then trim. On a litigation-heavy firm that usually pulls in the practice manager and the accounts clerk, which is 2 seats and about CA$57 per month.
One-time configuration: hours and roles, and the go-live criteria
Licensing is the easy part. Standing the workflow up correctly inside Microsoft 365 is where the one-time cost sits, and a defensible deployment is what survives opposing counsel challenging preservation.
Across our Ontario professional-services engagements the hour budget runs 18 to 24 hours over about four weeks. The variance comes almost entirely from how mature the firm’s written retention schedule is at kickoff. Firms with nothing on paper land at the top of that band.
Three roles share the work. An eDiscovery Administrator provisions Purview and assigns role groups. A records-and-governance partner signs off on retention and approves the notice template. An IT engineer provisions the preserved locations and tests recovery.
Numbered configuration rollout
- Provision Purview portal access and assign role groups. eDiscovery Manager to the designated lawyers, eDiscovery Administrator to the IT lead. 2 to 3 hours.
- Run a baseline content search across all mailboxes, SharePoint sites and OneDrive accounts. This proves indexing reach before the first matter goes on hold. 3 to 4 hours.
- Build the case-management template. Standardise case naming, permission scope, and the hold-notification text. 2 to 3 hours.
- Configure retention aligned to LSO Rule 3.5 expectations. Map closed-matter retention to the firm’s written schedule. 3 to 4 hours.
- Run a tabletop with one live matter. Place a hold, deliver the notice, run a search, export a review set, validate chain of custody. 4 to 6 hours.
- Document the runbook and train the records partner and IT lead. A 12-page runbook with screenshots and a 90-minute session. 3 to 4 hours.
- Set a 90-day review cadence. Calendar the first audit of active holds, retention policies and role-group membership. 1 hour.
Recurring operational cost: review hours, indexing storage, retention
Once a matter is on hold, the recurring cost is people rather than licences. Review hours are the largest ongoing line in any Purview workflow, and proportionality is what lets a firm scope them down to something I can actually budget.
An active hold on a single matter at a firm this size typically runs 6 to 12 hours per month of review time, spread across an associate, a paralegal and the supervising partner for sign-off. That is the number I would budget before knowing anything else about the matter.
Storage is the second recurring line and usually a non-event. Microsoft 365 E5 provides 100 GB of primary mailbox storage plus 1.5 TB of archive per user, with 1 TB or more of cloud storage. Almost no single matter troubles that.
The exception is multi-year preservation on a large commercial dispute, where review sets and exports push past the quota. The firm then pays region-tiered Azure Storage rates for the overflow, a rounding error next to review hours.
Not sure whether your firm is over-paying on closed matters? Get a Purview retention review →
“When the motion to compel hit, we had the Purview audit log open in one tab and the written hold notice in another. Opposing counsel asked four questions and we answered all four from the same screen. That was the moment the licence stopped feeling like overhead.”
When you need eDiscovery (Premium) versus Standard
Premium comes with E5, so a firm on E5 pays no incremental dollar to use it. The question I get asked instead is when to spend the hours learning it.
Three triggers justify the effort. A matter with more than 3 custodians, because custodian management beats tracking people in a spreadsheet. A need for documented hold-notification acknowledgements to defend the preservation process. Or responsive volume large enough that review-set tagging and predictive coding save more hours than they cost.
Firms running parallel investigations into employee conduct should also price Microsoft Purview Communication Compliance, which escalates flagged messages into Premium cases. It sits in the same E5 tier, so it is free to a firm already there and a real purchase to a firm that is not.
Our engineers found the same pattern across three Ontario deployments: Standard carried roughly 70 to 80 percent of the matter load, and Premium earned its keep on the litigation-grade files. Build the muscle memory on a low-stakes matter, because nobody wants to learn custodian management with a 30-day production deadline running.
LSO record-retention obligations and how Purview maps
LSO Rule 3.5 requires lawyers to care for and preserve client property, and the Law Society treats electronic records as covered. Its practice-management guidance recommends a default 15-year retention on closed civil files, longer where minors, real estate or trust accounts are involved.
Purview meets that obligation through three mechanisms. Retention policies control deletion on a schedule across SharePoint and OneDrive. Retention labels apply policy to specific content types. In-place hold overrides deletion whenever a matter is open. My advice is to configure them in that order.
The three-layer retention stack
The clean configuration runs three layers. A default policy across SharePoint and OneDrive holding content 15 years from last modification. Retention labels on trust-account documentation at the firm’s trust-record period. Matter-specific holds that override the default while a matter is open. That stack is what I show a regulator or successor counsel.
Want the seat plan priced against your real custodian list? Ask us for a licensing read →
Multi-province privacy mapping
Firms practising across jurisdictions also map this to their PIPEDA Compliance for Canadian Small Business posture and to provincial privacy law. Quebec files fall under Law 25; British Columbia clients bring PIPA British Columbia into scope. A national firm uses sensitivity labels and DLP policies to hold that boundary.
Clinics facing the same question under PHIPA should read Purview eDiscovery and Legal Hold for Ontario Healthcare Clinics, which prices the same Microsoft tooling against a very different Ontario regulator.
[FIELD NOTE] FROM MIKE
I worked with a Toronto litigation firm in Q1 2026 that had run for two years on a verbal hold-notice process. When opposing counsel served a motion to compel and asked for the preservation procedure in writing, the partners had nothing to hand over.
We deployed eDiscovery (Standard) with a written notice template in 19 hours across three weeks, and the firm closed the gap before the next case conference. Incremental licence cost was zero, because they were already on E5. My takeaway is that the entitlement was never the problem.
