Exterro

What It Does

Exterro sells a legal governance, risk, and compliance (GRC) suite that pulls e-discovery, digital forensics, data privacy, and information governance into one product family. The core use cases are running litigation and investigations end to end (legal hold through review and production), responding to data subject and FOIA requests, mapping where personal data lives, and forensic collection from endpoints and cloud sources.

Much of the current breadth came through acquisition. Exterro bought forensics vendor AccessData in 2020 (the maker of FTK), and e-discovery vendor Zapproved in 2023. The result is a platform assembled from several formerly standalone tools rather than one built from scratch — worth knowing when evaluating how tightly the modules actually fit together.

Who It’s For

In-house legal and privacy teams — The GRC framing is aimed at corporate departments that want legal hold, e-discovery, and privacy-request handling under one vendor rather than stitched together from point tools.

Forensics and investigations practitioners — The AccessData/FTK lineage means the forensics module has a long track record in law enforcement and corporate investigations.

Litigation support at larger firms — Used for managed and in-house review, though it competes directly with Relativity and Exterro’s other e-discovery rivals.

What We Found

Exterro was founded in 2004 and is based in Portland, Oregon. It runs at the larger end of the legal-tech vendor scale — LinkedIn lists headcount in the 501-1,000 band. The company is private; it took growth investment from Leeds Equity Partners (2019) and majority investment from Riverside (around 2021), per public reporting.

The product roadmap over the past few years has been acquisition-led: AccessData (2020) and Zapproved (2023) are the two most consequential, expanding forensics and e-discovery respectively. We haven’t done hands-on testing, and we haven’t yet pulled together practitioner review counts or community sentiment for the individual modules.

What We Haven’t Verified

• Exact current headcount — LinkedIn shows a range, not a precise number
• Funding totals and ownership structure — assembled from public reporting on the Leeds and Riverside deals, not from the company directly
• How tightly the acquired modules (AccessData, Zapproved) integrate in practice
• Review-site ratings and r/legaltech sentiment for the individual products