Snapshot 12240
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Exterro Exterro was founded with the simple vision that applying the concepts of process optimization and data science to how companies manage digital information and respond to requests for that information would drive more successful outcomes at a lower cost. Exterro executed on this vision by building a platform-based, comprehensive software suite to address the needs of organizations to manage the risk associated with the data they stored and used. To this day, the company remains committed to our original vision as a provider of data risk management software applications, delivering solutions that help organizations manage information assets more efficiently. Exterro is based in Portland, Oregon. Exterro also has a fully owned development site in Coimbatore, India. compliance@exterro.com Privacy PolicyOpens in new tab Exterro was founded with the simple vision that applying the concepts of process optimization and data science to how companies manage digital information and respond to requests for that information would drive more successful outcomes at a lower cost. Exterro executed on this vision by building a platform-based, comprehensive software suite to address the needs of organizations to manage the risk associated with the data they stored and used. To this day, the company remains committed to our original vision as a provider of data risk management software applications, delivering solutions that help organizations manage information assets more efficiently. Exterro is based in Portland, Oregon. Exterro also has a fully owned development site in Coimbatore, India. If you wish to report a security incident or suspected vulnerability, please email security@exterro.com Compliance ISO 27001:2022 SOC 2 FedRAMP Moderate TiSAX HITRUST UK Cyber Essentials 3.2 Resources View all Policies ISMS Policy Statement Compliance Exterro ISO 27001 Certificate 2025 Exterro SOC 2 Type II Report Exterro SOC2 Bridge Letter 2026 Exterro HITRUST e1 View 7 more SIG Questionnaire Exterro SIG Questionnaire Other resources 2023 Zapproved SOC 2 Type II Report with HIPAA Controls View all Infrastructure security Production environment access restricted Production database access restricted Production OS access restricted View 5 more Infrastructure security controls Organizational security Password policy enforced Visitor procedures enforced Product security Control self-assessments conducted Internal security procedures Change management procedures enforced Production deployment access restricted Development lifecycle established View 12 more Internal security procedures controls Data and privacy Data retention procedures established Data classification policy established Subprocessors View all Amazon Web Services • Public Cloud Infrastructure US, EU, CA Regions Data hosting and storage as selected by customers | AI processing via AWS Bedrock for Exterro Assist Google, Inc • Google Cloud Platform (GCP) United States, EU Data hosting and storage as selected by customers | Exterro-managed AI infrastructure hosting for Exterro Assist Microsoft Azure • Public Cloud Infrastructure United States Data hosting and storage as selected by customers Snowflake • Data Analytics United States Analytics and Legal Hold data archival for customers hosted with AWS US Updates View all Security Gainsight Communication Update Published March 10, 2026 On December 8, 2025, Exterro received an Indicator of Compromise (IOC) notification of a potential data issue with the Gainsight application. Exterro investigated the issue with guidance from the vendor. Exterro has reviewed the issue and has not seen any indication of compromise or unauthorized access to systems that hold customer data. As always, the security and integrity of our systems remain a top priority. We will continue monitoring potential threats and take necessary precautions to safeguard our operations. If you have any questions or concerns about this matter, please don't hesitate to contact us. Thank you for your attention to this update. Security Update: CVE-2024-50623 and CVE-2024-55956 (Cleo Multiple Products) – No Impact on Exterro Published December 19, 2024 We would like to provide an update regarding the recently disclosed vulnerabilities, CVE-2024-50623 and CVE-2024-55956. After thorough review we are pleased to confirm that these vulnerabilities have no impact on Exterro, as our systems do not utilize the affected components. At Exterro, the security and integrity of our systems are of the utmost importance. We remain vigilant in monitoring emerging threats and are committed to implementing all necessary measures to ensure the safety of our operations. If you have any questions or require additional information, please feel free to contact us. Thank you for your continued trust and attention to this matter. Security Snowflake Communication Update Published June 6, 2024 On June 2,2024, Snowflake indicated a recent increase in cyber threat activity targeting customer accounts on its cloud data platform. Snowflake issued a recommendation for users to query for unusual activity and conduct further analysis to prevent unauthorized user access. Exterro has reviewed the provided instructions. Exterro has not seen any indication of compromise or unauthorized access to systems that hold customer data. As always, the security and integrity of our systems remain a top priority. We will continue monitoring potential threats and take necessary precautions to safeguard our operations. If you have any questions or concerns about this matter, please don't hesitate to contact us. Thank you for your attention to this update. Security Update: CVE-2024-3094 - No Impact on Our Firm Published April 4, 2024 We are providing a brief update regarding CVE-2024-3094, a recently discovered vulnerability. We are pleased to inform you that this vulnerability does not impact Exterro. After careful review and analysis, it has been determined that the vulnerability affects a higher version of XZUtils, which we do not utilize in our systems. Our current version is not susceptible to the identified issue. We want to assure you that the security and integrity of our systems remain a top priority. We will continue monitoring potential threats and take necessary precautions to safeguard our operations. If you have any questions or concerns about this matter, please don't hesitate to contact us. Thank you for your attention to this update.