1. A method performed by one or more processors comprising: at a provider entity: storing a body of data on a data storage system on behalf of a client entity, the body of data being accessible from the data storage system by the client entity; receiving, from the client entity, additions to the body of data over a period of time; receiving configuration data representing events of interest to be identified at the provider entity, the configuration data based on a configuration established by a user associated with a client entity, the configuration established in a user interface available to users of the client entity; analyzing the body of data stored over the period of time, including: dividing the period of time into discrete intervals; at each of the discrete intervals: identifying, in the body of data, electronic communications stored over the period of time up to a subject interval, at least some of the electronic communications each including data identifying a sender or a receiver, the sender or receiver being an individual associated with the client entity; identifying one or more elements of data that occur in one or more of the electronic communications and meet a threshold frequency of occurrence, and comparing the elements of data identified at the subject interval to one or more elements of data occurring in electronic communications identified at multiple previous discrete intervals prior to the subject interval; and based on the analysis, determining that one of the events of interest represented by the configuration data has occurred, and, in response to the determination, generating results of the analysis for use by the client entity, the results indicating a characteristic of at least one of the individuals associated with the client entity, the characteristic being related to at least one of the elements of data identified in the analysis, and the characteristic being related to the event of interest represented by the configuration data that has been determined to have occurred.