A program not yet publicly operational, and an untested Computer Fraud and Abuse Act defense

Aug 15, 2026

Editor’s Note: A presidential memorandum signed Aug. 12 tells the federal government to build a program that is not yet publicly operational, admitting vetted private companies to run surveillance and disruption operations against foreign criminal networks. Four weeks earlier, a bill landed in Congress to authorize much the same activity, with protections the memorandum cannot supply.

The consequences arrive on three fronts. Counsel weighing participation face a memorandum that names the Computer Fraud and Abuse Act as a boundary without waiving it, and that appears drafted to bring program work inside the statute’s law-enforcement exception. No court has tested whether that works. Information governance teams face a disclosure duty whose reach the memorandum leaves undefined. Discovery practitioners face a prospective evidence class built under federal direction, where the state-actor question and the preservation trigger both turn on facts nobody has yet.

One ambiguity sits underneath all of it. The memorandum has participating companies conducting operations, while the provision delegating approval authority describes department personnel doing so. A participant that never touches a foreign system carries far less exposure.

Watch two dates. Operating procedures are due on or about Oct. 11, the first status report on or about Feb. 8, 2027. Neither carries a publication requirement.

Content Assessment: A program that does not exist yet already has a Computer Fraud and Abuse Act problem

Information - 93%

Insight - 91%

Relevance - 90%

Objectivity - 90%

Authority - 89%

91%

Excellent

A short percentage-based assessment of the qualitative benefit expressed as a percentage of positive reception of the recent article from ComplexDiscovery OÜ titled, "A program that does not exist yet already has a Computer Fraud and Abuse Act problem."

Industry News – Cybersecurity Beat

A program not yet publicly operational, and an untested Computer Fraud and Abuse Act defense

ComplexDiscovery Staff

President Donald Trump signed a memorandum Aug. 12 directing the federal government to build a program that would let vetted private companies hack foreign criminal networks under government control. The program is not yet publicly operational, and neither is there a settled answer to the legal question at its center.

The document, titled “Expanding Capabilities to Combat Transnational Cyber-Enabled Crime,” instructs the National Coordination Center to create and run a program admitting what the memorandum calls Participating Companies, private U.S. firms that would carry out two categories of operation against foreign cyber-enabled transnational criminal organizations. The White House fact sheet issued the same day describes the document as a national security presidential memorandum. It follows Executive Order 14390 and the administration’s cyber strategy, both issued March 6. The memorandum cites the order.

A program not yet publicly operational

The memorandum builds a framework for approving operations. On its own it authorizes none, and none has been announced. Two program executive directors, one drawn from the Justice Department and designated by the attorney general, the other drawn from Homeland Security, have 60 days to establish operating procedures, a deadline that lands on or about Oct. 11. The memorandum conditions approval on compliance with those procedures, so nothing can be approved until they are in place. Whether they are finished is not public.

No company has been named. The Record reported that the White House did not respond to questions about whether any firm had agreed to participate; TechCrunch reported that the White House did not immediately respond to the same question. Neither SecurityWeek nor BleepingComputer identified a participant. Vendors reading coverage that says the government has authorized private hacking should read the document instead, which says the government has ordered a program built.

One further thing the document leaves unsettled conditions much of what follows. The memorandum has Participating Companies conducting Cyber Surveillance Operations and Cyber Effects Operations. Yet the provision delegating approval authority to the two directors describes cyber operations conducted within the program by personnel of their respective departments. Read one way, companies execute and the government supervises. Read the other, companies build capability and propose targets while Justice and Homeland Security personnel do the touching. Wiley Rein lawyers, writing Aug. 14, treated the question as unresolved on the face of the text. The answer moves the legal exposure a long way: a company that never reaches into a foreign system has a much smaller Computer Fraud and Abuse Act problem than one that does.

The coordinating body has an unusual pedigree. The memorandum traces the National Coordination Center to Executive Order 14159 of Jan. 20, 2025, “Protecting the American People Against Invasion,” and specifically to that order’s Section 6(d). Section 6 establishes Homeland Security Task Forces in every state. Its stated objectives run to criminal cartels, foreign gangs and transnational criminal organizations operating inside the United States, to human smuggling and trafficking networks, and to enforcement of the immigration laws. Subsection (d) directs the attorney general and homeland security secretary to provide an operational command center to coordinate task force activity. The order’s published text does not use the name National Coordination Center, and the words cyber and computer do not appear in it. The center now told to stand up an offensive cyber program was created, under a different name, by an immigration enforcement order.

The statute the memo tells companies to obey

Section 2(b) is where a prospective participant’s counsel should stop reading and start writing memos. It directs the center to conduct all program activities consistent with the Constitution and other applicable law and international obligations, including Section 1030 of Title 18, the Computer Fraud and Abuse Act. The memorandum invokes the statute as a boundary. It does not waive it, cannot waive it, and nowhere purports to.

Set that against the memorandum’s own definition of a Cyber Surveillance Operation, which covers collecting information or intelligence from systems where the operator intends to go unnoticed, and which states that such operations entail accessing systems without authorization from the owner or operator, or by exceeding authorized access. Those are the CFAA’s operative phrases, lifted into the definition of the conduct the program would approve.

The open question is whether the statute’s escape hatch reaches this program, and it cuts both ways. Section 1030(f) provides that the section does not prohibit lawfully authorized investigative, protective or intelligence activity of a law enforcement agency of the United States, a state or a political subdivision of a state, or of an intelligence agency of the United States. The exemption is written around the agency whose activity it is. The statute says nothing express about private parties performing that activity under federal direction, and it does not say the activity must be carried out by agency employees.

The memorandum reads as though drafted with that provision in mind. It casts program work as federal law enforcement activity, conducted on the government’s behalf, under federal supervision and subject to written approval. That is the argument for coverage. No prosecution or civil suit has tested it. A company weighing participation is pricing an untested reading of a criminal statute rather than relying on a settled one.

Three Jenner & Block lawyers flagged this gap five months before the memorandum issued. Writing in Lawfare on March 9 about the cyber strategy released March 6, partner Aaron R. Cooper, a former prosecutor in the Justice Department’s Computer Crimes and Intellectual Property Section, associate Philip Chertoff, and partner Shoba Pillay, also a former federal prosecutor, said no court has addressed whether the law enforcement exception protects private-sector entities engaged to perform such activities on the government’s behalf. Until Congress enacts legislation creating affirmative legal authority and liability protection, they said, the CFAA and state computer crime statutes remain in force whatever an executive document says, and companies should not rely on informal assurances that violations will not be prosecuted. Their firm advises the kind of company that would weigh participation, which is worth knowing when reading the advice. Five months on, the memorandum supplies the government-direction argument they anticipated, and leaves the question they identified exactly where it was.

Prosecution is only half the exposure. Section 1030(g) creates a civil remedy, but a narrower one than its first sentence suggests. A suit may be brought only where the conduct involves one of five enumerated factors: loss of at least $5,000 in a year, impairment of medical care, physical injury, a threat to public health or safety, or damage to a government computer used for justice, national defense or national security. Where only the loss threshold is met, damages are limited to economic damages. An action must begin within two years of the act complained of or of the discovery of the damage.

So the exposure is real but bounded. A claim would have to clear those thresholds and survive standing, causation and immunity questions, on facts nobody has yet. The memorandum’s general provisions do not help here either, and they are broader than they first read: the document creates no right or benefit enforceable against the United States or any other person. That governs what the memorandum itself creates. It does not reach a claim the statute makes independently available.

The Supreme Court has narrowed one of the statute’s two access theories and expressly left the other’s boundary open. Van Buren v. United States, decided June 3, 2021, held that a person exceeds authorized access by obtaining information from areas of a computer that are off-limits, not by misusing information he was entitled to obtain. In footnote 8, the Court said it need not address whether the access inquiry turns only on technological limitations or also on limits contained in contracts or policies. The memorandum’s definition names accessing without authorization first, and that is the clause whose outer boundary the Court declined to fix.

For counsel advising a prospective participant, the practical consequence is that the operating procedures due in October are operational and contractual safeguards rather than a legal safe harbor. They will govern how the government supervises the work. They cannot change what the statute permits. Build the CFAA analysis as a standing document now, before the procedures land, so the eventual comparison runs against a written baseline. Make the government’s written approval and direction, which the memorandum requires for every operations package before the company may act, a condition precedent in the contract rather than an operational courtesy.

Why collected evidence changes character under federal direction

A search by a private party acting on its own initiative sits outside the Fourth Amendment. A search by a party acting as an instrument or agent of the government does not, and in Skinner v. Railway Labor Executives’ Association, decided March 21, 1989, the Supreme Court looked to the government’s encouragement, endorsement and participation in sorting one from the other. The memorandum speaks to that axis three times, in three different formulations. Section 1 describes partnering with vetted companies subject to the direction and oversight of the federal government. Section 2(a) puts the operations themselves under the control and oversight of the federal government. The definition of Participating Companies has them conducting cyber operations under the direction of the United States Government. Those are the sentences a suppression motion will quote. Where any given operation falls is fact-specific, which is exactly why the facts need documenting while they are still fresh.

A second question sits beside it. Mayer Brown lawyers, writing Aug. 14, asked whether collection under the program would amount to electronic surveillance within the meaning of the Foreign Intelligence Surveillance Act, or would otherwise require a court order. The memorandum’s own answer is the authorization it requires before activity directed at a U.S. person is approved, judicial or otherwise. What that phrase covers, and who decides, is left to the procedures.

Commercial threat-intelligence workflows were not built to produce that record. They log telemetry, not authorization. Work the sequence backward from the courtroom and the gaps are obvious. A defendant challenging evidence traceable to a program operation will ask which director approved the package, in what writing, on what date, against what target list, under which rubric, and whether the activity stayed inside approved parameters. None of that lives in a threat-intelligence platform.

The preservation duty is the part that arrives first and gets noticed last. It is a common-law duty that Federal Rule of Civil Procedure 37(e) presupposes rather than creates, and the rule reaches information that should have been preserved in the anticipation or conduct of litigation. Anticipation is the trigger, not service of a subpoena, and the duty stays matter-specific: participation alone does not make any particular dispute reasonably foreseeable. What participation does is make the triggering events predictable. An exceedance notice, an unintended domestic contact, a misidentified target, a threatened claim or a government inquiry could each make litigation foreseeable and call for a documented preservation decision. A firm that treats an exceedance notice as an incident ticket rather than a moment to run that assessment is likelier to start its retention clock late. Scope the hold to the authorization ledger, the target packages, the approval correspondence and the minimization records, and write that scope down before there is a matter to write it for.

Then comes the collision practitioners should expect. A Rule 34 request aimed at operations packages meets a program whose operational workflow and targeting adjudication must in part conform to a classified annex, which means the responsive material and the standard governing it can sit on opposite sides of a classification boundary. Proportionality arguments get strange when the producing party cannot describe the burden without describing the program. Expect protective orders, ex parte submissions and government intervention in matters where the government is not a party, and expect the first few rounds to set the pattern for everything after.

The memorandum builds in its own tripwires, and each one generates paper. Procedures must require a company that discovers activity exceeding approved parameters, including unintentional targeting of a U.S. person, a system residing in the United States, or a system under a U.S. person’s control, to stop, run minimization and notify the center, which notifies the Justice Department. A separate provision requires immediate notice if a company discovers an imminent attack on U.S. critical infrastructure or comes to believe an approved operation may produce Critical Outcomes, the memorandum’s term for action likely to cause loss of life or serious injury or to rise to the level of use of force or armed attack under international law. Program executive directors may not approve operations producing those outcomes.

The document is not indifferent to domestic exposure. Procedures must also ensure that any program activity aimed at a U.S. person carries whatever authorization it needs, from a court or from somewhere else, before the operation wins approval. The same requirement reaches activity that implicates what the government owes under the Constitution, under federal statutes, or under international law. Read alongside the notification duties, that provision is the memorandum’s answer to the domestic-spillover objection. Whether it holds depends entirely on procedures nobody outside the program has seen, and the memorandum does not say they will ever be published.

Reading the government’s $20.8 billion loss figure

The fact sheet says American consumers reported losing over $20.8 billion to cyber-enabled crime in 2025, and that 73 percent of U.S. adults have experienced some kind of online scam or attack. It does not name a source for either figure, or for any of the other statistics it cites.

The nearest public figure, and the most recent available as of August 2026, is the FBI’s 2025 Internet Crime Complaint Center annual report, which gives $20.877 billion in losses across 1,008,597 complaints. The report characterizes that total as losses reported to IC3, not as consumer losses, and its category totals include $3.046 billion in business email compromise. The report also notes that its figures capture only what is reported to the FBI. The fact sheet’s version truncates where the underlying total rounds to $20.9 billion, and relabels the population that reported it. Practitioners citing the government’s number in board materials should cite the FBI report and its framing instead.

How far the commercial-agreement disclosure reaches

The operating procedures must require participating companies to disclose to the center all contractual relationships entered under the program’s commercial-agreements provision, the one letting them take threat information from private entities and from federal, state, local, tribal and territorial agencies. Wiley Rein read that as broader than the subcontractor disclosures federal contractors are used to. What the memorandum does not say is how far it reaches: whether contract text, customer identities or data-processing terms travel with the disclosure, or only the fact of the relationship. Separately, procedures must provide for evaluating each company for continued participation at least annually. The memorandum does not expressly tie the two together, so whether disclosures must be refreshed at each review is one of the questions the October procedures will answer.

