AI Governance & Security Vendor Wiki

9 min read

Smarsh

Primary category: comms-surveillance.

One-liner: The largest US communications archiving vendor. Smarsh captures and archives email, chat, voice, mobile messaging and now AI-assistant conversations (Microsoft 365 Copilot, ChatGPT Enterprise, Claude Enterprise) as SEC 17a-4 / FINRA books-and-records, and sells an AI-driven surveillance layer on top. For many funds it is already the system of record that any surveillance tool reads from.

What it does: Three layers, sold separately or together:

  • Capture. Connectors for 100+ channels (vendor figure): email, Teams, Zoom, Slack, Bloomberg, mobile SMS, WhatsApp and Signal (through TeleMessage), and recorded voice (through CallCabinet, acquired February 2025).
  • Archive. WORM-style retention for books-and-records, with search, legal hold and eDiscovery. Two tiers: Professional Archive for small and mid-sized advisers and broker-dealers, and Enterprise Archive (the former Actiance and Micro Focus Digital Safe estates) for large banks.
  • Surveillance. Lexicon-plus-ML supervision, upgraded with the NLP from Digital Reasoning (whose models powered conduct surveillance at several Tier-1 banks at the time of the 2020 deal). The newest layer is the Smarsh Intelligent Agent, available from late 2025 and built on AWS Bedrock. Smarsh claims it cut review volume by about 77% at “a leading global investment bank” with under 2% loss in risk detection; this is a vendor claim with an unnamed customer. A Noise Reduction Agent for smaller firms claims up to 60% fewer alerts.

AI-assistant capture is where Smarsh matters for this wiki. All of the following are vendor claims:

  • Microsoft 365 Copilot capture was announced 2025-06-04. It covers prompts, files and responses across web, Teams, Microsoft 365 apps and Copilot chat agents. A trade write-up says it uses Microsoft’s Interaction Export APIs.
  • ChatGPT is captured through OpenAI’s Compliance API, listed on Smarsh’s channel pages.
  • Claude Enterprise capture through Anthropic’s Claude Compliance API was announced 2026-05-21. It covers text, files, Claude-generated artifacts, deleted messages and archived conversations, fed into “capture, supervision, and analytics.” Smarsh says it is one of the first certified partners. Anthropic’s own partner list (see anthropic-claude-enterprise) also names Smarsh.
  • At its EDGE 2026 conference (October 2026), Smarsh described itself as a launch partner for both the OpenAI and Anthropic compliance APIs. It said it treats agent-to-agent traffic as a channel to capture, and that it had shipped an MCP server and several agents in six months.

Naming / provenance: Founded in 2001 in Brooklyn by Stephen Marsh (“S. Marsh”). HQ moved to Portland, Oregon in 2004. CEO Kim Crawford Goodman since 2020 (per Wikipedia; not checked against Smarsh’s leadership page). Most of its product lines came from acquisitions, which explains the many product names:

YearAcquiredWhat it brought
2017–18Actiance (combined by K1)enterprise archive and collaboration capture
2020Digital ReasoningAI/NLP conduct surveillance
2020–21Entreda, Privvacyber and vendor-risk compliance
2021–22Digital Safe (from Micro Focus)large-bank archive
2024-02TeleMessagemobile, WhatsApp and Signal capture
2025-02CallCabinetcloud compliance call recording

Digital Reasoning was announced 2020-11-10, terms undisclosed, with close “expected in the next 60 days”. No close announcement was found, though Smarsh has sold the technology as its own since then.

Ownership & viability: pe-owned. K1 Investment Management is the controlling sponsor.

  • K1 announced it would combine Actiance (which K1 had acquired) with Smarsh on 2017-11-15. A secondary commentary and Dealroom date K1’s original Smarsh buyout to January 2016 ($215M); that date is not confirmed from a primary source.
  • Kirkland & Ellis’s 2020 release calls Smarsh a K1 portfolio company. Ares Management provides debt.
  • A 2025 commentary describes a secondary sale of K1’s stake, run by Evercore with HarbourVest among the buyers. No primary confirmation was found; treat it as unverified.
  • Silver Lake: the brief mentioned a Silver Lake investment. Standard and extended searches on 2026-10-26 found no evidence of one, so the page does not assert it.
  • Viability is strong: decades of revenue, 6,500+ customers (vendor), a growing AI product line, and a multi-year AWS strategic collaboration (from October 2025). The usual PE caveats apply: expect pricing pressure at renewal, more acquisitions, and an eventual sponsor-to-sponsor sale or IPO. Odd detail: K1 is also a named Smarsh customer in its own case study.

