The collection phase involves copying ESI for subsequent use in the discovery process, for example, through a digital forensics provider who can collect ESI in a verifiable manner without altering potentially relevant metadata.