Managed-detection and threat-intelligence vendors should assume their customer agreements, data-processing addenda and privacy notices are in scope for revision. A customer whose telemetry feeds a proposed government operation has an interest in knowing that, and a contract silent on the point is a contract that will be read against its drafter.

Buyers of those services have the more immediate task, because the disclosure architecture runs through them and they currently have no contractual visibility into it. Four questions belong in the next renewal. Does the provider intend to seek admission to the program, and will it say so in writing. Does the current agreement permit customer telemetry to be routed into a proposed government operation, and if the agreement is silent, whose reading of silence governs. What notice, if any, would the customer receive, and does it survive a government instruction not to give it. And if customer-identifying material accompanies the required disclosure, how will the government handle it, and will the disclosure have to be refreshed at annual review. A right to advance notice, an express carve-out of customer data from program submissions, and an audit right over what gets disclosed are all cheaper to negotiate now than to litigate later.

The financial gate is explicit. Procedures must authorize the two departments to require a bond or escrow of not less than $1 million, forfeitable on contractual non-compliance, alongside standards for technical proficiency, prior performance of cyber operations, facility security and personnel vetting. The memorandum directs that procedures leave room for smaller, agile firms alongside large ones, which reads as an acknowledgment that the standards will otherwise function as a market gate. If they do, buyers should expect a two-tier market within a year, in which a handful of cleared providers market federal adjacency as a differentiator and everyone else answers questions about why they are not in the program.

What to settle before the 60-day clock expires

Personnel exposure is the risk the document addresses least. Jake Williams, identified by TechCrunch as vice president of research and development at Hunter Strategy, said in remarks that outlet reported that Americans taking part in these operations could be labeled non-uniformed combatants while traveling abroad, and that such allegations need not be true to cause harm. Underneath that sits the ordinary version of the same risk: other countries have computer crime statutes too, and a U.S. company’s operation does not become lawful in the target’s jurisdiction because a U.S. official approved it in writing. Firms with staff or assets abroad should treat travel policy, entity structure and insurance as part of the participation decision rather than as an afterthought to it.

Reaction split, and it did not sort by who stands to sell into the program. Most of the voices on the record work in or around the security industry, and they landed on every side of it. Michael Garcia, a former CISA official now at Monument Advocacy, told CyberScoop he reads the memorandum as a philosophical shift in policy, and said he worries about attribution, about striking a foreign government by accident, and about the absence of court oversight. On that last point the two things sit together rather than in conflict: the memorandum’s one judicial hook, the authorization required before activity directed at a U.S. person is approved, does not reach operations aimed abroad, which is nearly all of them.

Davi Ottenheimer, an independent security consultant, reached for the same historical comparison this article does and did not intend it as a compliment: he told CyberScoop that letters of marque fell out of favor in the 1800s for good reason, given the violence they unleashed, and called the memorandum an embarrassment to the country. Joshua Steinman, a White House cyber official in Trump’s first term, told the outlet that Russia and China already operate this way at scale and framed the memorandum as parity. Will Barker, a cybersecurity adviser at Huntress, said in written comments to CyberScoop that the guidance due in 60 days is what will matter.

Two more industry voices reached the record the same day. CyberScoop and BleepingComputer both reported Veracode co-founder Chris Wysopal describing the move as a large shift in U.S. cyber policy, and Jason Kikta, a former Cyber National Mission Force official now at Automox, questioning it as a generator of billable work rather than of security outcomes.

Congress has been circling this idea for years, and the most recent attempt landed four weeks before the memorandum issued. The Cyber Letters of Marque and Reprisal Act, introduced July 15 by Sen. Mike Lee, R-Utah, as S. 5000, with a House companion introduced the same day by Rep. Tim Burchett, R-Tenn., as H.R. 9697, would let the president issue letters of marque and reprisal against foreign cyber threats, and it would require the private recipients to post security bonds and log what they do. Lee’s bill went to the Senate Foreign Relations Committee, Burchett’s to House Foreign Affairs. Neither chamber has enacted it, and the same holds for the Active Cyber Defense Certainty Act in 2017 and a marque-and-reprisal bill, H.R. 4988, introduced in 2025.

Set the bills beside the memorandum and the structural overlap is hard to miss: vetted private operators, government-defined missions, bonding, recordkeeping and reporting, and restrictions around U.S. persons. The bills go considerably further. They would supply express congressional authorization, permit seizure and repatriation of assets, fund bounties out of recovered proceeds, prescribe activity logs and bar causes of action for the conduct they authorize. That last item is the one the executive branch cannot write for itself, and it is the one a general counsel would most want to see. The Jenner & Block authors, writing in March, read the record as leaving the statutory position unchanged. An executive document that directs compliance with the CFAA does not alter what the CFAA prohibits.

Two dates now govern. Operating procedures are due on or about Oct. 11, and the first program status report goes to the deputy chief of staff for policy and homeland security adviser and to the national cyber director on or about Feb. 8, 2027, annually after that. Neither date carries a publication requirement. The memorandum directs that the procedures be established and that the report be delivered inside the government, and it says nothing about releasing either. Counsel should plan for the possibility that the first binding terms of this program become known to participants through a contract negotiation rather than through a public document, with parts of the operational workflow and the targeting adjudication conforming to a classified annex they will never see.

Which raises the question every general counsel in this market will face by autumn. If the safeguards are contractual rather than statutory, and the government can revise them, and the criminal statute underneath has never been tested against this arrangement, what would your board need to see before you signed that contract?

News sources

Expanding Capabilities to Combat Transnational Cyber-Enabled Crime (The White House)
Fact Sheet: President Donald J. Trump Expands Capabilities to Combat Transnational Cyber-Enabled Crime (The White House)
Executive Order 14159: Protecting the American People Against Invasion (Federal Register)
Executive Order 14390: Combating Cybercrime, Fraud, and Predatory Schemes Against American Citizens (GovInfo)
18 U.S.C. 1030: Fraud and related activity in connection with computers (Office of the Law Revision Counsel)
Van Buren v. United States, No. 19-783 (Supreme Court of the United States)
Skinner v. Railway Labor Executives’ Association, 489 U.S. 602 (Justia)
Federal Rule of Civil Procedure 37 (Legal Information Institute)
2025 Internet Crime Report (FBI Internet Crime Complaint Center)
Trump Admin Cyber Strategy Centers Private Sector in Offensive Cyber Operations (Lawfare)
Trump turns to private sector in offensive hacking operations memo (CyberScoop)
Trump taps cyber firms to go on offensive against criminals (The Record)
In a first, US will allow some private firms to carry out cyberattacks (TechCrunch)
White House Mobilizes Security Firms for Operations Against Foreign Cybercrime Gangs (SecurityWeek)
White House taps security firms for offensive hack-back operations (BleepingComputer)
A bold new strategy or a dangerous precedent? Experts are divided on Trump memo (CyberScoop)
Lee Bill Authorizes American Hackers to Fight Foreign Cyberattacks (Office of Sen. Mike Lee)
Mike Lee runs bill allowing American hackers to target foreign cyberthreats (KSL)
Navigating the New Presidential Memorandum on Transnational Cyber Enabled-Crime (Wiley Rein LLP)
Presidential Memorandum Authorizes Vetted Private Companies to Conduct Offensive Cyber Operations Against Foreign Criminal Organizations (Mayer Brown)
5000, Cyber Letters of Marque and Reprisal Act, as introduced (GovInfo)
H.R. 9697, Cyber Letters of Marque and Reprisal Act, as introduced (GovInfo)

Assisted by GAI and LLM technologies

Additional reading

Source: ComplexDiscovery OÜ

ComplexDiscovery’s mission is to enable clarity for complex decisions by providing independent, data‑driven reporting, research, and commentary that make digital risk, legal technology, and regulatory change more legible for practitioners, policymakers, and business leaders.

Have a Request?

If you have information or offering requests that you would like to ask us about, please let us know, and we will make our response to you a priority.

ComplexDiscovery OÜ is an independent digital publication and research organization based in Tallinn, Estonia. ComplexDiscovery covers cybersecurity, data privacy, regulatory compliance, and eDiscovery, with reporting that connects legal and business technology developments—including high-growth startup trends—to international business, policy, and global security dynamics. Focusing on technology and risk issues shaped by cross-border regulation and geopolitical complexity, ComplexDiscovery delivers editorial coverage, original analysis, and curated briefings for a global audience of legal, compliance, security, and technology professionals. Learn more at ComplexDiscovery.com.

Generative Artificial Intelligence and Large Language Model Use

ComplexDiscovery OÜ recognizes the value of GAI and LLM tools in streamlining content creation processes and enhancing the overall quality of its research, writing, and editing efforts. To this end, ComplexDiscovery OÜ regularly employs GAI tools, including ChatGPT, Claude, Gemini, Grammarly, Midjourney, and Perplexity, to assist, augment, and accelerate the development and publication of both new and revised content in posts and pages published (initiated in late 2022).

Market Sizing

Editor's Note: The eDiscovery Market Size Mashup is a research tool now in its fourteenth annual cycle. Since 2012, it has tracked the worldwide eDiscovery market through three structural eras: the early-cloud era, when subscription consumption began to displace perpetual licensing; the AI-assisted-review era, when predictive coding reset per-document review economics; and the demand-and-response era that defines 2025 through 2030, when generative-AI-assisted review and emerging agentic workflow features compress per-document cost against a data curve growing roughly five times faster than the dollars available to discover it.

The purpose has remained consistent across the cycles: to give legal technology executives, consultants, analysts, service providers, investors, and corporate legal teams a reconciled mid-range view of the market that is internally consistent, methodologically disclosed, and updated each year against the latest available data. The 2025 to 2030 cycle places the worldwide eDiscovery market at an estimated $19.61 billion in 2025 and a projected $28.08 billion by 2030, a reconciled 7.44 percent compound annual growth rate. Underneath the aggregate trajectory sits the central arithmetic of the cycle: a 27.6-percentage-point annual gap between data growth and market growth that compounds across five years into a 3.13-times productivity-per-dollar mandate by 2030. Each of the twelve Market Intelligence installments published across this cycle examined a single segmentation lens. The consolidated synthesis that follows brings those lenses together as one citable reference for procurement, capability planning, market analysis, and vendor-selection decisions through the back half of the decade. [exclude_from_rss]

[taq_review]

[/exclude_from_rss] Industry Research - eDiscovery Market Sizing Beat

Complete look: ComplexDiscovery OÜ's 2025 to 2030 eDiscovery market size mashup

A synthesis of the worldwide eDiscovery market across software, services, deployment, geography, sector, delivery, task share, and the demand-side data growth curve, reconciled within the ComplexDiscovery OÜ eDiscovery Marketplace Mashup Model ComplexDiscovery OÜ Staff Two numbers shape worldwide eDiscovery through 2030, and they do not move at the same pace. The dollars to discover potentially relevant information rise from approximately 19.61 billion in 2025 to approximately 28.08 billion by 2030, a multiplier of 1.4 times. The data those dollars must reach rises from approximately 181 zettabytes in 2025 to approximately 812 zettabytes in 2030, a multiplier of 4.5 times. By the end of the decade, the same dollar must cover roughly 3.13 times more data than it does at the start. That arithmetic, larger than any single segment shift or composition change, is the structural force underneath this cycle of the mashup. The 3.13-times productivity-per-dollar mandate that compounds out of the gap is a primary force underneath much of what follows. It pressures software to take share from services as channel billing shifts toward AI-driven workflows. It pressures review's relative share of task spend to decline even as review dollars rise. It pressures cloud-first procurement to become the operational default. And it sits alongside other structural dynamics including subscription consumption migration, direct-buyer maturation, and supplier consolidation. None of those other dynamics is reducible to the productivity mandate alone, but each operates in a market where the mandate sets the demand-side ceiling. What follows is a tour of how the mandate lands across each segmentation lens explored in this cycle of the Market Intelligence series, from the aggregate market line down through software, services, deployment, cloud composition, geography, sector, delivery approach, task share, and the demand-side data growth curve underneath all of it.

The shape of the worldwide market

The reconciled view places the worldwide eDiscovery market at approximately 19.61 billion dollars in 2025, rising to approximately 28.08 billion dollars by 2030, a compound annual growth rate of approximately 7.44 percent. Software, the smaller of the two segments in absolute terms, grows at roughly 10.41 percent. Services, the larger segment, grows at roughly 5.75 percent. The 4.66-percentage-point segment CAGR gap translates into a 5-percentage-point composition shift across the five-year horizon. Software's share of total worldwide eDiscovery spend rises from 34 percent in 2025 to 39 percent in 2030; services' share falls correspondingly from 66 percent to 61 percent. Services remains the larger segment by absolute spend through 2030; the segment crossover point falls outside the 2025 to 2030 window.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/05/eDiscovery-Market-Sizing-Past-and-Projected-2026.pdf" title="eDiscovery Market Sizing - Past and Projected - 2026"] Chart: eDiscovery Market Sizing, Past and Projected (2012 to 2030)

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/06/eDiscovery-Software-and-Services-Market-2025-2030.pdf" title="eDiscovery Software and Services Market (2025-2030)"] Chart: eDiscovery Software and Services Market (2025 to 2030)

Software's outperformance is not a fluke of the moment. The 4.66-percentage-point CAGR gap is, in large measure, the segment-level expression of an AI-driven channel reallocation: the same review workflow that once generated services revenue at a per-document or per-hour rate increasingly generates software revenue at a SaaS subscription or AI-inference rate. The work has not disappeared, and in many cases has expanded as data volumes grow, but the channel through which the work gets billed has steadily shifted from services to software. Services growth is slower but structurally durable; cross-border data, regulatory exposure, advisory work, and specialized response work sustain the services line even as software automates discrete tasks. The services segment in 2030 will not be a slower-growing version of the services segment of 2025; it will be a different mix.

