Developer docs
API playgroundTry for free, no card

Search company profiles

Virginia IT Agency

Full company profile

uuid000wx3e

Namestring
Virginia IT Agency
Legal namestring
Virginia Information Technologies Agency
Company typeenum
Private
Founded yearint
2003
Descriptiontext

Virginia Information Technologies Agency (VITA) is the Commonwealth of Virginia's centralized IT services agency, headquartered at 7325 Beaufont Springs Drive in Richmond, VA. The agency provides IT governance, cybersecurity, cloud oversight, project management, and enterprise architecture services to 65-67 state executive-branch agencies and, through statewide contract vehicles, to local government entities, collectively serving more than 8.6 million Virginia residents. VITA operates under statutory authority granted by the Code of Virginia, with the Commonwealth CIO directing the development of ITRM policies, standards, and guidelines that govern all agency technology and security postures.

VITA's core technology and product portfolio includes the Commonwealth Technology Portfolio (CTP), a cloud-based portfolio and project management solution hosted on the Planview platform for tracking IT investments and procurements; COV Ramp (formerly ECOS), a cloud-SaaS oversight and supply-chain management service that requires SOC 2 Type II assessments from suppliers; a 24/7 Security Operations Center with Zero Trust Architecture enforcement; the Project Management Division providing IV&V and training; and the ITRM Policies, Standards & Guidelines suite covering AI governance, information security, project management, and enterprise architecture. Cybersecurity capabilities are delivered through a $285 million GDIT contract and a newer CAI-led statewide SOC vehicle for local governments.

VITA's business model is that of a state agency: operating funds flow from Commonwealth appropriations, while large vendor contracts (GDIT, CAI) and statewide procurement vehicles function as distribution channels for delivering cybersecurity, cloud, and IT services to public-sector customers. Pricing is set through government procurement and competitive RFPs rather than market mechanisms, and services are not sold outside Virginia. Customer concentration is structurally total: a single counterparty (the Commonwealth of Virginia) directly or indirectly consumes all output.

Short descriptiontext

Virginia Information Technologies Agency (VITA) is the Commonwealth of Virginia's centralized IT agency, providing governance, cybersecurity, cloud oversight, and project management services to 65+ state agencies and local governments serving over 8.6 million residents.

Operating statusenum
Operating
Ownership categoryenum
Headcount rangeband
251–500
akta.pro rankint
HeadquartersChester, United Kingdom
HQ citystring
Chester
HQ countrystring
United Kingdom
HQ regionstring
Europe
Markets served

Serves global market

Offices1 record

Each record includes

City, Country, Type, Description, Source

Keyword5 values
government IT services, cybersecurity operations, cloud services oversight, IT governance, state agency procurement
Industry3 codes
1IT Governance, Risk & Compliance (IT GRC) Platforms
CodeHDAEALAKPrimaryYes
2IT Asset Management (ITAM) Platforms
CodeHDAEALADPrimaryNo
3IT Asset Discovery, Inventory & CMDB Services
CodeBPAEAOAEPrimaryNo
NAICS code3 codes
  • Computer Systems Design and Related Services54151
  • Computer Facilities Management Services541513
  • Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services518
SIC code3 codes
  • Services-Equipment Rental & Leasing, Nec7359
  • Services-Computer Programming, Data Processing, Etc.7370
  • Services-Computer Processing & Data Preparation7374
Product category
Government IT Services
GTM motion2 records

Each record includes

Type, Description, Source

Revenue model2 records
1Government Budget and Appropriations
TypeSubscription Recurring
Description

VITA operates as a state government agency funded through Commonwealth of Virginia appropriations and budgets. Services are provided to state agencies as part of centralized IT governance.

investing.com
2Vendor Contract Management
TypeManaged Services
Description

Manages statewide technology contracts including the $285 million GDIT cybersecurity contract and CAI SOC services contract. Vendors provide cybersecurity services to local governments through pre-qualified procurement vehicles.

investing.com
Marketing channels6 records

Each record includes

Title, Type, Stage, Description, Source

Distribution channels3 records

Each record includes

Title, Type, Scope, Target buyer, Description, Source

Cost components4 values
Personnel, Operations, Technology or R&D, Infrastructure
GTM typeB2B
B2B
Offering typeServices
Services
Core offering1 text field