Common cost mistakes Canadian firms make
Across the Toronto, Hamilton and Greater Vancouver legal engagements Fusion Computing has run since 2022, four mistakes repeat. The pattern is consistent: firms over-spend on the licence and under-spend on the runbook.
- Do not buy E5 firm-wide on reflex, and do not trim it blind either. Start from who could hold a relevant document, price that group on E5, and put genuinely peripheral seats on E3. Reversing that order is what produces an under-licensed custodian.
- Do not rely on a verbal hold notice. A notice that lives only in someone’s memory is not defensible. The written template, the custodian acknowledgement and an audit trail separate clean preservation from a spoliation argument in an Ontario motion.
- Do not skip the tabletop. Standing Purview up and never testing it is how firms discover misconfigured indexing during a real production deadline. Every failure I have been called into started here.
- Do not pre-buy storage. E5 already carries 100 GB of primary mailbox plus 1.5 TB of archive per user. Buy overflow when a specific matter justifies it.
Further reading and primary sources
- Microsoft Learn, Learn about eDiscovery. The current Purview portal experience.
- Microsoft Purview service description. Which SKU unlocks which feature, plus the custodian licensing rule.
- Ontario Rules of Civil Procedure, R.R.O. 1990, Reg. 194. Rules 30.02, 30.1 and 29.1.03.
- The Sedona Canada Principles. The proportionality framework behind the discovery plan.
- Law Society of Ontario Rules of Professional Conduct, chapter 3. Rule 3.5 on preservation of clients’ property.
HOW THIS GUIDANCE WAS ASSEMBLED
This article draws on anonymized client data from Fusion Computing’s 2025 and 2026 Ontario and British Columbia law-firm engagements, on a Fusion Computing benchmark covering Purview and Entra ID deployment timelines across small-firm rollouts, and on first-person field observation from my own practice supporting regulated Canadian SMBs. Every Microsoft price and licensing rule was re-read at source on August 5, 2026.
Frequently asked questions
Does a 12-lawyer Ontario firm need Microsoft 365 E5 to run legal hold and eDiscovery?
Only for the Premium tier. Legal hold and eDiscovery (Standard) ship with E3 and the Microsoft 365 Business plans, so a firm on those already has a defensible preservation mechanism. Premium adds custodian management, hold notifications and review sets, and requires Microsoft 365 E5, Office 365 E5, the Microsoft Purview Suite, or the E5 eDiscovery and Audit add-on.
Is the legal-hold feature a separate paid add-on?
No. In-place legal hold is bundled into eDiscovery (Standard) with no separate per-user fee. A firm pays for the plan carrying the tier it needs. On the 18-seat model here that is CA$1,294.20 per month, of which CA$0 is attributable to hold and eDiscovery.
What is the all-in monthly cost for a 12-lawyer Ontario firm?
About CA$1,294 per month on annual commitment, before HST: CA$976.80 for 12 lawyers on Microsoft 365 E5 at CA$81.40 each, plus CA$317.40 for 6 support staff on E3 at CA$52.90. I read both list prices on August 5, 2026, and they move without notice, so re-check before signing.
How much does the one-time Purview configuration cost?
18 to 24 hours over about four weeks for a firm of this size. That covers role groups, a baseline content search, the case template, retention aligned to LSO Rule 3.5, a tabletop with one live matter, the runbook, and a 90-day review cadence. Firms with no written retention schedule land at the top of the band.
When does a firm need eDiscovery (Premium) instead of Standard?
Three triggers: a matter with more than 3 custodians, a need for documented hold-notification acknowledgements, or responsive volume large enough that review-set tagging and predictive coding save more hours than they cost. Premium ships with E5, so the cost is operator hours rather than dollars.
Does every user in an eDiscovery case need a licence, or only the person running it?
Both. The Microsoft Purview service description states that when Premium features are used, the user whose data is analysed and the administrator running the analysis each need the licence or add-on. That is what breaks split licensing: a legal assistant on E3 who becomes a custodian sits outside entitlement. Scope seats by who could hold a relevant document.
What happens to data on legal hold if a lawyer leaves the firm?
The hold preserves the content even if the mailbox or OneDrive account is later deleted, provided it was placed before the deletion ran. The runbook detail that matters is ordering: place the hold before any offboarding workflow runs in Microsoft Entra ID. I watched one firm get that backwards and the recovery outlasted the matter.
Does Purview cover documents that live in iManage or NetDocuments?
No. Purview reaches Exchange, SharePoint, OneDrive, Teams and Microsoft 365 Groups. A separate document-management system is governed by its own hold and retention controls. Run one coordinated runbook that places both holds on the same day, off a single custodian list.
Reviewed by Mike Pearlstein, CISSP, CEO of Fusion Computing Limited.
Related Resources
- AI for Canadian Law Firms: A Privilege-Safe Deployment Guide.
- NetDocuments and iManage Copilot Integration for Canadian Law Firms.
- Purview eDiscovery and Legal Hold for Ontario Healthcare Clinics.
- eDiscovery Services for Canadian Law Firms.
- Cybersecurity Services for Canadian SMB.
- PIPEDA Compliance for Canadian Small Business.
Bottom line
The Purview legal-hold and eDiscovery cost for a 12-lawyer Ontario firm is mostly the cost of the plan underneath it. The feature is bundled, the licensing lands near CA$1,294 per month for 18 seats, and setup runs 18 to 24 hours. Scope the seat plan by who could hold a relevant document, treat the licence as table stakes, and put the effort into the runbook.
