Exterro

What it is

Exterro sells one platform for four jobs that all touch the same corporate data: legal hold and preservation, eDiscovery, data privacy and subject rights, and digital forensics. Each side arrived by acquisition. Forensics is FTK, the Forensic Toolkit that came with AccessData in December 2020. Legal hold is largely Zapproved, bought January 2023. Jordan Lawrence brought data mapping and retention in June 2019, and Divebell brought data discovery in November 2023. The claim Exterro now makes is that those four products read the same data inventory through a connector layer of more than 190 enterprise sources — so a preservation notice and a DSAR search resolve against one map of where employee data actually sits.

The company is Portland-based, founded and still run by Bobby Balachandran, and majority-owned by Leeds Equity Partners since a May 2018 recapitalization. It reports 822 employees across 11 countries and says half the Fortune 100 are customers. In eDiscovery specifically it holds roughly 8.6% share by 6sense’s tracking — inside the top six by revenue, a long way behind Relativity, and the only vendor at that scale selling forensics and privacy off the same stack.

2026 is the year the roadmap went agentic. Subpoena Manager launched May 11 at CLOC in Chicago, ARMOUR for FTK shipped July 9, and ARMOURop for forensic labs followed July 16. ARMOUR is the frame around all three: a six-level autonomy ladder running from level 0 (email and spreadsheets) to level 5 (autonomous execution across legal, privacy and security). Exterro places Subpoena Manager at level 3 — the agent executes, a human approves at defined checkpoints.

Why it shows up in Legal Ops stacks

• Subpoena response is a real, measurable, unglamorous job nobody built for. eDiscovery platforms start at the matter. Subpoenas arrive by mail, email and portal before a matter exists, and somebody senior spends the afternoon deciding what the document is. Subpoena Manager ingests from any channel, extracts the deadline and the custodians, then drives preservation, collection and review downstream. Exterro’s figures: intake and routing from 90 minutes to as little as five, up to 7,500 hours a year at an enterprise handling around 100 subpoenas a week, more than $500,000 in annual labor at an assumed $75 an hour, up to tenfold throughput. Those are vendor numbers on a vendor-chosen scenario. The shape is still right — high-volume subpoena intake is clerical work currently done by lawyers.
• Legal hold at the volume Zapproved was built for. Custodian notices, acknowledgement tracking, escalation and release, with the preservation record kept as the defensibility artifact rather than a mail-merge log. This is the module most Exterro accounts start with.
• Privacy and litigation share one data map. The same inventory that answers “where does this custodian’s data live” answers a GDPR subject request. Buying DSAR automation and eDiscovery separately means maintaining that map twice, and the second copy is always the stale one.
• Forensics stays in-house. FTK Enterprise and FTK Central mean investigations, incident response and internal misconduct work run on the same evidence chain the litigation team already uses, instead of going out to a forensics vendor at hourly rates.

Pricing reality

Nothing is published. There is no pricing page and no rate card. Subpoena Manager is the one product with disclosed pricing shape: Exterro describes it as SaaS with “flexible on-demand or bulk pricing based on volume,” which means the bill scales with subpoenas received.

For the eDiscovery suite, third-party buyer data puts the entry point at approximately $50,000 a year on a ten-user scenario, with cloud infrastructure billed on top — an estimate, not a quote, and it moves with data volume far more than with seat count. Published 2026 eDiscovery cost guides put processing at roughly $3–10 per GB and hosting at $5–15 per GB per month; those are the per-unit numbers that actually determine an Exterro invoice, and they are what to negotiate. Ask for legal hold, eDiscovery, privacy and FTK as separate line items, because the platform story is a reason to buy, not a reason to accept one bundled number.

Best for

Corporate legal operations and litigation support leads at Fortune 1000 companies that bring discovery in-house, have standing subpoena volume from a regulated business — banking, healthcare, telecom, insurance — and already own the preservation obligation. It is the strongest pick when legal hold, privacy requests and internal investigations are three ongoing programs rather than three occasional projects, because that is where one data inventory beats three good point tools.

Do not buy it for a company whose litigation is episodic and whose data lives entirely in Microsoft 365. At that profile the platform argument collapses and the money buys outside counsel on the matters that actually happen.

Versus the alternatives

Relativity is the share leader and the default when outside counsel runs the matter — the review teams are already trained on it and the data has to land where they work. Pick Relativity when the litigation is big, outsourced and document-heavy. Pick Exterro when the work is in-house, repeatable and starts before a matter number exists.

OpenText is the other top-share incumbent and sells eDiscovery inside a much larger information-management estate. Pick it when the company already runs OpenText for content management and the committee wants one vendor across records and discovery. Pick Exterro when legal, privacy and forensics are the buying centers and records management is somebody else’s problem.

Everlaw is the fastest-growing entrant in the segment — around ten years to $100M ARR, 91 of the Am Law 200, and it made generative review free in 2026 rather than metering it. Pick Everlaw when the complaint is that review is slow and the interface is hostile. It is not an Exterro substitute: Everlaw does not do legal hold at Zapproved’s depth, DSAR fulfilment, or forensics. A company that buys Everlaw still needs a preservation system.

OneTrust is the alternative when privacy is the actual driver and litigation is incidental. It wins on regulatory breadth — consent, assessments, third-party risk. Pick it when the buyer is a privacy officer. Pick Exterro when the buyer is a litigation or investigations lead who also owns privacy requests.

If none of the four fit, the underlying problem is usually that nobody owns the data map. Software queries an inventory; it does not decide what the company keeps or for how long. A retention posture that exists only as a policy PDF produces a faster version of the same exposure.

Watch-outs

• The agentic products are weeks old with no named reference customers. Subpoena Manager launched May 11 and ARMOUR for FTK on July 9; neither press release names a customer, and there is no published deployment at volume. Guard: scope the first agent purchase to subpoena intake and routing only, capture the current 90-minute baseline on 20 real subpoenas before go-live, and negotiate a 12-month exit on that module instead of folding it into a three-year platform term.
• This is a roll-up, and the product names still tell you so. FTK, Zapproved and Divebell were four companies. “One platform” is the sales position; shared data inventory across all four modules is the thing to verify, not assume. Guard: make the proof of concept a single end-to-end path — issue a legal hold, then run a DSAR search against the same custodian and confirm both hit the same inventory without a re-scan. Get the list of modules that share the map in your tenant in writing on the contract start date.
• The AI is retrofitted onto a workflow engine two decades old, and the UX shows it. ARMOUR is a reasoning layer over existing Exterro process automation, which is why the autonomy ladder tops out at “conditional” for the shipped product. Reviewers consistently rate the platform on capability, not on ease of use. Guard: budget training as a line item, name the two people who will actually administer it, and put an admin-certification milestone in the implementation plan before the first live matter.
• Volume-based pricing bills you hardest in the quarter you can least afford it. On-demand subpoena pricing means a regulatory event or litigation wave raises the bill exactly when internal workload spikes. Trade press is not a check on this either — eDiscovery Today, which covered both 2026 launches, discloses Exterro as a sponsor and educational partner. Guard: buy a volume band with a cap and a pre-agreed overage rate rather than pure on-demand, and ask for two reference customers at your subpoena volume in your industry before signing.