TLDR
Lesley Groff functioned as Epstein's executive assistant and scheduling gatekeeper, coordinating travel, catering, and visitor appointments documented in the 863,000-email corpus. She is named as a co-conspirator in the 2007 Non-Prosecution Agreement, or NPA (a deal where prosecutors agree not to charge someone in exchange for cooperation), alongside Kellen, Ross, and Marcinkova -- receiving federal immunity from prosecution (PAPER TRAIL Project, 2026a). A 2017 email has her arranging tea service for "Maxim and his mom" while another documents a Russian Federation citizen's travel booking through American Express Centurion (PAPER TRAIL Project, 2026b).
Named in the NPA
Before the emails, there was the immunity. The 2007 Non-Prosecution Agreement (Request No. 4 in the House Oversight estate records) names four co-conspirators who received federal immunity from prosecution: Kellen, Groff, Ross, and Marcinkova. This immunity, negotiated by then-U.S. Attorney Alex Acosta's Southern District of Florida office, shielded Groff from federal charges for her role in the Epstein operation (PAPER TRAIL Project, 2026a).
The NPA cast a 12-year shadow, from its September 24, 2007 signing until Epstein's July 6, 2019 arrest on new charges in the Southern District of New York -- a different jurisdiction not bound by the Florida agreement. During those 12 years, the email corpus shows Groff continued to function in exactly the role the NPA identified: scheduling gatekeeper and operational coordinator (PAPER TRAIL Project, 2026b).
Cookies and Tea
The mundane is often the most revealing.
In a verified email sample (document EFTA02212883, dated May 30, 2017), "jeffrey E." sends Groff a request: "cookies or small cakes. tea" for a noon appointment with "Maxim and his mom." This is not a smoking gun. It is something more useful for investigators: documentation that Epstein was actively scheduling personal appointments through Groff in 2017, eight years after his 2008 conviction, two years before his 2019 arrest, while registered as a sex offender (PAPER TRAIL Project, 2026b).
The email footer contains the address jeevacation@gmail.com -- Epstein's vacation email, which serves as a searchable anchor across the 863,000-email corpus (DS9: 531,256 files plus DS11: 331,655 files). Every email bearing this footer ties to the same communication network.
The Russian Federation Booking
A second verified email sample (document EFTA02212885, dated April 24, 2017) documents an American Express Centurion Travel booking for a Russian Federation citizen flying from St. Thomas (STT) to JFK on American Airlines Flight 936. The booking includes Russian-language text and a request to Groff for a "new ticket back to Moscow" (PAPER TRAIL Project, 2026b).
This email places Groff at the intersection of international travel coordination and the USVI operations. Someone with a Russian passport was traveling from St. Thomas -- the island adjacent to Little St. James -- to New York, with onward travel to Moscow. Groff was the person contacted to arrange the ticketing. The Centurion card service indicates the travel was booked through Epstein's high-end credit line.
The DKI PLLC Check
The TD Bank Suspicious Activity Report (a form banks file when transactions look suspicious, known as a SAR) documents a $1,188.72 check from DKI PLLC (Darren Indyke's law practice) to Lesley Groff. The amount is small -- the kind of payment that could represent expense reimbursement, a consulting fee, or compensation for services. What it documents is a financial link between Indyke's law practice and Groff, separate from whatever salary or compensation Groff received from Epstein directly (PAPER TRAIL Project, 2026c).
The SAR characterizes Groff as a "scheduler/travel coordinator for Epstein," confirming that the financial investigators viewed her role the same way the email corpus documents it: the person who coordinated the logistics of daily operations.
The Email Corpus as Evidence
The 863,000 email documents in DS9 and DS11 represent the largest sub-corpus, and Groff's central scheduling role makes her a high-frequency node in the communication network (PAPER TRAIL Project, 2026d). As the person who coordinated appointments, travel, and domestic arrangements, her email address appears in the to, from, and cc fields of correspondence spanning the network's daily operations.
Both data sets use Relativity load file format (a standard format used by litigation review software) with Bates numbering (EFTA_R1_xxxxxxxx), meaning the emails were processed through legal review software before DOJ release. The verified samples date to at least April-May 2017, placing them firmly in the post-NPA, post-conviction period when Epstein was a registered sex offender in both New York and Florida (PAPER TRAIL Project, 2026b).
This temporal placement matters. The NPA gave Groff immunity for pre-2007 conduct. The emails document post-2017 conduct -- scheduling, travel coordination, and visitor management continuing a decade after the immunity agreement. Whether this later activity falls within the scope of the Southern District of New York charges or represents independent criminal exposure is a question for prosecutors, not for the corpus.
The Operational Layer
Groff is not a financial figure in the way that Indyke and Kahn are. She did not sign corporate documents, manage trust accounts, or execute wire transfers. Her role was logistical: who visits, when they arrive, what is served, how they travel. In any organization, the executive assistant knows the schedule. In this organization, the schedule is evidence.
References
PAPER TRAIL Project. (2026a). Non-Prosecution Agreement: Co-conspirator immunity [Corpus document]. Request No. 4.pdf
PAPER TRAIL Project. (2026b). Observations: OBS-7, DS11 email corpus discovery, verified email samples [Research document]. OBSERVATIONS.md
PAPER TRAIL Project. (2026c). TD Bank SAR extraction: DKI PLLC check to Groff, role description [Research document]. td_bank_sar_extraction.md
PAPER TRAIL Project. (2026d). Email corpus: DS9 (531K files) and DS11 (332K files) [Data]. 01_DOJ_DataSets/
U.S. Attorney's Office, Southern District of Florida. (2007, September 24). Non-Prosecution Agreement: Jeffrey Epstein [Court document].