How the composition is changing

Within the software segment, the cloud-first transition that has been underway for the better part of a decade is now functionally complete for new deployments. Off-premise software grows from approximately 5.29 billion dollars in 2025 to approximately 8.87 billion dollars in 2030, while on-premise software grows from 1.37 billion to 2.08 billion. On-premise solutions persist where security, sovereignty, or contractual constraints require them, but they are no longer the default for new procurement.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/05/eDiscovery-Software-Market-2025-2030-On-Off-Premise.pdf" title="eDiscovery Software Market (2025-2030) - On + Off Premise"] Chart: eDiscovery Software Market, On and Off Premise (2025 to 2030)

The more interesting subplot is inside the cloud category. SaaS holds roughly two-thirds of cloud spend in 2025 (approximately 67 percent) and drifts to approximately 63 percent by 2030 as PaaS and IaaS components compound at faster rates. PaaS rises from 15 percent of cloud spend to 17 percent; IaaS rises from 18 percent to 20 percent. The reason is simple: as advanced eDiscovery workloads incorporate large-scale processing, AI inference, vector search, and complex data engineering, customers and providers are increasingly integrating directly with platform and infrastructure services. Some of that integration appears in vendor SaaS revenue, and some appears as direct PaaS or IaaS spend.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/06/eDiscovery-Cloud-Software-Market-2025-2030.pdf" title="eDiscovery Cloud Software Market (2025-2030)"] Chart: eDiscovery Cloud Software Market (2025 to 2030)

Services growth lags software growth, but the headline number understates the qualitative shift inside services. Traditional managed-review revenue faces continued pricing compression as AI-assisted review compresses billable hours. Advisory services (litigation readiness, information governance, AI risk advisory) grow on the back of regulatory complexity. Specialized response work (forensic collection, second-request response, cross-border data transfer, regulatory inquiry support) grows at premium rates. The services segment in 2030 will not be a slower-growing version of the services segment of 2025; it will be a different mix.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/05/eDiscovery-Services-Market-2025-2030.pdf" title="eDiscovery Services Market (2025-2030)"] Chart: eDiscovery Services Market (2025 to 2030)

Where the money is going

The United States continues to anchor the worldwide market, accounting for roughly 66 percent of global spend in 2025 and easing to roughly 64 percent in 2030. The shift toward rest-of-world is gradual but real, driven by the maturation of data protection regimes outside the United States, the internationalization of regulatory inquiries, and the gradual buildout of regional capacity. Within rest-of-world, the United Kingdom, Canada, Germany, Australia, and Japan continue to claim the largest sub-shares, with rising activity in Singapore, India, and parts of the Middle East.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/06/eDiscovery-Market-Geographical-Overview-2025-2030.pdf" title="eDiscovery Market Geographical Overview (2025-2030)"] Chart: eDiscovery Market Geographical Overview (2025 to 2030)

The reconciliation distinguishes between government and regulatory demand on one hand and non-government (private-sector) demand on the other. Both grow over the period; non-government grows faster in both percentage and absolute terms. Non-government growth reflects expansion in civil litigation, internal investigations, corporate compliance, and AI-related risk advisory work. Government and regulatory growth reflects persistent investigative activity, ongoing premerger notification work, parallel inquiries in the European Union and the United Kingdom, and continued cross-border regulatory coordination.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/06/eDiscovery-Government-and-Non-Government-Market-Overview-2025-2030.pdf" title="eDiscovery Government and Non-Government Market Overview (2025-2030)"] Chart: eDiscovery Government and Non-Government Market Overview (2025 to 2030)

Segmenting worldwide spend by who captures the direct economic transaction (corporations and governments, law firms, or service providers) reveals a clear picture. The corporations-and-governments category remains the dominant channel throughout the period, reflecting continued in-house consumption supplemented by direct vendor procurement. Service providers grow faster than law firms over the forecast period. Law firms increasingly act as orchestrators rather than primary procurement channels, with the work and the dollars flowing around them.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/06/eDiscovery-Market-By-Direct-Delivery-Approach-2025-2030.pdf" title="eDiscovery Market By Direct Delivery Approach (2025-2030)"] Chart: eDiscovery Market by Direct Delivery Approach (2025 to 2030)

The task shift, and why it matters

The most consequential structural shift in the industry is not visible in the aggregate market line. It is in the composition of where eDiscovery dollars get spent across the three core tasks of collection, processing, and review. Review remains the largest single task expenditure throughout the period, but collection and processing capture increasing absolute and relative shares. Across a longer horizon, from RAND Corporation's 2012 baseline through ComplexDiscovery OÜ's 2025 modeling and 2030 forecast, review's share of total task spend has fallen from 73 percent to a reconciled 62 percent to a projected 52 percent: a 21-percentage-point decline across 18 years. Collection, over the same span, has expanded over threefold, from 8 percent to a projected 25 percent, a 17-percentage-point gain. Processing has been comparatively stable, rising from 19 percent to 23 percent.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/05/eDiscovery-Market-By-Task-2025-2030.pdf" title="eDiscovery Market By Task (2025-2030)"] Chart: eDiscovery Market by Task (2025 to 2030)

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/06/Relative-Task-Expenditures-for-Core-eDiscovery-Tasks.pdf" title="Relative Task Expenditures for Core eDiscovery Tasks"] Chart: Relative Task Expenditures for Core eDiscovery Tasks (2012, 2025, 2030)

The pace of the rebalance is accelerating. Roughly 47 percent of the 18-year share movement happens in the final five years from 2025 to 2030. Review's 5-year decline of 10 percentage points nearly equals the prior 13-year decline of 11 percentage points. The trend is consistent with a demand-and-response dynamic rather than two independent forces operating in parallel. The demand side is the growth in data volume subject to potential collection. The supply-side response is AI-assisted review's compression of per-document review costs, with predictive coding through the prior decade, generative-AI-assisted review through the current decade, and emerging agentic workflow features as the next compression wave. Data growth raises absolute review work to be done; AI compression compresses per-document review prices. Whether the resulting absolute review spend rises, falls, or stays flat depends on the relative pace of the two. In the reconciled view, review absolute spend continues to grow modestly, from approximately 12.16 billion dollars in 2025 to approximately 14.60 billion dollars in 2030, but materially slower than the aggregate market, which is why review's share declines. For practitioners and providers, the practical consequence is that capacity decisions made today should anticipate the structural drift toward collection-heavy and processing-heavy task profiles.

The demand side, data growth as the underlying force

Worldwide data volumes are projected to grow from approximately 181 zettabytes in 2025 to approximately 812 zettabytes in 2030, a compound annual growth rate of approximately 35 percent. Enterprise-held data, the subset most relevant to discoverable information, expands from approximately 54 zettabytes to approximately 243 zettabytes over the same period at the same rate, holding steady at roughly 30 percent of the global total. The 181 zettabyte 2025 anchor is consistent with IDC's Global DataSphere baseline. The 35 percent CAGR through 2030 reflects the Mashup Model's reconciliation across data-universe forecasts and enterprise-specific projections, and sits on the upper end of published industry growth estimates. It is higher than IDC's headline total-data forecast trajectory and lower than the most aggressive AI-content-driven projections.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/06/Data-Volume-and-Growth-in-Zettabytes-2025-2030.pdf" title="Data Volume and Growth in Zettabytes (2025-2030)"] Chart: Data Volume and Growth in Zettabytes (2025 to 2030)

The 35-percent data CAGR set against the 7.44-percent eDiscovery market CAGR is the central arithmetic of the cycle. Across the five-year horizon, global data multiplies roughly 4.5 times (4.484x, from 181 to 812 zettabytes); the worldwide eDiscovery market multiplies roughly 1.4 times (1.432x, from 19.6 to 28.1 billion dollars). Divide one by the other and the productivity-per-dollar requirement falls out: 4.484 ÷ 1.432 ≈ 3.13. By 2030, the same dollar must process, store, search, review, and produce against roughly 3.13 times more data than it did in 2025 just to maintain the same coverage ratio. That is not a marginal improvement. It is the productivity mandate that defines the decade for the industry. The mandate sits underneath several of the shifts documented above: the segment-level CAGR gap reflects the channel through which the productivity gain flows; the task-share rebalance reflects where the gain lands at the workflow level. AI capability compounding (predictive coding through the prior decade, generative-AI-assisted review through the current decade, emerging agentic workflow features as the next compression wave) is the bridge that must close the gap. Whether the bridge closes the gap fully, partially, or in stages depends on the pace at which the current generation of tooling matures, the pace at which agentic features move from product roadmap to production deployment, and whether the industry holds to full-coverage discovery as the standard or moves toward risk-tiered coverage that reserves the most intensive workflows for the documents that matter most. The mandate sets the ceiling; the answer to how the ceiling gets met is the open question of the decade.

What the reconciled view implies

The reconciled view supports a small set of interpretive points, none of them prescriptive, all of them grounded in the figures. For software vendors, the 10.41 percent reconciled software CAGR outpaces services by 4.66 percentage points a year, and the vendors positioned to capture a disproportionate share of incremental software dollars are those integrating AI-assisted review, modular SaaS delivery, and platform-aware processing into the same product surface. For service providers, slower nominal growth does not imply a less attractive market. It implies a different one. Providers that reposition around higher-value advisory and specialized regulatory response can outpace the segment headline. For law firms, the modest share of direct economic transactions captured by law firms suggests a continued shift toward orchestration and advisory positioning rather than primary procurement. For corporate and government legal teams, in-house consumption continues to dominate the direct delivery approach. Build-versus-buy on internal capabilities, governance over AI use in discovery, and readiness for second-request response remain the central program-level questions. For investors and analysts, the dynamics support a continued investment thesis around cloud-native, AI-enabled software platforms, with margin pressure on traditional services and continued consolidation at the supplier level.

Closing the loop

At the start of this analysis, the cycle was framed around two numbers that do not move at the same pace: 19.61 billion dollars rising to 28.08 billion against 181 zettabytes rising to 812 zettabytes. The productivity-per-dollar mandate that compounds out of that gap, 3.13 times by 2030, is not a forecast of efficiency. It is a measurement of pressure. The segment, task, and channel shifts documented above are the visible places where the pressure shows up. AI capability compounding is the bridge that must close the gap. Whether the industry meets that pressure through AI-assisted tooling alone, or moves toward a structural redefinition of what discovery coverage means in practice, from full coverage of every potentially relevant artifact to risk-tiered coverage that reserves the most intensive workflows for the documents that matter most, is the open question of the decade. The mashup measures the pressure. The industry answers it.

About the Model behind these figures

All quantitative figures in this analysis are drawn from the ComplexDiscovery OÜ eDiscovery Marketplace Mashup Model, a proprietary analyst-aggregation framework that reconciles publicly available third-party research, vendor disclosures, and industry reference work into a single defensible mid-range view of the worldwide eDiscovery market. The Model is a research aggregation tool maintained by ComplexDiscovery OÜ. It is not distributed publicly and does not constitute primary research; figures cited here represent reconciled estimates aligned to a common scope, geography, and timeframe.

This Mashup is the public synthesis vehicle for the Model's 2025 to 2030 cycle. It provides the consolidated reconciliation across software, services, deployment, cloud composition, geography, sector, delivery approach, task composition, long-horizon task share, and data growth, along with a representative listing of the organizations and publications that inform the Model's source aggregation.

Methodology

The scope of this synthesis is the worldwide eDiscovery market, encompassing software and services, expressed in U.S. dollars, across calendar years 2025 through 2030. Reconciliation of varying market definitions, geographic scopes, and source methodologies is presented as ranges with assumptions disclosed where precise alignment is not possible. The 2012 task baseline cited in the long-horizon task share section derives from the RAND Corporation 2012 study by Pace and Zakaras. Compound annual growth rates are derived using the standard formula ((End divided by Start) raised to the power of one over the number of years) minus 1, with five years as the denominator unless otherwise noted. The 3.13-times productivity mandate is a coverage-flat ratio (data multiplier divided by market multiplier), not a forecast of realized productivity gains.

Citing this analysis

The primary citable resource for the figures and analysis in this article is the ComplexDiscovery OÜ eDiscovery Marketplace Mashup Model. The Model is the aggregated research artifact maintained by ComplexDiscovery OÜ since 2012 and is the appropriate citation when referencing data points, projections, segmentation, or analyses derived from any ComplexDiscovery annual eDiscovery market size mashup. Suggested citation: Robinson, R. (2026). 2025 to 2030 eDiscovery Market Size Mashup (H. Robinson, Ed.). ComplexDiscovery OÜ.

