Product
Platform
Platform API
Onna + Reveal Hold
Onna + Logikcull
Connectors
Slack
Google
Microsoft 365
Jira
Confluence
Google Gemini
Miro
Zendesk
Zoom
All Connectors
Solutions
Solutions by Use Case
Preservation
Collections
Early Case Assement
Internal Investigations
Data Archiving
Data Activity Monitor
Solutions by Role
Legal
Information Technology
Information Security
Human Resources
Resources
Content Library
Blog
Webinars & Events
Reveal Academy
Developer Hub
Company
About Us
Careers
Newsroom
Partnerships
Trust Center
Pricing
Login
Get a Demo
Microsoft Outlook app icon with a white letter O on a blue background.
Microsoft Outlook

Microsoft Outlook Enterprise Connector for eDiscovery & Data Collection

Collect Outlook emails, attachments, and metadata for eDiscovery, compliance, and investigations seamlessly and without involving IT. The Onna + Microsoft Outlook Enterprise Connector lets you access email data across your organization on a defensible, unified platform.

Get a Demo
See all Connectors

Why Connect Microsoft Outlook to Your eDiscovery Collections Platform

Microsoft Outlook is where critical business communication is sent, received, and stored — decisions, agreements, disclosures, and more. When legal or compliance needs arise, that data has to be accessible, complete, and defensible.

Without the right tools, collecting from Outlook is harder than it should be because:

Emails are spread across inboxes, sent folders, and labels for dozens or hundreds of custodians

Attachments are embedded within messages and must be preserved alongside them

Spam, trash, and modern cloud attachments require deliberate handling

New users are frequently added to the organization

The Onna + Microsoft Outlook Enterprise Connector enables organizations to collect this data in a defensible and scalable way. Through the Microsoft 365 Graph API, the connector extracts emails, attachments, and metadata across user accounts while preserving message context and delivery history.

Key Capabilities

Microsoft Outlook Connector Capabilities

The Onna + Microsoft Outlook Enterprise Connector is designed for enterprise-scale email data collection.

Key capabilities include:

Secure authorized connection

Audit logs for all collection activity

Full mailbox archive support

Custodian-based data collections

Continuous sync of new users

Resumable sync for large environments

Configurable spam and trash handling

Optional OneDrive attachment collection

Three flexible sync modes

These capabilities allow organizations to perform targeted custodian collections or maintain ongoing compliance archives across Outlook environments.

Data Collected

What Data Can Be Collected from Microsoft Outlook Enterprise

The connector captures both content and metadata from Microsoft Outlook accounts including:

Email Threading

Email messages

Attachments embedded in emails

Labels

Spam and trash (included by default, excludable at setup)

OneDrive and SharePoint modern attachments (optional)

Metadata

Date received

Date sent

From address

To address

CC recipients

BCC recipients

Email subject

Unique email ID

Importance flag

Starred marker

These collections preserve the full structure and context of email communications so investigators can reconstruct correspondence accurately.

Metadata Schema

Microsoft Outlook Metadata Collected

Along with standard file metadata, the connector collects Outlook-specific metadata fields including:

Date received and date sent

From, To, CC, and BCC addresses

Email subject line

Conversation ID and conversation name

Unique email message ID

Labels and folder information

Importance level (applies to email conversations)

Starred status (applies to individual messages)

This metadata allows teams to reconstruct communication timelines, identify key participants, and surface the most relevant messages in an investigation.

How it works

How Microsoft Outlook Data Collection Works

The connector simplifies Outlook data collection through a structured workflow.

01.

Add Microsoft Outlook as a data source

Navigate to your workspace and add Microsoft Outlook Enterprise as a source.

02.

Authenticate the connection

Connect using your authorized connection credentials. You can switch accounts at this stage if needed.

03.

Configure the collection

Define collection settings including:

  • Collection name
  • Sync mode (one-time, auto-sync, or auto-sync and archive)
  • Start date, or start and end date for one-time syncs
  • Whether to exclude spam or trash from collection
  • Whether to include OneDrive and SharePoint modern attachments
04.

Add users

Add the users to include in your collection by manually entering email addresses or loading users from a list or CSV file. You can also choose to automatically sync newly created users.

