@Breffni-Potter said:
You've still not identified how it is legal or even possible for a complete random to compel me to pay them to search them.
They might not be able to compel you to pay them. but as Dustin said, you might be required to bring in an outsider to do an audit, so then YOU are paying them (the outside auditor) to do said audit. But if you have nothing to audit, there is nothing to pay. Or in this case, if you limited yourself to two years of back email, they would only be spending time going through the last two years, not the last 20+