The requirement for the preservation and production of electronically stored information (e-Discovery) is a requirement of the American Federal Rules of Civil Procedure (FRCP). As corporate information is moved to the cloud the fulfilling of these requirements becomes more challenging for enterprises that operate in the USA. As well as the requirements for e-Discovery, organizations often require to undertake forensic examination of assets in order to determine the nature of an attack or to pursue internal investigations. This session will discuss the subject of e-Discovery and Forensics from an enterprise perspective and a framework by which companies subject to these requirements can operate with cloud providers.