Virginia IT Agency (VITA) is the centralized IT services provider for the Commonwealth of Virginia, delivering IT governance, cybersecurity, cloud services oversight, project management, and procurement support to state agencies and local government entities. Core offerings include the Commonwealth Technology Portfolio (CTP) platform hosted on Planview, the COV Ramp cloud services management service, 24/7 Security Operations Center services, Zero Trust Architecture, the Project Management Division (PMD) with IV&V oversight, and the ITRM Policies, Standards & Guidelines governing AI, enterprise architecture, and information security across 65+ agencies serving 8.6 million Virginians.

Differentiator
Functional benefit
Problem solved
Quantifiable outcome1 of 3 values shown
  • Supports 65 Commonwealth agencies serving 8.6 million Virginians
+2 more records
Product overview1 text field

Virginia IT Agency (VITA) is the central IT services provider for the Commonwealth of Virginia, operating as a portfolio of inter-related governance, security, and technology management products rather than a single unified software product. The core offerings include the Commonwealth Technology Portfolio (CTP) — a Planview-hosted cloud portfolio and project management platform — and COV Ramp (formerly ECOS) — a SaaS oversight and cloud services management service. VITA also delivers Security Operations Center (SOC) services via statewide contracts, maintains the Virginia Cybersecurity Planning Committee (VCPC) for coordinated cybersecurity planning, provides Project Management Division (PMD) services including Independent Verification & Validation (IV&V), and publishes the ITRM Policies, Standards & Guidelines suite governing AI, enterprise architecture, information security, and technology management across 65+ Commonwealth agencies serving 8.6 million Virginians. All offerings are aligned to the Commonwealth's IT governance framework rather than sold as standalone commercial products.

Product and service1 record
1Commonwealth Technology Portfolio (CTP)
Scale indicator5 records

Each record includes

Type, Value, Description, Source

Partnership2 partners
Strategic tierCoreTypeTechnology or IntegrationAnnounced on2026-06-24
Description

CAI, a global services firm, was awarded a statewide contract by VITA to provide Security Operations Center (SOC) services to local government entities across Virginia. The contract creates a pre-qualified procurement vehicle through which Virginia's localities, public bodies and eligible institutions can access CAI's cybersecurity capabilities including continuous threat monitoring, real-time alerting, and incident response. The award follows a competitive Request for Proposal process and addresses a gap that has limited many municipalities' ability to build credible cybersecurity defenses.

Strategic tierCoreTypeTechnology or IntegrationAnnounced on2025-10-01
Description

GDIT secured a $285 million contract from the Commonwealth of Virginia to strengthen the state's cybersecurity infrastructure. The contract includes a one-year transition period, five-year base period, and three one-year option periods. GDIT provides comprehensive cybersecurity services including vulnerability management, zero trust services, and a 24/7 security operations center to VITA, which supports 67 state agencies serving over 8.8 million residents. The contract also includes support for post-quantum cryptography initiatives and plans to leverage artificial intelligence to automate security monitoring.

Recent move5 records

Each record includes

Date, Type, Title, Description, Source

Expansion highlight5 records

Each record includes

Type, Description

Peers10 records
TypeDirect peer
Description

California's centralized state IT agency providing IT governance, cybersecurity, and digital services to state departments. Structurally analogous to VITA as a statutorily authorized central IT authority serving a large state government constituency.

TypeDirect peer
Description

Florida's centralized technology organization within the state's Department of Management Services, providing IT governance and digital services. Comparable as a state-level central IT authority with modernized cybersecurity mandates.

3Multi-State Information Sharing and Analysis Center (MS-ISAC)
TypeOthers
Description

Federally funded cybersecurity ISAC serving state, local, tribal, and territorial governments. Directly aligned with VITA's cybersecurity coordination role across Virginia's localities, though operating at a multi-state rather than single-state level.

TypeBroad incumbent
Description

IT and business consulting services division of CGI serving U.S. federal, state, and local government clients. Overlaps with VITA's portfolio in IT modernization, cybersecurity, and managed services delivery.