Sources informing the Model

The listing below provides an overview of the organizations and publications whose data points have informed the development of the Model over time. The Model itself aggregates publicly available content (including abstracts, excerpts, quotes, references, and data points) from these sources, with inputs collected since the inaugural ComplexDiscovery eDiscovery Market Size Mashup in 2012. Individual entries are presented for transparency about Model construction and are not the appropriate citation for figures appearing in this analysis; readers referencing figures should cite the Model. Market modeling rounding may result in slight differences in aggregate numbers.

360 Market Updates / 360iResearch
Aberdeen
ACG Partners
Allied Market Research
American Medical Association
BMC
Catalyst Investors
ComplexDiscovery OÜ eDiscovery Marketplace Mashup Model (incorporating industry news, editorial analysis, eDiscovery Business Confidence Surveys, eDiscovery Pricing Surveys, and prior Annual eDiscovery Market Size Mashups since 2012)
CS Disco
Discovery & Legal Technology Association (DLTA)
eDiscovery Journal
EY
Facts and Factors
Forbes
FRONTEO (UBIC)
Future Market Insights
Gartner
Georgetown Law Center for the Study of the Legal Profession and Thomson Reuters Legal Executive Institute
Global Industry Analysts
Grand View Research
Greentarget
Harvard Business Review
Houlihan Lokey
i360
IBIS World
IDC
Industry eDiscovery Provider, Analyst, and Investor Briefings and Discussions
Industry Observer Estimations (Multiple Observers)
Industry Research (Company)
KLDiscovery
Markets and Markets
Mordor Intelligence
Nasdaq
Nuix
P&S Market Research
Prescient & Strategic Intelligence
RAND Institute for Civil Justice
Relativity Fest, Industry Panel Discussions
Reports and Data
Research and Markets
Richmond Journal of Law and Technology
Statista
The Conference Board
The Radicati Group
Third-Party Market Studies (Independent Industry Briefings)
Transparency Market Research
U.S. Bureau of Economic Analysis
U.S. Department of Commerce, International Trade Administration
U.S. Securities and Exchange Commission (public company filings)
Zion Market Research

Market Intelligence series reports (2025-30 eDiscovery market size mashup)

[the_ad id="45753"]

Assisted by GAI and LLM Technologies Additional reading

Source: ComplexDiscovery OÜ

ComplexDiscovery’s mission is to enable clarity for complex decisions by providing independent, data‑driven reporting, research, and commentary that make digital risk, legal technology, and regulatory change more legible for practitioners, policymakers, and business leaders.

[taq_review]

[/exclude_from_rss] Industry Research - eDiscovery Market Sizing Beat

Complete look: ComplexDiscovery OÜ's 2025 to 2030 eDiscovery market size mashup

The shape of the worldwide market

How the composition is changing

Where the money is going

The task shift, and why it matters

The demand side, data growth as the underlying force

What the reconciled view implies

Closing the loop

About the Model behind these figures

Methodology

Citing this analysis

Sources informing the Model

360 Market Updates / 360iResearch
Aberdeen
ACG Partners
Allied Market Research
American Medical Association
BMC
Catalyst Investors
ComplexDiscovery OÜ eDiscovery Marketplace Mashup Model (incorporating industry news, editorial analysis, eDiscovery Business Confidence Surveys, eDiscovery Pricing Surveys, and prior Annual eDiscovery Market Size Mashups since 2012)
CS Disco
Discovery & Legal Technology Association (DLTA)
eDiscovery Journal
EY
Facts and Factors
Forbes
FRONTEO (UBIC)
Future Market Insights
Gartner
Georgetown Law Center for the Study of the Legal Profession and Thomson Reuters Legal Executive Institute
Global Industry Analysts
Grand View Research
Greentarget
Harvard Business Review
Houlihan Lokey
i360
IBIS World
IDC
Industry eDiscovery Provider, Analyst, and Investor Briefings and Discussions
Industry Observer Estimations (Multiple Observers)
Industry Research (Company)
KLDiscovery
Markets and Markets
Mordor Intelligence
Nasdaq
Nuix
P&S Market Research
Prescient & Strategic Intelligence
RAND Institute for Civil Justice
Relativity Fest, Industry Panel Discussions
Reports and Data
Research and Markets
Richmond Journal of Law and Technology
Statista
The Conference Board
The Radicati Group
Third-Party Market Studies (Independent Industry Briefings)
Transparency Market Research
U.S. Bureau of Economic Analysis
U.S. Department of Commerce, International Trade Administration
U.S. Securities and Exchange Commission (public company filings)
Zion Market Research

Market Intelligence series reports (2025-30 eDiscovery market size mashup)

[the_ad id="45753"]

Assisted by GAI and LLM Technologies Additional reading

Source: ComplexDiscovery OÜ

ComplexDiscovery’s mission is to enable clarity for complex decisions by providing independent, data‑driven reporting, research, and commentary that make digital risk, legal technology, and regulatory change more legible for practitioners, policymakers, and business leaders.

Complete look: ComplexDiscovery OÜ’s 2025 to 2030 eDiscovery market size mashup

Marketing

The one question that reveals whether your marketing plan is actually a plan

Business Confidence

Confidence cools, commitment holds: full results from the 1H 2026 eDiscovery Business Confidence Survey

M&A

eDiscovery M&A tracker update: nine deals and two themes

Strategy

Editor's Note: Many operating leaders will recognize the deal review where the quarter and the strategy give opposite orders, and organizations without an explicit ranking tend to resolve the conflict the same way: whichever gravity is loudest that week wins. The companion article The Unanimous Launch Review Is a Strategic Warning Sign argues that the condition has a name and a doctrine.

Clausewitz counseled reducing centers of gravity to one wherever possible and treating what cannot be reduced as separate ventures. Goodhart's law explains what can happen when a revenue target is promoted to a job it cannot hold. Gyroscopic precession, offered explicitly as an analytical device rather than an organizational law, provides the central image for the analysis: pressure that surfaces somewhere other than where it was applied. A counterargument section takes the strongest objection seriously: for public companies and cash-constrained startups, revenue gravity may become externally constrained rather than freely chosen. The caution from the companion article carries over. Deliberate analysis of this kind belongs inside planning, not outside it, and readers tempted to dismiss the discussion as overthinking should note that the two-gravity wobble is what undeliberated strategy can look like from the inside. The opening scene is hypothetical, drawn from recurring patterns rather than any documented case. Watch for the three-question diagnostic at the end, and especially the second question: Where did last quarter's pressure surface this quarter? [exclude_from_rss]

[taq_review]

[/exclude_from_rss] Industry Research - Technology Beat

A strategy needs one dominant center of gravity

ComplexDiscovery OÜ Staff Consider a hypothetical deal review, drawn from recurring patterns across B2B technology rather than from any documented case. The quarter needs one more win, and the pipeline offers one: a large opportunity from a segment the strategy deliberately declined to serve. The revenue plan says take it. The market focus says the custom work will fracture the whole product, dilute the reference base, and stall the mainstream crossing the company spent two years engineering. Both answers are correct by the logic that produced them, which is precisely the problem. The organization is orbiting two centers of gravity, and sooner or later it can obey only one. This analysis extends the companion article, "The unanimous launch review is a strategic warning sign," which borrowed Carl von Clausewitz's center of gravity for commercial use: the focal point that holds a system together, in the reading Antulio Echevarria II developed for the U.S. Army War College. That reading is influential but not uncontested; Eystein L. Meyer's survey of contemporary theories in Defence Studies shows the concept's definition remains in genuine doctrinal dispute, and this analysis adopts Echevarria's version as its working lens rather than as settled scholarship. The companion article pointed the concept outward, asking which single point in the market the strategy depends on most, so resources can concentrate against it. This analysis turns the concept inward and asks a harder question: what is the focal point inside the company, and what happens when there are two candidates for the job? One caution travels with the borrowing, here as in the companion analysis. Business is not war, and the gyroscope that appears later in this analysis is an analytical device, not a demonstrated law of organizations. What the metaphors offer is structure: a disciplined way to think about why organizations chasing two focal points at once can experience effects that arrive late, surface in the wrong department, and compound with every correction. The two candidates deserve names first.

Two pretenders to the same throne

This analysis distinguishes two ideal types that can compete inside a technology company, often without anyone consciously choosing between them. In a revenue-gravity company, the thing that holds the system together is the number. The quarterly target organizes the pipeline reviews, the compensation plans, the board narratives, and eventually the product roadmap, because whatever closes deals gets built. In a focus-gravity company, the thing that holds the system together is a chosen offering-and-market intersection: the beachhead segment, the whole product built for it, and the reference base accumulating within it, the discipline Geoffrey Moore's chasm framework prescribes. Each gravity produces coherent behavior on its own terms, and that internal coherence is what makes the condition hard to see from inside. The trouble emerges at decision points where the two issue opposite orders. The revenue gravity says take the off-segment deal that makes the quarter, discount to close, and staff the custom work. The focus gravity says decline the deal, hold the price that signals category position, and spend the engineering quarter deepening the whole product. Clayton Christensen's resource-allocation framework in "The Innovator's Dilemma" helps explain the institutional version of this pull: allocation tends to follow the revenue that current customers represent, and a strategic bet can be starved without anyone explicitly deciding to starve it. A company that has not chosen between them rarely splits the difference. It tends to obey whichever gravity is loudest that week, and the strategy risks becoming the residue of the deal calendar.

One dominant center, or two honest strategies

Clausewitz's framework offers a close analogy for that unranked condition, and his prescription was unusually direct. In the war plans book of "On War," he advised reducing the enemy's power into "as few centres of gravity as possible," and into one if it could be done, in the 1873 Graham translation; the Howard and Paret rendering likewise makes tracing centers of gravity back to a single one the first task in planning for war. Echevarria's monograph stresses the same discipline from the original German: trace the full weight of force to as few centers as possible. Where the reduction to one center cannot be made, Clausewitz concluded, the conflict is better understood as two separate wars, each with its own objective. The commercial translation is both uncomfortable and clarifying. Within this framework, an organization claiming two centers of gravity has ranked neither, and what it holds in practice is an oscillation; its strategy documents describe a company that does not exist on any given Tuesday. The resolution is a hierarchy rather than compromise. For a single-market growth strategy, the kind the companion analysis maps, this analysis treats the offering and market focus as the center of gravity, because it is the thing that gives every other activity coherence: what to build, whom to reference, where to price, which deals to decline. The revenue target is instrumentation, the gauge that reports whether the gravity is working and when the plan needs revision. Gauges matter; instrument flying depends on them. But no pilot confuses the altimeter with the destination, and the deal review that opened this analysis resolves in one sentence once the hierarchy is explicit: the deal is evaluated by what it does to the focus, not by what it does to the quarter.

Goodhart's law and the promoted metric

A named principle explains what happens when the hierarchy inverts. The economist Charles Goodhart observed in 1975 that statistical regularities tend to collapse once pressure is placed on them for control purposes, an observation drawn from monetary policy, where indicators that reliably tracked inflation stopped tracking it after central banks adopted them as targets. The anthropologist Marilyn Strathern later gave the principle the phrasing most people quote, in a 1997 paper on audit culture in British universities: "When a measure becomes a target, it ceases to be a good measure." Goodhart himself has credited her generalization. A revenue target promoted to center of gravity risks becoming Goodhart's law running at company scale. The number can stop measuring the business and start deforming it: discounting concentrating at quarter's end, off-segment custom work colonizing the roadmap, a reference base filling with customers the whole product was never built for, and a metric that once reported strategic health reporting mainly the organization's skill at feeding it. The pattern need not involve fraud or deliberate misconduct; it can arise from rational, lawful responses to the incentives leadership created, which is why the risk of distortion is predictable and recurring. The gauge was asked to be the destination, and it obliged.

Rigidity, precession, and the widening wobble

The physics of spinning bodies offers two behaviors that map onto the two company conditions described above, and both are standard fare in aviation training literature. The first is rigidity in space: a body spinning around a single axis resists forces that would change its orientation, with resistance that grows with the rotor's angular momentum, a function of rotational speed and how its mass is distributed. That is the reward of one center of gravity. A company aligned around a single focus, hit by a competitor's price cut, a lost lighthouse account, or a bad quarter, can wobble and right itself, because every function is already oriented to the same axis and knows which corrections are in bounds. The second behavior is gyroscopic precession, and it is the more illuminating of the two. As flight training handbooks and pilot associations describe it, a force applied to a spinning body does not produce its maximum effect at the point of application; in the simplified gyroscopic model, the response appears approximately 90 degrees around the plane of rotation, in the direction of spin. Push on one point of the spinning disc and the movement appears a quarter turn away. Helicopter rotor-control systems account for this phase relationship by placing control inputs ahead of the desired response; simplified training explanations commonly describe the offset as approximately 90 degrees. One boundary matters before borrowing further: that 90-degree displacement is spatial, not temporal. The suggestion that organizational consequences emerge quarters later is a separate analytical analogy layered onto the image, not a prediction derived from the physics. Translated carefully, and again as device rather than law, the borrowed image describes something many operating executives will recognize: pressure applied to an organization often produces its effect somewhere other than where the pressure lands, and often on a delay. Leadership leans on the number in the third quarter, discounting and admitting off-segment deals, and the effect may not appear as third-quarter revenue health. It can surface quarters later and departments away, as churn among customers the product was never meant for, as margin erosion the pricing team inherits, as a roadmap bent toward one large account, as a reference base that confuses the next prospect. Push on pipeline volume and the strain can emerge in customer success. Push on price and it can emerge in product. When the effect is displaced and delayed, the org chart tends to assign the symptom to the wrong owner and treat it with a second push. The dual-gravity company can experience this as a widening oscillation. A correction made in service of one gravity can create strain on the other, prompting a harder counter-correction, which displaces further: sales pressure bends the product, product discipline reasserts itself and the quarter is missed, and the miss produces more sales pressure. The cycle can widen until leadership either re-chooses a single axis or the oscillation overwhelms the strategy. If that happens, the result may later be recorded as a strategy that failed, when what may actually have failed was the decision to have one.

