Tool Overview:
Exterro

About Exterro

Exterro is a Legal GRC (Governance, Risk, and Compliance) software platform designed for in-house legal, privacy, and IT teams at large organizations. The company's core offering, FTK (Forensic Toolkit), is a digital forensics and e-discovery solution used by law enforcement agencies, corporate legal departments, and law firms. Founded by Bobby Balachandran, who serves as CEO, Exterro has positioned itself as a provider of integrated solutions for managing complex data risks, privacy compliance, and digital investigations.

What does Exterro do?

The platform's primary function is to help organizations manage their legal and regulatory obligations while addressing security risks around data. At its core, FTK provides digital forensics capabilities, including the ability to collect, process, and analyze data from various sources such as mobile devices, computers, and cloud services. The software can handle data from multiple platforms, including Windows, Mac, iOS, and Android systems, with features for parsing chat messages, internet artifacts, and other digital evidence.

Exterro's DSAR (Data Subject Access Request) solution enables organizations to process privacy rights requests with identity validation and automated language support. The platform includes data inventory capabilities that help organizations identify where potentially responsive data resides within their systems. For forensic investigations, FTK offers features such as entity management, which automatically groups mobile and computer data by device user, and lab-to-court report building for evidence presentation.

What makes Exterro different?

A distinguishing aspect of Exterro's platform is its integration capabilities across various data sources. The software can collect data from off-network endpoints, cloud services like Google Drive and Microsoft Teams, and mobile devices. The platform supports automated workflows through FTK Connect, which can integrate with cybersecurity platforms for automated evidence preservation upon cyber intrusion detection.

The software's processing engine is designed for large-scale operations, supporting collection from up to 20,000 endpoints simultaneously. For internal investigations, Exterro provides remote collection capabilities that work even when devices are outside the corporate network or VPN. This feature has become particularly relevant as organizations adapt to managing investigations with remote workforces.

Use cases and industries

Exterro serves several distinct user groups. Law enforcement agencies use the platform for digital forensic investigations, particularly in cases involving multiple devices or complex digital evidence. Corporate legal departments employ the software for internal investigations, data breach response, and compliance management. Law firms and Legal Service Providers (LSPs) utilize the platform for e-discovery and breach review services.

The platform addresses specific industry challenges such as responding to cyber incidents, managing privacy compliance requirements, and conducting internal investigations. For cybersecurity teams, FTK provides capabilities for rapid triage of compromised endpoints and automated evidence preservation. Privacy teams can use the platform to manage data subject access requests and maintain data inventories. Legal teams can leverage the software for e-discovery, managing litigation risks, and ensuring regulatory compliance.