TypeBroad incumbent
Description

Large federal IT services prime contractor and VITA's $285M cybersecurity vendor. Provides comparable IT services (managed security, cloud, enterprise IT) to government clients at scale; acts as an execution partner to centralized state IT agencies like VITA.

6NYS Office of Information Technology Services
TypeDirect peer
Description

New York's centralized IT services organization delivering technology services, cybersecurity, and governance to state agencies. Operates a similar centralized-service model with statewide security operations and managed service delivery.

TypeDirect peer
Description

Texas DIR provides statewide IT and telecommunications services, cybersecurity oversight, and cooperative purchasing contracts to state agencies and local governments. Directly comparable to VITA's centralized governance and statewide contract model.

TypeBroad incumbent
Description

Major provider of software and IT services to state and local government, including public sector cybersecurity and digital services. Operates in the adjacent market of technology enablement for government agencies that VITA serves.

TypeDirect peer
Description

Ohio's centralized IT organization providing infrastructure, cybersecurity, and application services to state agencies. Comparable in scope to VITA's role as a multi-agency IT service provider under state governance.

TypeBroad incumbent
Description

Government IT and digital services firm providing technology modernization and operations support to state and federal agencies. Comparable in delivering managed IT services within government contexts at scale.

Market position
Strengths5 records

Each record includes

Headline, Details, Source

Weaknesses5 records

Each record includes

Headline, Details, Source

Competitive moat4 records

Each record includes

Type, Details

Key highlights7 records

Each record includes

Headline, Details, Source

Customer concentration

Classification, Details

Named customers2 records

Each record includes

Name, Industry, Type, Use case, Source, UUID

Segment2 records

Each record includes

Title, Type, Primary, Description, Pain point addressed, Use case, Source

Ideal customer profile2 records

Each record includes

Profile, Firmographic size, Sales motion, Sales cycle length, Buying structure, Purchase trigger, Buyer persona, Geography, Industry vertical, Primary use case, Description, Pain points, Evidence proof points, Target buyer

Technology focused
Yes
API detail
Has APIbool
No

Docs URL, Description

AI maturity
App detail

Has app

Feature4 records

Each record includes

Title, Differentiator, Description, Source

Core technology
Revenue estimate
Valuation estimate
Number of profiles
Profiles2 records

Each record includes

Name, Designation, Designation category, Overview, Profile commentary, Source

No data
Compliance1 record

Each record includes

Name, Class, Description

Funding overview

Funding stage, Last funding date, Total funding USD

Funding rounds

Each record includes

Round, Amount USD, Date, Pre money valuation, Total investors, Investors, News

Investors

Each record includes

Name, Type, Date of entry, Rounds participated, Website

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Each record includes

Name, Acquisition type, Announced date, Completed date, Status, Website, News

Investment

Each record includes

Name, Round, Announced date, Lead investor, Website, News

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Virginia IT Agency

Government IT Servicesvita.virginia.gov

Virginia Information Technologies Agency (VITA) is the Commonwealth of Virginia's centralized IT agency, providing governance, cybersecurity, cloud oversight, and project management services to 65+ state agencies and local governments serving over 8.6 million residents.

What Virginia IT Agency does

Virginia Information Technologies Agency (VITA) is the Commonwealth of Virginia's centralized IT services agency, headquartered at 7325 Beaufont Springs Drive in Richmond, VA. The agency provides IT governance, cybersecurity, cloud oversight, project management, and enterprise architecture services to 65-67 state executive-branch agencies and, through statewide contract vehicles, to local government entities, collectively serving more than 8.6 million Virginia residents. VITA operates under statutory authority granted by the Code of Virginia, with the Commonwealth CIO directing the development of ITRM policies, standards, and guidelines that govern all agency technology and security postures.

VITA's core technology and product portfolio includes the Commonwealth Technology Portfolio (CTP), a cloud-based portfolio and project management solution hosted on the Planview platform for tracking IT investments and procurements; COV Ramp (formerly ECOS), a cloud-SaaS oversight and supply-chain management service that requires SOC 2 Type II assessments from suppliers; a 24/7 Security Operations Center with Zero Trust Architecture enforcement; the Project Management Division providing IV&V and training; and the ITRM Policies, Standards & Guidelines suite covering AI governance, information security, project management, and enterprise architecture. Cybersecurity capabilities are delivered through a $285 million GDIT contract and a newer CAI-led statewide SOC vehicle for local governments.

