Is it possible to export restorable items with eDiscovery?

Hi **DT_2026,
**Yes, you can export items from both Deleted Items and Recoverable Items (Deletions, Purges, DiscoveryHolds) using Microsoft Purview eDiscovery. However, you should not rely on folder-based filters or KQL such as folderid:DeletedItems or folderid:RecoverableItems, as Recoverable Items is a hidden system folder and cannot be reliably targeted that way.

To ensure complete results, select the mailbox in Content Search and leave the query empty (or use kind:email). This approach searches the entire mailbox, including hidden Recoverable Items, and guarantees that all retained data is included in the export.

Note that items permanently deleted without any retention policy or Litigation Hold, or items whose retention period has expired, cannot be recovered or exported because they no longer exist in the mailbox.

References Links:
https://learn.microsoft.com/purview/ediscovery-content-search
https://learn.microsoft.com/exchange/security-and-compliance/recoverable-items-folder

Yes. Items in Deleted Items and the Recoverable Items (restorable) folder can be included and exported with Microsoft Purview eDiscovery.

Key points:

1. Use a Content search/eDiscovery search scoped to the mailbox
   • Add the mailbox as a location in the search.
   • Do not try to target Deleted Items or Recoverable Items with a special keyword; folder paths are not exposed as a searchable property in the query builder.
2. Verify that items are in Recoverable Items
   • Run the search and then export a report for the search.
   • In the CSV report, review the file path column to confirm that the items are under the Recoverable Items folder. Items in this folder are still returned by the search and can be exported, but they are not affected by purge actions.
3. Export the results
   • After the search completes, use Export search results in the case to export mailbox content.
   • Choose an export type (for example, Export items with items report) and an export format such as Create PSTs for messages.
   • Download the PST/ZIP from Process manager when the export finishes.

There is no special query needed to “only” get Deleted Items/Recoverable Items; instead, include the mailbox, run the search (with whatever date/keyword filters are required), and then use the export report to identify which of the returned items are in those folders.

References:

• Find and delete email messages in eDiscovery
• Export search results in eDiscovery
• Export eDiscovery search results to a PST file
• Recover deleted messages in a mailbox in Exchange 2013