Onna

What to ask before you buy

1. Which collaboration sources are covered, and how does collection work technically?
2. What does the platform do after collection, and where does review happen?
3. Where is collected data stored, and for how long?
4. What does the pricing model rest on, since it is described as built around data rather than headcount?

Limits in the record

• The platform focuses on collection rather than review, so it may sit alongside another product.
• Pricing is described as built around data volume rather than published as a figure.
• The certifications are vendor statements that a firm should verify through the trust center.

How it sits in Document management & e-discovery

This is the collection layer of the category rather than the review layer. It competes on source coverage and compliance posture rather than on review features.

Reading the vendor’s wording

This is one of the strongest published positions in the category: ISO 27001, SOC 2 Type II, and HIPAA certifications, AES-256 encryption, and role-based access controls, all stated on the checked page. The vendor also says collections are controlled and logged. A firm should still confirm which certifications apply to its specific deployment.

How to evaluate it in a trial

1. Confirm which collaboration sources you actually need are covered.
2. Ask where review happens after collection, since this platform focuses on collection.
3. Verify which certifications apply to your specific deployment through the trust center.
4. Confirm the export format for collections and audit logs.

What adopting it costs

The switching cost depends on how much collected data and preservation history lives in the platform. A firm leaving should confirm it can export collections and the associated audit logs.

Closest alternative

Casepoint — The closest alternative. Both emphasise compliance posture for enterprise and government work; Casepoint covers review as well as collection while Onna focuses on collection.