VITA's business model is that of a state agency: operating funds flow from Commonwealth appropriations, while large vendor contracts (GDIT, CAI) and statewide procurement vehicles function as distribution channels for delivering cybersecurity, cloud, and IT services to public-sector customers. Pricing is set through government procurement and competitive RFPs rather than market mechanisms, and services are not sold outside Virginia. Customer concentration is structurally total: a single counterparty (the Commonwealth of Virginia) directly or indirectly consumes all output.

Virginia IT Agency firmographics

Firmographics
Name
Virginia IT Agency
Legal name
Virginia Information Technologies Agency
Website
https://vita.virginia.gov
Company type
Private
Founded year
2003
Operating status
Operating
Headcount range
251–500 employees
Short description
Virginia Information Technologies Agency (VITA) is the Commonwealth of Virginia's centralized IT agency, providing governance, cybersecurity, cloud oversight, and project management services to 65+ state agencies and local governments serving over 8.6 million residents.
Ownership category
akta.pro rank

Virginia IT Agency industry classification

Industry
Product category
Government IT Services
NAICS
Computer Systems Design and Related Services (54151), Computer Facilities Management Services (541513), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518)
SIC
Services-Equipment Rental & Leasing, Nec (7359), Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Processing & Data Preparation (7374)
akta.pro primary industry
IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK)
akta.pro secondary industries
IT Asset Management (ITAM) Platforms (HDAEALAD), IT Asset Discovery, Inventory & CMDB Services (BPAEAOAE)

Keywords

  • Government IT services
  • Cybersecurity operations
  • Cloud services oversight
  • IT governance
  • State agency procurement

Where Virginia IT Agency is headquartered

Location

Headquarters

HQ city
Chester
HQ country
United Kingdom
HQ region
Europe

Offices1 record

Markets served

Virginia IT Agency business model

Business model
GTM type
B2B
Offering type
Services
Cost components
Personnel, Operations, Technology or R&D, Infrastructure

Revenue model

  1. Government Budget and Appropriations: VITA operates as a state government agency funded through Commonwealth of Virginia appropriations and budgets. Services are provided to state agencies as part of centralized IT governance.
  2. Vendor Contract Management: Manages statewide technology contracts including the $285 million GDIT cybersecurity contract and CAI SOC services contract. Vendors provide cybersecurity services to local governments through pre-qualified procurement vehicles.

Go-to-market motion2 records

Distribution channels3 records

Marketing channels6 records

Virginia IT Agency product offering

Product offering

Core offering

Virginia IT Agency (VITA) is the centralized IT services provider for the Commonwealth of Virginia, delivering IT governance, cybersecurity, cloud services oversight, project management, and procurement support to state agencies and local government entities. Core offerings include the Commonwealth Technology Portfolio (CTP) platform hosted on Planview, the COV Ramp cloud services management service, 24/7 Security Operations Center services, Zero Trust Architecture, the Project Management Division (PMD) with IV&V oversight, and the ITRM Policies, Standards & Guidelines governing AI, enterprise architecture, and information security across 65+ agencies serving 8.6 million Virginians.

Product overview

Virginia IT Agency (VITA) is the central IT services provider for the Commonwealth of Virginia, operating as a portfolio of inter-related governance, security, and technology management products rather than a single unified software product. The core offerings include the Commonwealth Technology Portfolio (CTP) — a Planview-hosted cloud portfolio and project management platform — and COV Ramp (formerly ECOS) — a SaaS oversight and cloud services management service. VITA also delivers Security Operations Center (SOC) services via statewide contracts, maintains the Virginia Cybersecurity Planning Committee (VCPC) for coordinated cybersecurity planning, provides Project Management Division (PMD) services including Independent Verification & Validation (IV&V), and publishes the ITRM Policies, Standards & Guidelines suite governing AI, enterprise architecture, information security, and technology management across 65+ Commonwealth agencies serving 8.6 million Virginians. All offerings are aligned to the Commonwealth's IT governance framework rather than sold as standalone commercial products.

