C l e a r w e l l S y s t e m s : s o l u t i o n b r i e f : C OR P ORATE IN V E S TI G ATION S
Clearwell Corporate
The Benefits:
Solve corporate investigations
10 times faster
Security and forensics professionals
at large enterprises and governmental
agencies have realized immediate and
significant results using the Clearwell
Corporate Investigation Solution. The
solution’s benefits include:
• Solve corporate investigations quickly
and accurately
• Rapidly identify all the participants
involved in an investigation
• Quickly deliver all the evidence to
internal sponsors online
• Eliminate the manual review of
thousands of false positives
Discussion Threads
Automatically links emails into threads
allowing investigators to rapidly traverse
the life span of an email
Investigation Solution
The Challenge: More corporate investigations, more email
and documents, but no more time.
Security and forensics teams face tremendous pressure along every dimension. The number
of corporate investigations continues to grow, as does the amount of email and documents for
analysis. Deadlines are increasingly aggressive, raising the urgency around finding all the evi-
dence and accurately determining who knew what, and when. Cost control remains a pressing
concern, preventing teams from adding more people to cope with the greater workload.
In seeking to meet these demands, security and forensics teams have only archaic tools to
help them. These simple keyword search tools produce inaccurate or unreliable results,
such as large numbers of “false positives”. Because of this, today’s corporate investigation
process is onerous and time-consuming, requiring a large number of manual steps and
significant re-work which, in turn, costs millions of dollars and leaves the organization
vulnerable to substantial risk and financial exposure.
The Solution: The Clearwell Corporate Investigation Solution
The Clearwell Corporate Investigation Solution is designed to automate and streamline
the corporate investigation process. The solution analyzes email, attachments, and
documents for the purpose of rapidly finding all evidence and participants involved in a
corporate investigation or regulatory inquiry. Key capabilities of the Clearwell Corporate
Investigation Solution include: 
Analyze emails, attachments, and documents in minutes: Clearwell is opera-
tional in less than 30 minutes, allowing corporate investigators to immediately
understand the context of the case across the entire data set. Clearwell analyzes
the case data that is identified, preserved, and stored on files shares or dedicated
NAS using existing collection methodologies. In addition, Clearwell can easily be
configured to analyze the data on live data sources (such as archives, Microsoft
Exchange Server, etc.), if required.
Determine exactly who knew what, and when: Clearwell’s Discussion Thread
feature links together all related messages including all replies, forwards, CC’s and
BCC’s, and provides a chronological thread of the entire discussion. By walking the
thread, corporate investigators can quickly determine who knew what, and when, as
well as identify all the participants, all emails, and all attachments related to their
particular corporate investigation.
Quickly discover the most relevant evidence: Clearwell’s Relevance Rank
feature considers the unique properties of email, attachments, and documents
to return the most relevant data first. The solution also automatically performs
de-duplication across all repositories and hit-highlights found search terms. As a
result, corporate investigation teams no longer have to perform time-consuming,
redundant analysis of thousands of false positives.

Advanced Search
Corporate investigation teams can use
powerful search capabilities to rapidly
discover relevant evidence
“Given the amount of time we spend
manually analyzing & reviewing
electronic information, we expect our
Clearwell deployment to deliver millions
of dollars in cost savings related to future
investigations.”
John Petruzzi
Director, Enterprise Security
Constellation Energy
Clearwell Systems, Inc.
2901 Tasman Drive, Suite 100
Santa Clara, CA 95054
408.727.9900 tel
408.727.9910 fax
www.clearwellsystems.com
C l e a r w e l l S y s t e m s : s o l u t i o n b r i e f : C OR P ORATE IN V E S TI G ATION S
Maximum investigation flexibility through advanced search capabilities:
Clearwell allows corporate investigators to search for specific phrases, dates, header
information, user groups, locations, tags, and comments. Clearwell provides the
flexibility to include text variations such as plurals and alternative verb forms in
search results, and also provides exact matching via literal search. Power users can
leverage advanced features such as wildcard, fuzzy, proximity, and Boolean searches. 
Increase investigator productivity: Clearwell’s rapid tagging capabilities allow
corporate investigators to easily categorize, track, and manage all emails, discussions,
attachments, and documents for each case. Corporate investigation teams can apply
status codes, critical notes, and assign email and documents for review to any member
of the corporate investigation or sponsoring team. The solution’s secure, role-based
access enables teams to lock down investigators or sponsors to specific evidence associ-
ated with a particular case or set of cases.
Rapidly find all instances of critical evidence: Once a critical piece of evidence is
discovered during a corporate investigation, Clearwell can perform a reverse lookup
across the entire case dataset to find the trail of evidence. Within seconds, this analysis
identifies all those in possession of the evidence, as well as the location where all instances of
the evidence exists.
Prove process integrity: Clearwell tracks every action taken by each investigator (e.g. login,
logout, all searches and query terms, results, tags, print jobs, export jobs, and more) provid-
ing a full reproducible audit trail. Clearwell can automatically produce activity reports
for any investigator and for any investigation across any time frame.
Track status of all corporate investigations, past & present: Clearwell’s real-time ana-
lytics deliver complete visibility and monitoring of past and present case results. Corporate
investigators can drill-down into each case in order to check document analysis and docu-
ment classification status.
Produce proof & integrate with e-discovery production tools: Clearwell can print and
export any range of emails or documents to demonstrate that the relevant terms have been
searched and resulting emails, attachments, and documents have been produced. Corporate
investigators can export in native formats, password protect the files, preserve folder struc-
tures, and export either one file for all custodians or individual files for each custodian.
Find out more today at:
http://www.clearwellsystems.com/solutions/corporate-investigations.php
To schedule a demonstration, contact a Clearwell sales representative at
sales@clearwellsystems.com, or call us at 877.727.9909.
Copyright ©2007 Clearwell Systems, Inc. All rights reserved.
Clearwell, Clearwell Intelligence Platform, Dynamic Content Analysis and Delivering Email Intelligence are trademarks of Clearwell Systems, Inc.