When revenue is the binding constraint

The strongest counterargument deserves the floor before the close, because revenue is not always instrumentation, and for some companies it cannot be. A public company operates under fiduciary obligations and may issue guidance that shapes market expectations and heightens disclosure risk, while debt covenants or liquidity requirements can make near-term financial performance a binding constraint; a cash-constrained startup nearing the end of its runway faces a similar constraint for survival reasons. In those situations, revenue gravity may become externally constrained rather than freely chosen. The off-segment deal has honest defenses of its own: sometimes the large out-of-profile customer is not a distraction but a discovery, early evidence of a better market than the one in the plan, and sometimes custom work finances product development the focused strategy could not otherwise afford. And diversified enterprises legitimately run several strategies at once, funding an emerging bet from a mature line. The framework's answer to each of these is not denial but disclosure, and it echoes both Clausewitz's separate-wars condition and the governance separation Geoffrey Moore's "Zone to Win" prescribes for enterprises. Where one center cannot lead, declare the condition explicitly: rank the priorities for the period the constraint governs, treat a genuinely promising off-segment deal as a deliberate strategy question rather than a quarter-end reflex, and give distinct ventures distinct governance rather than letting an undeclared tie be broken deal by deal. The failure mode this analysis targets is not the company that consciously ranks revenue first for a defined season under a binding constraint. It is the company that never ranked at all.

Three questions to find your axis

How does a leadership team learn which company it is? The diagnostic condenses to three questions in the companion piece's idiom. First, when your revenue target and your market focus last gave opposite orders in a deal review, which one won, and who decided, because the honest answer names your actual center of gravity regardless of what the strategy document claims. Second, where did last quarter's applied pressure surface this quarter, because tracing one pressure-and-effect cycle through your own organization is the fastest way to make the displacement visible and to reassign symptoms to their true causes. Third, does your company describe itself by its number or by its market, because the language of self-description is where the real gravity hides in plain sight.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/07/one-center-of-gravity-three-questions.pdf"]

The companion analysis argued that a launch review reaching quick unanimity is a room too small for its decision. The two-gravity company is the same failure at a larger scale: internal logic, locally coherent, mistaken for market truth, with the correction arriving late and landing somewhere unexpected. Clausewitz's counsel scales down without losing its edge. Reduce to one center if it can be done, and if it cannot, admit that you are running two ventures and resource them honestly as two. So the next time the number and the niche give opposite orders, which will your organization obey, and did anyone decide that in advance?

Article sources

On War, Book 8, Chapter 9 (Graham translation, 1873) (ClausewitzStudies.org)
On War, Book 8, Chapter 4 (Graham translation, 1873) (ClausewitzStudies.org)
Reference compilation of On War passages in the Howard and Paret rendering (Clausewitz.com)
Clausewitz's center of gravity: changing our warfighting doctrine, again! (Strategic Studies Institute, U.S. Army War College)
The centre of gravity concept: contemporary theories, comparison, and implications (Defence Studies)
Gyroscopic precession (Aircraft Owners and Pilots Association)
Gyroscopic flight instruments (SKYbrary)
The unanimous launch review is a strategic warning sign (companion analysis) (ComplexDiscovery OU)
Complete look: ComplexDiscovery OU's 2025 to 2030 eDiscovery market size mashup (ComplexDiscovery OU)
Reliance on metrics is a fundamental challenge for AI (Cell Press)

Works referenced

Carl von Clausewitz, "On War" (1832); Michael Howard and Peter Paret translation, Princeton University Press, 1976 (modern standard English edition); J.J. Graham translation, 1873 (public domain, used for verbatim quotation).
Charles Goodhart, "Problems of Monetary Management: The U.K. Experience" (1975); the principle restated in his entry in The Encyclopedia of Central Banking (2015).
Marilyn Strathern, "Improving Ratings: Audit in the British University System," European Review 5(3), 1997.
Geoffrey A. Moore, "Crossing the Chasm," HarperBusiness, 1991; third edition, HarperCollins, 2014.
Clayton M. Christensen, "The Innovator's Dilemma," Harvard Business School Press, 1997.
Geoffrey A. Moore, "Zone to Win: Organizing to Compete in an Age of Disruption," Diversion Books, 2015.
David Manheim and Scott Garrabrant, "Categorizing Variants of Goodhart's Law," arXiv preprint, 2018.

Assisted by GAI and LLM Technologies Additional reading

Source: ComplexDiscovery OÜ

ComplexDiscovery’s mission is to enable clarity for complex decisions by providing independent, data‑driven reporting, research, and commentary that make digital risk, legal technology, and regulatory change more understandable for practitioners, policymakers, and business leaders.

[taq_review]

[/exclude_from_rss] Industry Research - Technology Beat

A strategy needs one dominant center of gravity

Two pretenders to the same throne

One dominant center, or two honest strategies

Goodhart's law and the promoted metric

Rigidity, precession, and the widening wobble

When revenue is the binding constraint

Three questions to find your axis

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/07/one-center-of-gravity-three-questions.pdf"]

Article sources

On War, Book 8, Chapter 9 (Graham translation, 1873) (ClausewitzStudies.org)
On War, Book 8, Chapter 4 (Graham translation, 1873) (ClausewitzStudies.org)
Reference compilation of On War passages in the Howard and Paret rendering (Clausewitz.com)
Clausewitz's center of gravity: changing our warfighting doctrine, again! (Strategic Studies Institute, U.S. Army War College)
The centre of gravity concept: contemporary theories, comparison, and implications (Defence Studies)
Gyroscopic precession (Aircraft Owners and Pilots Association)
Gyroscopic flight instruments (SKYbrary)
The unanimous launch review is a strategic warning sign (companion analysis) (ComplexDiscovery OU)
Complete look: ComplexDiscovery OU's 2025 to 2030 eDiscovery market size mashup (ComplexDiscovery OU)
Reliance on metrics is a fundamental challenge for AI (Cell Press)

Works referenced

Carl von Clausewitz, "On War" (1832); Michael Howard and Peter Paret translation, Princeton University Press, 1976 (modern standard English edition); J.J. Graham translation, 1873 (public domain, used for verbatim quotation).
Charles Goodhart, "Problems of Monetary Management: The U.K. Experience" (1975); the principle restated in his entry in The Encyclopedia of Central Banking (2015).
Marilyn Strathern, "Improving Ratings: Audit in the British University System," European Review 5(3), 1997.
Geoffrey A. Moore, "Crossing the Chasm," HarperBusiness, 1991; third edition, HarperCollins, 2014.
Clayton M. Christensen, "The Innovator's Dilemma," Harvard Business School Press, 1997.
Geoffrey A. Moore, "Zone to Win: Organizing to Compete in an Age of Disruption," Diversion Books, 2015.
David Manheim and Scott Garrabrant, "Categorizing Variants of Goodhart's Law," arXiv preprint, 2018.

Assisted by GAI and LLM Technologies Additional reading

Source: ComplexDiscovery OÜ

ComplexDiscovery’s mission is to enable clarity for complex decisions by providing independent, data‑driven reporting, research, and commentary that make digital risk, legal technology, and regulatory change more understandable for practitioners, policymakers, and business leaders.

[post_title] => A strategy needs one dominant center of gravity [post_excerpt] => Revenue targets and market focus can compete for primacy, leaving a company with oscillation instead of hierarchy. This analysis applies Clausewitz, Goodhart's law, and gyroscopic precession to the strategic instability that can follow. [post_status] => publish [comment_status] => closed [ping_status] => closed [post_password] => [post_name] => a-strategy-needs-one-dominant-center-of-gravity [to_ping] => [pinged] => [post_modified] => 2026-07-14 16:13:06 [post_modified_gmt] => 2026-07-14 21:13:06 [post_content_filtered] => [post_parent] => 0 [guid] => https://complexdiscovery.com/?p=67664 [menu_order] => 0 [post_type] => post [post_mime_type] => [comment_count] => 0 [filter] => raw [show_in_menu] => 1 [link_link] => 1 [no_follow_link] => 0 [alt_link_text] => [custom_link_class] => [redirect_url] => [target_blank] => 0 [alt_title_attribute] => ) [comment_count] => 0 [current_comment] => -1 [found_posts] => 1 [max_num_pages] => 1 [max_num_comment_pages] => 0 [is_single] => [is_preview] => [is_page] => [is_archive] => [is_date] => [is_year] => [is_month] => [is_day] => [is_time] => [is_author] => [is_category] => [is_tag] => [is_tax] => [is_search] => [is_feed] => [is_comment_feed] => [is_trackback] => [is_home] => 1 [is_privacy_policy] => [is_404] => [is_embed] => [is_paged] => [is_admin] => [is_attachment] => [is_singular] => [is_robots] => [is_favicon] => [is_posts_page] => [is_post_type_archive] => [query_vars_hash:WP_Query:private] => fee2ea53bd9b09f0441320f0096af4bb [query_vars_changed:WP_Query:private] => [thumbnails_cached] => [allow_query_attachment_by_filename:protected] => [stopwords:WP_Query:private] => [compat_fields:WP_Query:private] => Array ( [0] => query_vars_hash [1] => query_vars_changed ) [compat_methods:WP_Query:private] => Array ( [0] => init_query_flags [1] => parse_tax_query ) [query_cache_key:WP_Query:private] => wp_query:7958b1906e9fa8eacbce659fae7d6fdb )

A strategy needs one dominant center of gravity

Pricing

Editor's Note: Generative AI is no longer a future-state concept in eDiscovery pricing; it is already reshaping how legal, technology, and corporate teams evaluate cost, value, and defensibility. In this Winter 2026 Pricing Pulse analysis, ComplexDiscovery OÜ, in partnership with EDRM, examines a market that is simultaneously stabilizing in traditional service categories and fragmenting in newer AI-driven ones. The findings highlight a clear divide between established pricing norms for forensic collection, processing, hosting, and document review, and the still-developing commercial models emerging around GenAI-assisted review. For cybersecurity, data privacy, regulatory compliance, and eDiscovery professionals, that divide matters. Pricing transparency now directly affects budgeting, vendor selection, matter planning, and risk management—especially as organizations weigh the promise of AI efficiency against unresolved questions around exception handling, quality control, and contract structure. This analysis offers a timely benchmark for understanding where the market stands today and where pricing pressure is likely to intensify next.

[exclude_from_rss]

[taq_review]

[/exclude_from_rss] Industry Research

A Complete Analysis of the Winter 2026 eDiscovery Pricing Survey

ComplexDiscovery Staff

Executive Summary

The Winter 2026 eDiscovery Pricing Survey, conducted by ComplexDiscovery OÜ in partnership with the Electronic Discovery Reference Model (EDRM) across December 2025 through February 2026, captures a market at a pivotal inflection point. Generative AI (GenAI) has moved into operational workflows for a significant and growing segment of the eDiscovery market — but adoption is uneven, pricing frameworks have not kept pace, and a meaningful share of practitioners have not yet engaged with AI-assisted review at any level. That bifurcation between early adopters and the rest of the market is itself one of the survey's defining findings. Drawing on 53 responses from legal professionals, technology providers, corporations, and consultancies, this survey provides a detailed pricing snapshot of the current eDiscovery market, spanning forensic collection, data processing and hosting, document review, and GenAI-assisted review. Several clear signals emerge from the data. Forensic collection and examination rates have stabilized in the $250–$350 per hour range for standard work, with premium rates for testimony and analysis. Data hosting has commoditized meaningfully at the infrastructure level, while analytics-enabled hosting retains pricing differentiation. Document review rates are stable but per-document billing remains opaque. Most critically, GenAI-assisted review pricing is experimentally diverse — hybrid models and per-document billing each claim roughly 28% of reported primary models, with the $0.11–$0.50 per-document range emerging as a competitive zone that directly challenges traditional human review economics. This report covers all 25 survey questions, organized into four thematic sections, with analyst observations and strategic implications throughout. All findings represent self-reported practitioner perceptions of prevailing market pricing — not verified transaction records — and should be read as directional market intelligence. Unlike vendor-produced or client-commissioned pricing guides, the Pricing Pulse is designed and published independently by ComplexDiscovery OÜ in partnership with the Electronic Discovery Reference Model (EDRM), with no commercial interest in any specific pricing outcome.