Differentiator

Problem solved

Functional benefit

Products and services

  • Commonwealth Technology Portfolio (CTP)

Quantifiable outcome

  • Supports 65 Commonwealth agencies serving 8.6 million Virginians
  • +2 more outcomes

Companies that use Virginia IT Agency

Customer profile

Named customers2 records

Segments2 records

Ideal customer profiles2 records

Virginia IT Agency technology and API

Technology

Technology focussed Yes

API detail

Has API
No
API docs
API detail

Core technology

AI maturity

App detail

Feature4 records

Virginia IT Agency partnerships and signals

Strategic signal

Partnerships

Two partnerships are on record, tiered core.

  • CAIcoreTechnology or Integration · 24 June 2026CAI, a global services firm, was awarded a statewide contract by VITA to provide Security Operations Center (SOC) services to local government entities across Virginia. The contract creates a pre-qualified procurement vehicle through which Virginia's localities, public bodies and eligible institutions can access CAI's cybersecurity capabilities including continuous threat monitoring, real-time alerting, and incident response. The award follows a competitive Request for Proposal process and addresses a gap that has limited many municipalities' ability to build credible cybersecurity defenses.
  • General Dynamics Information Technology (GDIT)coreTechnology or Integration · 1 October 2025GDIT secured a $285 million contract from the Commonwealth of Virginia to strengthen the state's cybersecurity infrastructure. The contract includes a one-year transition period, five-year base period, and three one-year option periods. GDIT provides comprehensive cybersecurity services including vulnerability management, zero trust services, and a 24/7 security operations center to VITA, which supports 67 state agencies serving over 8.8 million residents. The contract also includes support for post-quantum cryptography initiatives and plans to leverage artificial intelligence to automate security monitoring.

Scale indicators5 records

Recent moves5 records

Expansion highlights5 records

Virginia IT Agency competitors and assessment

Company assessment

Direct peers

  • California Department of Technology: California's centralized state IT agency providing IT governance, cybersecurity, and digital services to state departments. Structurally analogous to VITA as a statutorily authorized central IT authority serving a large state government constituency.
  • Florida Digital Service: Florida's centralized technology organization within the state's Department of Management Services, providing IT governance and digital services. Comparable as a state-level central IT authority with modernized cybersecurity mandates.
  • NYS Office of Information Technology Services: New York's centralized IT services organization delivering technology services, cybersecurity, and governance to state agencies. Operates a similar centralized-service model with statewide security operations and managed service delivery.
  • Texas Department of Information Resources: Texas DIR provides statewide IT and telecommunications services, cybersecurity oversight, and cooperative purchasing contracts to state agencies and local governments. Directly comparable to VITA's centralized governance and statewide contract model.
  • Ohio Department of Administrative Services (DAS) — Office of Information Technology: Ohio's centralized IT organization providing infrastructure, cybersecurity, and application services to state agencies. Comparable in scope to VITA's role as a multi-agency IT service provider under state governance.

Others

  • Multi-State Information Sharing and Analysis Center (MS-ISAC): Federally funded cybersecurity ISAC serving state, local, tribal, and territorial governments. Directly aligned with VITA's cybersecurity coordination role across Virginia's localities, though operating at a multi-state rather than single-state level.

Broad incumbents

  • CGI Federal: IT and business consulting services division of CGI serving U.S. federal, state, and local government clients. Overlaps with VITA's portfolio in IT modernization, cybersecurity, and managed services delivery.
  • General Dynamics Information Technology (GDIT): Large federal IT services prime contractor and VITA's $285M cybersecurity vendor. Provides comparable IT services (managed security, cloud, enterprise IT) to government clients at scale; acts as an execution partner to centralized state IT agencies like VITA.
  • Tyler Technologies: Major provider of software and IT services to state and local government, including public sector cybersecurity and digital services. Operates in the adjacent market of technology enablement for government agencies that VITA serves.
  • Maximus: Government IT and digital services firm providing technology modernization and operations support to state and federal agencies. Comparable in delivering managed IT services within government contexts at scale.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key highlights7 records

Customer concentration

Virginia IT Agency social profiles

Digital presence

Virginia IT Agency compliance and trust

Trust signal

Compliance1 record

Virginia IT Agency financial estimates

Financial estimate

Revenue estimate

Valuation estimate

Virginia IT Agency leadership team

Management profile

Number of profiles

Profiles2 records

Virginia IT Agency funding detail

Funding detail

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

Virginia IT Agency M&A and investment

M&A and investment

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Virginia IT Agency

What does Virginia IT Agency do?

