Assign a real review process for Google email quarantine instead of relying on notifications

Quarantine reviewers and notification recipients are not necessarily the same people.

Source facts

Google Workspace quarantine holds matched messages for review before delivery. Administrators can create restricted quarantines and assign reviewer groups, but the documented periodic notification feature sends its notices only to super administrators, not to reviewer groups or users with quarantine privileges. Recipients are not notified that a message is quarantined. Unacted-on messages are permanently deleted from quarantine after 30 days. If a custom quarantine is deleted while holding messages, its messages move to the default quarantine; references from rules must be addressed before deleting the quarantine.

Source: Google — Email quarantine.

Applicability

This concerns Google Workspace email quarantine and its built-in notifications. Separate retention services such as Vault have their own configuration and should not be assumed to provide the same reviewer workflow.

DSE recommendation

DSE recommends naming the daily reviewers, backup reviewers, and escalation owner explicitly. Establish a review cadence and approved evidence handling so missed notification emails do not allow messages to age out unnoticed. Explain to staff how to report a missing message without assuming the recipient will receive a quarantine notice. Before changing or retiring a quarantine, review its referencing rules and outstanding messages. Keep release and rejection decisions attributable, and ensure the review process respects the sensitivity of the held message content.

Verification

Use a harmless test rule and message to confirm the intended quarantine and reviewer access. Check which identities receive periodic notices and whether the recipient receives none. Review the pending-message age and rule references before retiring the test quarantine, then remove the test settings through the approved process.

Official reference

Google — Email quarantine. Reviewed October 15, 2026.