About the Survey

Survey Design and Purpose The Winter 2026 eDiscovery Pricing Survey was designed and administered by ComplexDiscovery OÜ in partnership with the Electronic Discovery Reference Model (EDRM) as part of its ongoing Pricing Pulse research program. The survey's primary purpose is to provide eDiscovery practitioners, technology providers, and legal operations professionals with empirically grounded pricing benchmarks across the key service categories that define the eDiscovery market. The Pricing Pulse is practitioner-reported and independently produced — it is not sponsored by, or designed to favor, any vendor, platform, or service category. Respondent comments critiquing the survey design itself are actively incorporated into future iterations, as reflected in this report's processing methodology note. This iteration of the survey placed particular emphasis on generative AI-assisted review pricing — a category first addressed formally in prior survey cycles and highlighted significantly in Winter 2026 to reflect the technology's accelerating, if uneven, integration into eDiscovery workflows. The five GenAI pricing questions (Questions 18–22) were designed to capture not just price points but pricing model structures, exception handling practices, and the nascent development of outcome-based pricing — recognizing that practitioners at very different stages of AI adoption would be responding. Respondent Profile The survey received 53 completed responses. By business segment, law firms represented the largest cohort at 43.4% (23 respondents), followed by software and/or services providers at 24.5% (13), corporations at 15.1% (8), consultancies at 9.4% (5), and media, research, or educational organizations at 7.5% (4). By primary function, 67.9% (36) identified as legal/litigation support professionals, 26.4% (14) as business or business support functions, and 5.7% (3) as IT or product development.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Survey-Respondents-by-Organizational-Segment-Winter-2026.pdf" title="Survey Respondents by Organizational Segment - Winter 2026"]

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Survey-Respondents-by-Primary-Function-Winter-2026.pdf" title="Survey Respondents by Primary Function - Winter 2026"]

Geographically, the survey is overwhelmingly U.S.-centric: 92.5% of respondents (49) indicated North America – United States as their primary eDiscovery business geography, with the remaining 7.5% distributed across Europe (United Kingdom and non-UK) and Asia/Asia Pacific. This composition reflects the survey's community of practitioners and should be taken into account when applying results to non-U.S. markets.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Survey-Respondents-by-Geographic-Region-Winter-2026.pdf" title="Survey Respondents by Geographic Region - Winter 2026"]

The respondent pool's composition — heavily weighted toward legal practitioners with meaningful technology provider and in-house corporate representation — lends credibility to the pricing data for legal use cases while also surfacing supply-side perspectives from vendors who see pricing across many client engagements.

Section 1: Forensic Collection, Examination, and Testimony Pricing

Forensic collection and digital examination form the evidentiary foundation of eDiscovery. Unlike commoditized downstream services, forensic work depends on specialized expertise, defensible chain-of-custody protocols, and increasingly complex device environments. Mobile devices, cloud-linked data ecosystems, encrypted storage, and enterprise application footprints have expanded the examiner's scope considerably over the past several years, sustaining rate levels that resist the downward pressure more commoditized services face. Expert witness testimony sits at the highest value tier of forensic work — where practitioner credentials, courtroom experience, and legal exposure command significant premium pricing. Q1 & Q2 — Per Hour Cost for Onsite and Remote Collection The $250–$350 per hour range is the clear market anchor for forensic collection, cited by 56.6% of respondents for both onsite and remote collection. However, the distributions diverge meaningfully at the premium tier: 20.8% of respondents report onsite collection rates exceeding $350 per hour, compared to just 5.7% for remote. Conversely, remote collection skews lower — 18.9% report sub-$250 rates for remote work, versus only 5.7% for onsite. This onsite premium reflects real cost structures: travel, physical access logistics, on-premises security requirements, and the coordination burden of collecting in active enterprise environments. The growth of remote forensic collection tools — driven in part by pandemic-era necessity and now institutionalized in many engagements — has introduced competitive downward pressure on remote rates that onsite services do not face to the same degree. Four respondents (7.5%) indicate alternative pricing models for remote collection, suggesting some providers are moving toward flat-fee or subscription-based remote collection arrangements.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Collection-Pricing-Per-Hour-Cost-for-an-Onsite-Collection-by-a-Forensic-Examiner-Winter-2026-.pdf" title="Collection Pricing - Per Hour Cost for an Onsite Collection by a Forensic Examiner - Winter 2026"]

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Collection-Pricing-Per-Hour-Cost-for-a-Remote-Collection-by-a-Forensic-Examiner-Winter-2026.pdf" title="Collection Pricing - Per Hour Cost for a Remote Collection by a Forensic Examiner - Winter 2026"]

Q3 & Q4 — Per Device Cost for Desktop/Laptop and Mobile Device Collection Device-based pricing skews decisively to the upper tier: 50.9% of respondents report per-device costs exceeding $350 for desktop and laptop collections, and 49.1% report the same for mobile devices. The $250–$350 mid-range captures 18.9% for computers and 24.5% for mobile devices — the higher mobile representation in the mid-range may reflect lower-complexity or volume-based mobile collection engagements where physical access is easier and device configurations are more standardized. Perhaps most notable is the convergence of mobile and computer collection pricing at the upper tier. Mobile device collection — once considered simpler than computer collection due to smaller storage capacities — now commands comparable rates as encryption, cloud sync architectures, third-party application data, and ephemeral messaging platforms have substantially increased examiner effort and risk. Practitioners seeking to budget mobile collection as a lower-cost alternative to computer collection will increasingly find the market does not support that assumption.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Collection-Pricing-Per-Device-Cost-for-a-Desktop-Laptop-Computer-Collection-by-a-Forensic-Examiner-Winter-2026.pdf" title="Collection Pricing - Per Device Cost for a Desktop Laptop Computer Collection by a Forensic Examiner - Winter 2026"]

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Collection-Pricing-Per-Device-Cost-for-a-Mobile-Device-Collection-by-a-Forensic-Examiner-Winter-2026.pdf" title="Collection Pricing - Per Device Cost for a Mobile Device Collection by a Forensic Examiner - Winter 2026"]

Q5 — Per Hour Cost for Investigation, Analysis, and Report Generation Investigation, analysis, and report generation command a higher hourly rate floor than collection itself. More than half of respondents (54.7%) report rates in the $350–$550 range for this work, compared to the $250–$350 majority for collection. Only 30.2% report rates below $350 per hour for analysis, and 5.7% exceed $550. This premium reflects the cognitive and legal weight of analytical work. Forensic examiners producing reports that will be used in litigation, regulatory proceedings, or internal investigations are exercising expert judgment that creates professional liability — and the market prices that exposure accordingly. Practitioners purchasing forensic services should anticipate that billing rates will escalate from collection through analysis, often within the same engagement.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Collection-Pricing-Per-Hour-Cost-for-Investigation-Analysis-and-Report-Generation-by-an-FE-Winter-2026.pdf" title="Collection Pricing - Per Hour Cost for Investigation Analysis and Report Generation by an FE - Winter 2026"]

Q6 — Per Hour Cost for Expert Witness Testimony Expert witness testimony carries the highest rate profile in the forensic pricing group. While 47.2% report testimony rates in the $350–$550 range — consistent with analysis rates — a notable 26.4% report rates exceeding $550 per hour, the highest proportion in any >$550 category across the survey. The elevated 'do not know' response rate (20.8%) likely reflects that many practitioners engage forensic examiners for collection and analysis but not testimony, creating a meaningful gap in their pricing awareness for this segment. Expert witness rates are driven by factors beyond standard hourly billing — including the examiner's track record, publication history, geographic availability, and the complexity of the matter at issue. The wide distribution, from below $350 to above $550, reflects a market where individual credentials create significant pricing dispersion.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Collection-Pricing-Per-Hour-Cost-for-Expert-Witness-Testimony-In-Person-and-Written-by-an-FE-Winter-2026.pdf" title="Collection Pricing - Per Hour Cost for Expert Witness Testimony (In-Person and Written) by an FE - Winter 2026"]

Analyst Observation — Forensic Collection & Examination The forensic pricing landscape shows a well-established rate structure for collection and a predictable escalation through analysis to testimony. The $250–$350 range for collection hours serves as a reliable negotiation baseline. The key risk for buyers is underbudgeting for analysis and testimony phases — where rates routinely exceed $350/hour and frequently surpass $550. Practitioners with active litigation portfolios should establish explicit rate schedules with forensic vendors for all service tiers at engagement outset, not just collection. Key Takeaways — Section 1

$250–$350/hour is the market anchor for both onsite and remote forensic collection (56.6% each).
Onsite collection carries a measurable premium: 20.8% report >$350/hour vs. 5.7% for remote.
Mobile device collection rates have converged with computer collection at the upper tier (both ~50% report >$350/device).
Investigation, analysis, and report generation rates escalate to $350–$550/hour for 54.7% of respondents.
Expert witness testimony exceeds $550/hour for 26.4% — the highest proportion across all survey categories.

Section 2: Data Processing, Hosting, and Project Management Pricing

Data processing and hosting represent the operational infrastructure of eDiscovery delivery. Processing — transforming raw electronically stored information (ESI) into a reviewable format — has historically been a significant cost driver in large matters. Hosting provides the platform on which review takes place. Both categories have experienced significant commoditization pressure from cloud infrastructure economics, but the emergence of AI-driven early culling and processing tools is beginning to reshape volume dynamics in ways that affect both pricing and billing model design. Q7 & Q8 — Per GB Cost to Process ESI at Ingestion and at Completion Processing pricing at ingestion is relatively compressed: 39.6% of respondents report rates in the $25–$75 per GB range, and 34.0% report rates below $25 per GB. A significant 18.9% indicate alternative pricing models, reflecting the market's movement away from traditional per-GB ingestion billing. Processing pricing at completion of processing tells a different story. The most commonly reported range shifts to 'less than $100 per GB' (37.7%), and the proportion reporting alternative pricing models rises to 22.6%. Another 15.1% report $100–$150 per GB at completion, and 9.4% exceed $150 per GB. The jump from ingestion to completion reflects the data expansion and enrichment that occurs through native processing, deduplication, OCR, and promotion — processes that substantially increase the per-GB cost basis for providers. One respondent offered a methodologically important observation worth acknowledging directly: the survey's two-question processing model may conflate two distinct industry billing philosophies — an 'all-in' per-GB rate that covers ingestion through promotion, versus a staged model with separate per-GB charges for ingestion and native processing or promotion to review. This is a legitimate distinction, and practitioners benchmarking against these results should clarify which model their vendor employs. Future survey iterations will address this more precisely.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Processing-Pricing-Per-GB-Cost-to-Process-ESI-Based-on-Volume-at-Ingestion-Winter-2026.pdf" title="Processing Pricing - Per GB Cost to Process ESI Based on Volume at Ingestion - Winter 2026"]

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Processing-Pricing-Per-GB-Cost-to-Process-ESI-Based-on-Volume-at-Completion-Winter-2026.pdf" title="Processing Pricing - Per GB Cost to Process ESI Based on Volume at Completion - Winter 2026"]

Q9 & Q10 — Per GB Per Month Cost to Host ESI Without and With Analytics Data hosting without analytics has substantially commoditized. More than half of respondents (54.7%) report hosting rates below $10 per GB per month, and another 30.2% fall in the $10–$20 range. Less than 2% report rates exceeding $20 per GB per month. This distribution reflects years of cloud infrastructure cost reduction passed through to buyers, as major platform providers compete on storage economics. Analytics-enabled hosting shows a wider and higher distribution. While 43.4% report rates below $15 per GB per month with analytics, 32.1% fall in the $15–$25 range, and 11.3% exceed $25 per GB per month. The premium for analytics-capable hosting reflects platform differentiation: vendors with mature AI search, conceptual clustering, visualization tools, and review workflow automation can sustain higher rates. Undifferentiated platforms — those competing primarily on storage price — face continued downward pressure as infrastructure costs decline. One respondent's comment corroborates this trajectory directly, observing that while overall eDiscovery pricing has been stable, technology costs specifically appear to be coming down — a signal consistent with the commoditization pattern visible in the hosting data.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Processing-Pricing-Per-GB-Cost-Per-Month-to-Host-ESI-without-Analytics-Winter-2026.pdf" title="Processing Pricing - Per GB Cost Per Month to Host ESI without Analytics - Winter 2026"]

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Processing-Pricing-Per-GB-Cost-Per-Month-to-Host-ESI-with-Analytics-Winter-2026.pdf" title="Processing Pricing - Per GB Cost Per Month to Host ESI with Analytics - Winter 2026"]

Q11 — User License Fee Per Month for Access to Hosted Data User licensing is in an active state of structural transition. The $50–$100 per user per month range is the most frequently cited (41.5%), but a striking 34.0% of respondents report alternative pricing models — the highest alternative-model proportion among any category in the processing and hosting section. Only 17.0% report rates below $50 per user per month. The high alternative-model rate reflects a market shift away from traditional per-seat licensing toward enterprise agreements, volume tiers, and managed service arrangements that bundle access costs into broader contract structures. For corporate legal departments and law firms managing multi-matter eDiscovery portfolios, these bundled arrangements restructure cost visibility: per-matter spend attribution becomes less granular, which may simplify budgeting at the portfolio level but reduces transparency at the individual matter level. Whether bundled arrangements represent a net financial advantage depends on volume, negotiated terms, and how closely actual usage tracks the contracted scope — variables the survey does not measure.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Processing-Pricing-User-License-Fee-Per-Month-for-Access-to-Hosted-Data-Winter-2026.pdf" title="Processing Pricing - User License Fee Per Month for Access to Hosted Data - Winter 2026"]

Q12 — Per Hour Cost of Project Management Support for eDiscovery Project management pricing is the most consistent and well-understood category in the processing and hosting group. More than half of respondents (52.8%) report rates in the $100–$200 per hour range, and 26.4% report rates exceeding $200 per hour. The low 'do not know' rate (5.7%) — tied with Q9 for the lowest across all Section 2 questions — indicates that PM pricing is well understood by practitioners and regularly visible in vendor proposals. The 26.4% reporting greater than $200 per hour for project management likely reflects the growing complexity of modern eDiscovery engagements. Today's project managers must coordinate across AI review platforms, multiple review vendor relationships, technical review workflows, and real-time quality control functions — a scope considerably broader than the data management and platform coordination role the title suggested in prior market iterations.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Processing-Pricing-Per-Hour-Cost-of-Project-Management-Support-for-eDiscovery-Winter-2026.pdf" title="Processing Pricing - Per Hour Cost of Project Management Support for eDiscovery - Winter 2026"]

Analyst Observation — Processing, Hosting & Project Management Processing pricing is bifurcating: per-GB billing at ingestion remains common, but completion-phase and analytics-related pricing is shifting toward bundled and alternative models. Practitioners anchored to traditional per-GB benchmarks for TAR, analytics hosting, or managed service arrangements may be negotiating based on outdated frameworks. Hosting has genuinely commoditized at the infrastructure level — the pricing action now lives in analytics differentiation layered above the storage tier. Key Takeaways — Section 2

Processing at ingestion is largely below $75/GB (73.6% combined), but completion-phase pricing climbs with 24.5% reporting $100/GB or more.
Alternative pricing models account for 18.9% at ingestion and 22.6% at completion — signaling a structural shift away from per-GB processing billing.
Basic hosting has commoditized: 54.7% report sub-$10/GB/month. Analytics hosting retains differentiation with 11.3% exceeding $25/GB/month.
User licensing is migrating from per-seat to bundled models — 34.0% report alternative pricing structures.
Project management rates are well understood and rising: 26.4% now exceed $200/hour, reflecting growing engagement complexity.