Virginia IT Agency (VITA) is the centralized IT services provider for the Commonwealth of Virginia, delivering IT governance, cybersecurity, cloud services oversight, project management, and procurement support to state agencies and local government entities. Core offerings include the Commonwealth Technology Portfolio (CTP) platform hosted on Planview, the COV Ramp cloud services management service, 24/7 Security Operations Center services, Zero Trust Architecture, the Project Management Division (PMD) with IV&V oversight, and the ITRM Policies, Standards & Guidelines governing AI, enterprise architecture, and information security across 65+ agencies serving 8.6 million Virginians.

Is Virginia IT Agency a public or private company?

Virginia IT Agency is a private company. It is classified as state government owned and is currently operating.

When was Virginia IT Agency founded?

Virginia IT Agency was founded in 2003. It employs 251 to 500 people.

Where is Virginia IT Agency based?

Virginia IT Agency is headquartered in Chester, United Kingdom, in the Europe region.

How does Virginia IT Agency make money?

Two revenue lines are on record. Government Budget and Appropriations are the primary driver. The others are vendor Contract Management.

Who are Virginia IT Agency's main competitors?

Direct peers on record are California Department of Technology, Florida Digital Service, NYS Office of Information Technology Services, Texas Department of Information Resources and Ohio Department of Administrative Services (DAS) — Office of Information Technology. Multi-State Information Sharing and Analysis Center (MS-ISAC) is listed as an others. Broad incumbents are CGI Federal, General Dynamics Information Technology (GDIT), Tyler Technologies and Maximus.

Does Virginia IT Agency have an API?

No public API is recorded for Virginia IT Agency.

What industry is Virginia IT Agency in?

Virginia IT Agency's product category is Government IT Services. Its primary akta.pro industry code is HDAEALAK, IT Governance, Risk & Compliance (IT GRC) Platforms, with a secondary code of HDAEALAD, IT Asset Management (ITAM) Platforms. Its NAICS code is 54151 and its SIC code is 7359.

Unlock the full company data

50 free credits on sign-up, no credit card required.

Contact sales
Live signals
GovtechVirginia Elevates Deputy CIO, Security Leader to State CIOVirginia Governor Abigail Spanberger appointed Mike Watson as CIO of the Virginia Information Technologies Agency, succeeding Bob Osmond, who was nominated to lead Delaware's state IT office. Watson, who served as deputy CIO and CISO for over 14 years, will oversee security strategy and IT operations. Osmond's nomination, announced April 6, would lead Delaware's Department of Technology and Information if confirmed.WVTFA 2025 Virginia audit flags IT, grant monitoring issuesVirginia's Auditor of Public Accounts issued a 2025 report identifying compliance and security deficiencies across more than a dozen state agencies, universities, and affiliated hospitals, with findings spanning grant-handling issues at multiple departments and IT security control failures. The audit specifically found that the Department of Social Services had inadequate monitoring of Medicaid grant subrecipients, while the Virginia Information Technologies Agency was cited for failing to complete required systems assessments for five agencies. Security experts cited in the report warned that improper management of employee system access after departures or terminations poses particularly high risk, as departing users possess detailed knowledge of internal systems.PR NewswireEverlaw is Approved by Virginia IT Agency as Ediscovery VendorEverlaw, a cloud-native investigation and litigation platform, has been selected and approved by the Virginia Information Technologies Agency (VITA) for a multi-year standardized contract, establishing Everlaw as a standard ediscovery provider for Virginia's state and local government entities. VITA conducted an extensive evaluation and pre-vetted Everlaw's security, effectiveness, and pricing, leveraging the company's FedRAMP and StateRAMP authorizations. The approval enables government organizations across the Commonwealth to easily procure Everlaw's self-service platform for litigation, investigations, public records requests, and legal holds.