05.

Start sync

Once configuration is complete, Outlook collection begins and data appears within your Onna workspace.

Sync Modes

Microsoft Outlook Data Collection Options

The Onna + Microsoft Outlook Enterprise Connector supports flexible sync modes depending on investigation needs.

One-Time Sync

A targeted collection used for litigation or investigations with a defined start and end date.

Auto-Sync

Automatically collects new emails and attachments as they arrive in connected user mailboxes.

Auto-Sync & Archive

Continuously collects new data while maintaining a rolling compliance archive across connected accounts.

Use Cases

Common Microsoft Outlook eDiscovery Use Cases

Litigation Response

Collect Outlook email conversations relevant to legal matters quickly and defensibly.

Incident Response

Investigate email patterns and correspondence during cybersecurity or operational events.

Regulatory Compliance

Archive Outlook communications to meet regulatory record retention requirements.

Internal Investigations

Identify email communications, attachments, and participants related to incidents or policy violations.

Related Connectors

Related Data Source Connectors

Onna connects to 29+ collaboration platforms — enabling unified collections across tools like Slack, Google Workspace, Microsoft Teams, and Zoom.

Get more info about related connectors:

Slack logo with four differently colored intersecting shapes in green, blue, yellow, and red.
Slack
Dropbox blue open box icon.
Dropbox
Microsoft SharePoint logo with stylized overlapping shapes and an 'S'.
SharePoint
Blue gradient cloud icon symbolizing Microsoft OneDrive.
OneDrive
Box company logo in blue lowercase letters.
box
Microsoft Teams logo with a stylized letter T on a blue and purple abstract background.
Teams
Logo of three overlapping blue shapes pointing right, representing Jira software.
Jira
See all Connectors

Onna + Microsoft Outlook Enterprise Connector FAQs

Does the Outlook connector also collect Microsoft Teams data?

No. Onna has Microsoft Teams available as a separate integration. Please visit our Help Center to learn how to collect from Microsoft Teams Enterprise.

Does Onna collect spam and trash?

Yes, by default. If you'd like to exclude spam and trash from your collection, you can check the appropriate box during sync configuration.

Can Onna collect OneDrive and SharePoint attachments?

Yes, optionally. Modern attachments stored in OneDrive or SharePoint are not collected by default, but you can enable this by checking the "Collect OneDrive Attachments" option during setup.

Does Azure Information Protection encryption affect collection?

Yes. At this time, Onna cannot decrypt and process the contents of emails encrypted with Azure Information Protection.

Can I collect from specific users only?

Yes. Onna supports custodian-based collections where you define which users to include by manually entering email addresses or uploading a CSV.

Does Onna automatically sync new users added after setup?

Yes, if you opt in during configuration. You can choose to sync any users created in the future as part of your ongoing collection.

What admin role is required to connect Microsoft Outlook Enterprise?

The minimum role required is Privileged Role Administrator, which can consent to the organization-wide Graph API access Onna requires. A Global Administrator or any role with greater privileges will also work.

Is Onna's Outlook collection defensible?

Yes. Onna maintains a comprehensive audit log of all preservations, collections, and user actions. Every collection has a documented chain of custody.

Start Collecting Microsoft Outlook Enterprise Data for eDiscovery

Connect Microsoft Outlook Enterprise in minutes and begin collecting emails, attachments, and communication data across your organization.

Get a Demo
Talk to an Expert
Product
PlatformPlatform APIOnna + Reveal HoldOnna + Logikcull
Connectors
All ConnectorsSlackGoogleMicrosoft 365JiraConfluenceMiroZendeskZoom
Solutions by Use Case
PreservationCollectionsEarly Case AssessmentInternal InvestigationsData ArchivingData Activity Monitor
Solutions by Role
LegalInformation TechnologyInformation SecurityHuman Resources
Resources
Content LibraryBlogWebinars & Events
Reveal Academy
Developer Hub
Documentation
Company
About Us
Careers
Newsroom
Partnerships
Trust CenterContact Us
© Copyright 2026 Onna
Privacy PolicySAAS Terms of ServiceModern Slavery Statement