Section 3: Document Review Pricing

Document review sits at the commercial center of most eDiscovery engagements. It is the largest cost driver in complex litigation, the primary arena in which human expertise meets technology leverage, and the category most directly disrupted by the emergence of GenAI-assisted review. Pricing in this section spans both hourly attorney rates (the traditional billing model) and per-document rates (a model that has gained traction as technology-assisted review has enabled higher throughput). The data in this section provides critical context for interpreting the GenAI pricing data that follows in Section 4. Q13 — Per GB Cost for Predictive Coding / Technology-Assisted Review Predictive coding and technology-assisted review (TAR) pricing has largely migrated away from per-GB billing. The highest single response category (35.8%) is 'alternative pricing model' — the highest alternative-model proportion of any per-GB question in the survey. Among those who do provide per-GB TAR pricing, 30.2% report rates below $75 per GB, 13.2% report $75–$150 per GB, and only 1.9% exceed $150 per GB. The 18.9% 'do not know' rate for TAR pricing suggests that many practitioners receive predictive coding as an embedded capability within their review platform subscription rather than a separately line-itemed service. This bundling trend, combined with the high alternative-model rate, indicates that standalone per-GB TAR billing is becoming the exception rather than the rule as platforms integrate AI-driven prioritization into standard hosting fees.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Review-Pricing-Per-GB-Cost-for-Predictive-Coding-in-a-Technology-Assisted-Review-Winter-2026.pdf" title="Review Pricing - Per GB Cost for Predictive Coding in a Technology-Assisted Review - Winter 2026"]

Q14 & Q15 — Per Hour Cost for Onsite and Remote Managed Review Attorneys Hourly managed review attorney rates are well understood and show a consistent onsite premium over remote delivery. For onsite review, 45.3% of respondents report rates exceeding $40 per hour, and 32.1% report $25–$40 per hour. For remote review, the distribution shifts: 41.5% report $25–$40 per hour, and 35.8% report greater than $40 per hour. The onsite premium reflects overhead recovery for physical review facilities, security infrastructure, and on-site supervision costs. Despite the normalization of remote review following the pandemic era, onsite review commands a persistent rate premium that clients with physical review requirements should anticipate. The relatively high 'do not know' rates for both onsite (18.9%) and remote (17.0%) suggest that many practitioners engage review vendors without direct visibility into the underlying attorney billing rates — a transparency gap that can make accurate matter budgeting difficult.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Review-Pricing-Per-Hour-Cost-for-Document-Review-Attorneys-to-Review-Documents-Onsite-Winter-2026.pdf" title="Review Pricing - Per Hour Cost for Document Review Attorneys to Review Documents Onsite - Winter 2026"]

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Review-Pricing-Per-Hour-Cost-for-Document-Review-Attorneys-to-Review-Documents-Remote-Winter-2026.pdf" title="Review Pricing - Per Hour Cost for Document Review Attorneys to Review Documents Remote - Winter 2026"]

Q16 & Q17 — Cost Per Document for Onsite and Remote Managed Review Per-document billing for human document review carries significant uncertainty across the respondent pool. For onsite per-document review, 34.0% of respondents indicate they do not know the cost — the highest 'do not know' rate among all document review questions. For remote per-document review, 30.2% report not knowing. Among those with visibility, the $0.50–$1.00 per document range dominates for both onsite (30.2%) and remote (28.3%) delivery, with onsite showing a higher proportion of rates exceeding $1.00 per document (22.6% vs. 18.9% remote). Remote per-document review trends lower at the bottom of the range: 13.2% report sub-$0.50 rates for remote work versus only 3.8% for onsite. This directional difference is consistent with lower overhead costs in remote delivery environments. In this analyst's view, where the $0.50–$1.00 per-document rate for human review meets GenAI-assisted pricing in the $0.11–$0.50 range, the economic case for AI-assisted review becomes direct — provided quality and defensibility standards are met. The per-document rate distribution for human review is strategically important as a baseline against which GenAI-assisted review pricing should be evaluated. Where human review rates run $0.50–$1.00 per document and GenAI-assisted alternatives are priced in the $0.11–$0.50 range, the cost differential is substantial enough to drive adoption decisions — though the economic case ultimately depends on matter-specific quality thresholds and the degree to which AI exception handling costs are controlled.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Review-Pricing-Per-Document-Cost-for-Document-Review-Attorneys-to-Review-Documents-Onsite-Winter-2026.pdf" title="Review Pricing - Per Document Cost for Document Review Attorneys to Review Documents Onsite - Winter 2026"]

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Review-Pricing-Per-Document-Cost-for-Document-Review-Attorneys-to-Review-Documents-Remote-Winter-2026.pdf" title="Review Pricing - Per Document Cost for Document Review Attorneys to Review Documents Remote - Winter 2026"]

Analyst Observation — Document Review Traditional document review rates have held relatively stable, but the market's increasing inability to articulate per-document pricing — particularly for onsite review — signals a structural shift away from document-count-based billing toward time-based models that are less directly comparable to AI-assisted pricing. Practitioners should push for per-document rate transparency in vendor proposals to enable genuine cost modeling against AI alternatives. Key Takeaways — Section 3

TAR/predictive coding billing is migrating away from per-GB models: 35.8% report alternative pricing, 18.9% don't know — bundled platform pricing is absorbing this cost.
Onsite managed review attorney rates exceed $40/hour for 45.3% of respondents vs. 35.8% for remote — the onsite premium persists.
Per-document review rates cluster in the $0.50–$1.00 range for both onsite and remote, with significant 'do not know' responses (34% onsite, 30.2% remote) indicating a transparency gap.
The $0.50–$1.00 per-document human review baseline sets up direct economic competition with emerging GenAI-assisted review pricing.

Section 4: GenAI-Assisted Review Pricing

The Winter 2026 survey's GenAI section was designed to illuminate where pricing clarity exists, where models are still fluid, and where the industry is beginning to form conventions around AI-assisted document review. What the results reveal is not a uniformly mature market but a bifurcated one: a segment of practitioners actively deploying and pricing GenAI review, and a substantial minority — 17.0% reporting it as not applicable or unknown — who have not yet engaged with it at a pricing level. Both cohorts are represented in the data, and the analysis in this section is relevant to each in different ways. This is not surprising. GenAI-assisted review introduces fundamentally different cost economics than traditional review: provider costs are driven by token consumption, GPU infrastructure, and model licensing — not attorney hours. Translating those costs into buyer-facing pricing structures that are transparent, predictable, and defensible has proven more difficult than the technology adoption itself. Q18 — Primary Model for GenAI-Assisted Review The two leading GenAI pricing models are effectively tied: hybrid pricing (combinations of multiple models) and per-document billing each account for 28.3% of primary model responses (15 respondents each). Per-GB billing captures 11.3%, per-token billing 5.7%, flat monthly subscription 5.7%, and outcome-based pricing 3.8%. Notably, 17.0% report that GenAI-assisted review pricing is not applicable or unknown to them — suggesting a meaningful share of the practitioner community has not yet engaged with AI review at a pricing level. The dominance of hybrid models reflects the reality that many providers are constructing bespoke proposals that combine per-document minimums, per-GB infrastructure charges, and platform subscription components. This complexity makes apples-to-apples comparison difficult for buyers — and may be intentional. Per-document pricing's co-equal standing with hybrid models suggests that a document-level unit of value is widely accepted as a conceptual billing anchor, even when the final structure is more complex. One respondent's comment illustrates the breadth of emerging structures not fully captured by the five survey model options: some providers are pricing GenAI review as an hourly professional service — with consultants performing query engineering, model interaction, and attorney collaboration — billed at standard hourly rates with per-matter minimums and not-to-exceed caps. This hourly professional service model sits outside the per-document or per-GB frameworks the market most commonly discusses, and its presence signals that GenAI pricing model diversity is wider than any single survey's categories can fully contain. Per-token pricing — the underlying cost reality for large language model deployments — has not been widely passed through to buyers (5.7%). This indicates that providers are currently absorbing token cost variability and presenting buyers with higher-order pricing units. As token costs evolve with model efficiency improvements, the degree to which providers pass these economics through will be an important market dynamic to watch.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/03/Review-Pricing-Primary-Model-for-Gen-AI-Assisted-Review-in-eDiscovery-Winter-2026.pdf" title="Review Pricing - Primary Model for Gen AI-Assisted Review in eDiscovery - Winter 2026"]

Q19 — Average Cost Per Document for GenAI-Assisted Review (Per-Document Model) Among all survey respondents, the $0.26–$0.50 per-document tier is the most frequently cited GenAI price point (20.8%), followed by both the $0.11–$0.25 and $0.05–$0.10 ranges (15.1% each). Seven and a half percent report per-document GenAI rates exceeding $0.50, and 5.7% report rates below $0.05. A significant 35.8% indicate this pricing model is not applicable to them or that they do not know the cost. The broad distribution among those with pricing visibility — from under a nickel to over fifty cents per document — reflects the wide variance in task complexity, model selection, and quality control overhead that different GenAI review implementations involve. The $0.11–$0.50 range represents the most commercially active zone. At the lower end, GenAI review offers compelling cost efficiency relative to the $0.50–$1.00 range for human per-document review. At the upper end of GenAI pricing (>$0.50), the value proposition requires stronger justification — particularly around accuracy, speed, or reduced downstream review burden. Practitioners should push vendors for specificity on what the per-document fee includes: model inference costs alone, or QC, exception handling, and reporting as well.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/03/Review-Pricing-Average-Cost-Per-Document-in-Per-Document-Model-of-Gen-AI-Assisted-Review-Winter-2026.pdf" title="Review Pricing - Average Cost Per Document in Per Document Model of Gen AI-Assisted Review - Winter 2026"]

Q20 — Average Cost Range for GenAI-Assisted Review (Per-GB Model) Per-GB GenAI pricing is less prevalent in practice — 64.2% of respondents indicate this model is not applicable or unknown. Among those who do report per-GB GenAI pricing, the $25–$50 per GB range is most common (17.0%), followed by below $25 per GB (13.2%). Two respondents (3.8%) report rates exceeding $100 per GB for GenAI review — likely representing specialized, computationally intensive analytical workflows rather than standard review acceleration. Given that data processing at ingestion typically falls below $75 per GB, a per-GB GenAI review charge layered on top represents a meaningful incremental cost. Practitioners evaluating per-GB GenAI pricing should model total matter economics carefully, including whether early data culling through AI reduces the volume that reaches review — potentially offsetting the per-GB GenAI charge with reduced processing and hosting costs downstream.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/03/Review-Pricing-Average-Cost-Range-Per-GB-in-Per-GB-Model-of-Gen-AI-Assisted-Review-Winter-2026.pdf" title="Review Pricing - Average Cost Range Per GB in Per GB Model of Gen AI-Assisted Review - Winter 2026"]

Q21 — Outcome-Based Pricing Structure for GenAI-Assisted Review Outcome-based pricing for GenAI review remains largely theoretical in the current market: 79.2% of respondents report no applicable experience with it. Among the minority with exposure, custom agreements dominate (9.4%), with small numbers reporting tiered pricing based on review speed improvements (3.8%), fixed fees based on achieved accuracy rates (3.8%), a combination of performance metrics (1.9%), and percentage of cost savings compared to traditional review (1.9%). The theoretical appeal of outcome-based pricing is clear — it aligns provider incentives with client results and distributes AI benefit-sharing in a transparent way. The operational mechanisms, however, remain underdeveloped. Defining accuracy baselines, attributing speed gains to AI versus staffing decisions, and calculating savings against hypothetical traditional review costs are all methodologically complex. The custom-agreement dominance (9.4%) reflects that outcome-based structures, where they exist, are negotiated on a bespoke basis without market-standardized frameworks. In this analyst's view, this is an area where the industry is likely to see active experimentation and standardization attempts in coming survey cycles — though the timeline will depend on how quickly buyers begin demanding performance accountability in AI review contracts.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/03/Review-Pricing-Typical-Structure-of-Outcome-Based-Pricing-Models-in-Gen-AI-Assisted-Review-Winter-2026.pdf" title="Review Pricing - Typical Structure of Outcome-Based Pricing Models in Gen AI-Assisted Review - Winter 2026"]

Q22 — How Pricing Models Handle Failed or Exception Documents in GenAI Review Exception document handling — documents that fail AI processing or require human intervention — is a practical and financially significant issue that is significantly underappreciated in headline GenAI pricing discussions. Nearly 40% of respondents (39.6%) cannot speak to how their contracts address this scenario. Among those with visibility, no single approach dominates: 18.9% report that exception documents route to manual review at standard rates; 17.0% say handling depends on the specific issue encountered; 9.4% each report that exceptions are charged as additional processing time or included in the base price (no additional charge); and 5.7% report per-document exception billing. The variability of exception handling approaches — and the high proportion of respondents with no visibility — represents a meaningful contract risk for buyers. In matters where a significant share of documents require human intervention, the effective cost of a GenAI-assisted review engagement can increase substantially depending on which exception pricing structure applies. Buyers negotiating GenAI review engagements should require explicit exception handling clauses that specify the triggering conditions, billing treatment, and quality control obligations for documents that exit the AI workflow.

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/03/Review-Pricing-Accounting-for-Docs-That-Fail-To-Process-or-Require-Special-Handing-Gen-AI-Winter-2026.pdf" title="Review Pricing - Accounting for Docs That Fail To Process or Require Special Handing (Gen AI) - Winter 2026"]

Analyst Observation — GenAI-Assisted Review The GenAI pricing market is operationally engaged but structurally immature. The concentration in hybrid and per-document models reflects practitioners and providers reaching for familiar pricing analogues while the technology matures. The $0.11–$0.50 per-document zone is emerging as a competitive market range — one that creates genuine economic pressure on traditional human review for appropriate document populations. The most important near-term challenge for the market is not the headline per-document or per-GB rate, but the hidden cost variables: exception document handling, quality control overhead, model retraining requirements, and the total cost of ownership of integrating GenAI review into existing workflows. One survey respondent offered a perspective worth placing on record: many vendors are still determining their AI pricing strategies, rushing to market to capture first-mover advantage or market share — and that token-based pricing pressures may cause AI solution costs to increase materially in the future, absent significant reductions in GPU infrastructure costs. This caution deserves attention as buyers evaluate multi-year GenAI review commitments. Key Takeaways — Section 4

Hybrid and per-document models are the dominant GenAI pricing structures, each at 28.3% — the market has converged on document-level units but not uniform delivery structures.
The $0.11–$0.50 per-document range is the emerging competitive zone for GenAI-assisted review, with direct economic implications for traditional human review.
Per-token pricing has not been widely passed to buyers (5.7%) — providers are absorbing LLM cost variability for now.
Outcome-based GenAI pricing is theoretically compelling but operationally undeveloped; 79.2% of respondents have no applicable experience.
Exception document handling is an underappreciated contract risk: 39.6% don't know how their agreements address it, and no standard approach has emerged.

Conclusion and Strategic Implications

The Winter 2026 eDiscovery Pricing Survey paints a picture of a market undergoing layered transitions simultaneously: forensic services have found stable pricing floors; processing and hosting have bifurcated between commoditized infrastructure and differentiated analytics tiers; document review is experiencing pricing model fragmentation as AI alternatives create new economic reference points; and GenAI-assisted review is operationally deployed but commercially immature in its pricing structures. For eDiscovery Buyers and Legal Operations Professionals The $250–$350 per hour range for forensic collection provides a reliable negotiation baseline, but buyers should build explicit rate schedules covering analysis and testimony phases — where rates routinely exceed $350 and frequently surpass $550 per hour. Processing and hosting negotiations should move beyond per-GB benchmarks for analytics-enabled and TAR-related services, where bundled models increasingly dominate. For document review, the critical action item is requiring per-document rate transparency even when hourly billing is the primary model — enabling genuine cost modeling against AI review alternatives. Corporate legal operations professionals face a distinct version of these challenges. Unlike law firms that pass eDiscovery costs to clients, in-house legal departments absorb them entirely — making pricing transparency a budget integrity issue, not just a negotiation tactic. The hosting commoditization finding (54.7% below $10/GB/month for basic hosting) and the user licensing transition (34.0% of respondents on alternative models) both represent leverage points in enterprise vendor negotiations that legal operations teams can use directly. The project management escalation finding (26.4% above $200/hour) warrants particular attention for in-house teams managing multi-matter portfolios: as PM rates rise with engagement complexity, the cost of inadequate internal scoping and vendor coordination compounds. Corporate legal operations teams are well-positioned to offset this by investing in internal eDiscovery program management capability rather than outsourcing all coordination to vendor project managers at premium rates. For GenAI-assisted review engagements, two contractual priorities stand out: first, obtain explicit pricing for exception documents rather than accepting provider discretion; second, require specificity on what is included in per-document or per-GB GenAI rates to enable accurate total-cost modeling. The $0.11–$0.50 per-document range is commercially viable for appropriate document populations, but hidden costs can erode that advantage quickly if not addressed in the agreement. For eDiscovery Service Providers and Technology Vendors The survey data confirms that buyers are engaging with GenAI pricing at a level of sophistication that requires providers to move beyond introductory pricing structures. The dominance of hybrid models reflects buyer uncertainty as much as provider flexibility — and that uncertainty is not sustainable as GenAI review becomes a standard engagement component rather than a premium add-on. Providers who develop clear, reproducible pricing structures with transparent exception handling will differentiate themselves in a market where 39.6% of buyers currently report no visibility into this critical cost variable. The trajectory of outcome-based pricing deserves attention. While only a small minority of respondents currently have exposure to these models, the direction of the market — toward accountability for AI review quality, not just delivery — suggests that providers who invest in outcome measurement frameworks now will be better positioned as client sophistication increases.

Looking Ahead: Open Questions for the Evolving eDiscovery Pricing Landscape

Several questions worth watching in future survey cycles: Will per-token pricing migrate from provider cost basis to buyer-facing billing as LLM economics become more visible? Will outcome-based pricing develop standardized frameworks, or remain bespoke indefinitely? Will the onsite/remote premium for forensic collection and attorney review compress as remote delivery tools mature further? And will the exception document handling gap in GenAI contracts become a litigation issue that forces market standardization? The Pricing Pulse series will continue to track these dynamics. The Winter 2026 results establish a pricing baseline at a pivotal moment — one that future surveys will be measured against as generative AI transforms both the economics and the practice of eDiscovery.

Research Methodology Note

The Winter 2026 eDiscovery Pricing Survey was designed and administered by ComplexDiscovery OÜ in partnership with the Electronic Discovery Reference Model (EDRM) as part of the Pricing Pulse research series. The survey was conducted via an online form distributed through ComplexDiscovery's professional community and partner networks. The survey period ran from December 2025 through February 2026, with the data collection window closing upon reaching the final respondent cohort of 53 individuals. The survey comprised 25 pricing questions organized across four service categories — forensic collection and examination, data processing and hosting, document review, and GenAI-assisted review — plus three respondent classification questions addressing geography, business segment, and primary function. Response options were structured as defined ranges rather than open-ended numeric inputs to facilitate comparative analysis and protect respondent pricing confidentiality. All responses represent self-reported market observations and practitioner experience. Results should be interpreted as directional market intelligence reflecting current practitioner perceptions of prevailing pricing, not as verified transaction records or audited benchmarks. The U.S.-centric geographic distribution (92.5%) should be taken into account when applying findings to non-U.S. markets. ComplexDiscovery OÜ maintains editorial independence in the analysis and publication of survey results. Individual respondent data is treated as confidential; only aggregated findings are reported. ComplexDiscovery and the Electronic Discovery Reference Model (EDRM) thank the 53 practitioners and professionals who contributed their time and market knowledge to this research. Organizations and individuals interested in participating in future Pricing Pulse surveys are encouraged to connect with ComplexDiscovery at complexdiscovery.com. © 2026 ComplexDiscovery OÜ. All rights reserved. Published on ComplexDiscovery.com. Conducted in partnership with the Electronic Discovery Reference Model (EDRM). The Pricing Pulse is an ongoing research series examining pricing dynamics across the eDiscovery market. News Source

Rob Robinson and Holley Robinson, ComplexDiscovery OÜ, "Winter 2026 eDiscovery Pricing Survey," February 2026.

[the_ad_group id="12741"]

Assisted by GAI and LLM Technologies Additional Reading

Source: ComplexDiscovery OÜ

ComplexDiscovery’s mission is to enable clarity for complex decisions by providing independent, data‑driven reporting, research, and commentary that make digital risk, legal technology, and regulatory change more legible for practitioners, policymakers, and business leaders.

[exclude_from_rss]

[taq_review]

[/exclude_from_rss] Industry Research

A Complete Analysis of the Winter 2026 eDiscovery Pricing Survey

ComplexDiscovery Staff

Executive Summary

About the Survey

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Survey-Respondents-by-Primary-Function-Winter-2026.pdf" title="Survey Respondents by Primary Function - Winter 2026"]

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Survey-Respondents-by-Geographic-Region-Winter-2026.pdf" title="Survey Respondents by Geographic Region - Winter 2026"]

Section 1: Forensic Collection, Examination, and Testimony Pricing

$250–$350/hour is the market anchor for both onsite and remote forensic collection (56.6% each).
Onsite collection carries a measurable premium: 20.8% report >$350/hour vs. 5.7% for remote.
Mobile device collection rates have converged with computer collection at the upper tier (both ~50% report >$350/device).
Investigation, analysis, and report generation rates escalate to $350–$550/hour for 54.7% of respondents.
Expert witness testimony exceeds $550/hour for 26.4% — the highest proportion across all survey categories.

Section 2: Data Processing, Hosting, and Project Management Pricing

Processing at ingestion is largely below $75/GB (73.6% combined), but completion-phase pricing climbs with 24.5% reporting $100/GB or more.
Alternative pricing models account for 18.9% at ingestion and 22.6% at completion — signaling a structural shift away from per-GB processing billing.
Basic hosting has commoditized: 54.7% report sub-$10/GB/month. Analytics hosting retains differentiation with 11.3% exceeding $25/GB/month.
User licensing is migrating from per-seat to bundled models — 34.0% report alternative pricing structures.
Project management rates are well understood and rising: 26.4% now exceed $200/hour, reflecting growing engagement complexity.

Section 3: Document Review Pricing

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Review-Pricing-Per-Hour-Cost-for-Document-Review-Attorneys-to-Review-Documents-Remote-Winter-2026.pdf" title="Review Pricing - Per Hour Cost for Document Review Attorneys to Review Documents Remote - Winter 2026"]

[pdf-embedder url="https://complexdiscovery.com/wp-content/uploads/2026/02/Review-Pricing-Per-Document-Cost-for-Document-Review-Attorneys-to-Review-Documents-Remote-Winter-2026.pdf" title="Review Pricing - Per Document Cost for Document Review Attorneys to Review Documents Remote - Winter 2026"]

TAR/predictive coding billing is migrating away from per-GB models: 35.8% report alternative pricing, 18.9% don't know — bundled platform pricing is absorbing this cost.
Onsite managed review attorney rates exceed $40/hour for 45.3% of respondents vs. 35.8% for remote — the onsite premium persists.
Per-document review rates cluster in the $0.50–$1.00 range for both onsite and remote, with significant 'do not know' responses (34% onsite, 30.2% remote) indicating a transparency gap.
The $0.50–$1.00 per-document human review baseline sets up direct economic competition with emerging GenAI-assisted review pricing.

Section 4: GenAI-Assisted Review Pricing

Hybrid and per-document models are the dominant GenAI pricing structures, each at 28.3% — the market has converged on document-level units but not uniform delivery structures.
The $0.11–$0.50 per-document range is the emerging competitive zone for GenAI-assisted review, with direct economic implications for traditional human review.
Per-token pricing has not been widely passed to buyers (5.7%) — providers are absorbing LLM cost variability for now.
Outcome-based GenAI pricing is theoretically compelling but operationally undeveloped; 79.2% of respondents have no applicable experience.
Exception document handling is an underappreciated contract risk: 39.6% don't know how their agreements address it, and no standard approach has emerged.

Conclusion and Strategic Implications

Looking Ahead: Open Questions for the Evolving eDiscovery Pricing Landscape

Research Methodology Note

Rob Robinson and Holley Robinson, ComplexDiscovery OÜ, "Winter 2026 eDiscovery Pricing Survey," February 2026.

[the_ad_group id="12741"]

Assisted by GAI and LLM Technologies Additional Reading

Source: ComplexDiscovery OÜ

ComplexDiscovery’s mission is to enable clarity for complex decisions by providing independent, data‑driven reporting, research, and commentary that make digital risk, legal technology, and regulatory change more legible for practitioners, policymakers, and business leaders.