Positioning & differentiators: leader in comms-surveillance. It is the largest capture/archive incumbent, and its Digital Reasoning-derived surveillance runs at Tier-1 banks (Smarsh claims “18 of the top 20” North American, European and Asian banks as clients).

  • Vs. global-relay: the closest peer. Both are archive-first and both now capture Copilot, ChatGPT and Claude. Smarsh has the deeper surveillance pedigree (Digital Reasoning, since 2020) and broader voice and mobile capture through acquisitions. Global Relay is founder-owned, runs its own data centre and has a single, home-grown codebase.
  • Vs. analytics-first surveillance (behavox, shield, steeleye, nice-actimize): those tools often read from a Smarsh archive. Smarsh now competes with them for the analytics layer too. Large banks still frequently pair a Smarsh archive with another vendor’s surveillance.
  • Vs. theta-lake: Theta Lake is stronger on rich capture from video and collaboration tools. Smarsh is broader across email, mobile, voice and legacy channels.
  • Vs. down-market platforms (hadrius, greenboard, aca-group): for a small RIA, Smarsh Professional Archive is the incumbent these newer platforms are trying to displace.

Who should choose them / anti-fit: Fits a fund that needs a defensible 17a-4 / FINRA 4511 archive across many channels, wants AI-assistant conversations in the same archive and review queue as email and chat, and prefers one vendor for capture and first-line surveillance. Also fits a fund already on Smarsh that wants to add Copilot or Claude capture without a new vendor. Anti-fit: firms wanting best-of-breed market-abuse analytics joined to trade data, where a trade-plus-comms platform fits better. Also small advisers who want archiving bundled with marketing review and attestations, where the newer AI-native platforms are lighter. And anyone who needs the archive inside their own cloud tenancy.

Known weaknesses / gotchas:

  • TeleMessage breach (May 2025). TeleMessage, Smarsh’s mobile-archiving unit, was breached after its modified Signal client (TM SGNL) was seen in use by US officials. Smarsh suspended all TeleMessage services. Chat data from 60+ government users was published, and CISA added three TeleMessage CVEs to its Known Exploited Vulnerabilities list (May–July 2025). Other Smarsh products stayed online. Ask any Smarsh mobile-capture prospect what replaced it and how the TeleMessage code base was remediated.
  • Product sprawl from acquisitions. Professional vs. Enterprise archives, legacy Actiance and Digital Safe estates, and separate surveillance and capture SKUs. Expect migrations and inconsistent features across tiers.
  • Surveillance claims are vendor case studies. The 77% and 60% reductions come from unnamed or affiliated customers.
  • Capture ≠ supervision. Capturing Copilot, ChatGPT or Claude conversations does not by itself mean your lexicons and models are tuned for prompt-style text. Test with real AI transcripts.
  • Ownership chatter. Sponsor-to-sponsor activity and an unverified Silver Lake rumour; recheck ownership at renewal.

Deployment & data handling: SaaS. Captured communications, including AI prompts and responses pulled through the vendors’ compliance APIs, are copied into Smarsh’s cloud archive (data_leaves_tenancy: "true"). That is the point of a third-party 17a-4 archive. The newer AI surveillance runs on AWS (Bedrock / AgentCore); data-residency and model-hosting detail by region was not verified. Capture is out-of-band, pulled through APIs after the fact, so it adds no latency and cannot block anything.

Integrations & partnerships: Microsoft (Copilot, Teams), OpenAI and Anthropic compliance APIs, Zoom, Slack, Bloomberg, mobile carriers and WhatsApp/Signal, AWS (strategic collaboration agreement; sold through AWS Marketplace). An MCP server was announced at EDGE 2026 (vendor; scope not documented); recorded as mcp_support: server, low confidence.

Compliance & FS traction: The core market is FS. Smarsh claims 6,500+ customers and 18 of the top 20 global banks (vendor figures; no named hedge-fund customers found). Certifications were not verified for this page; check the trust portal. Hedge-fund fit: high for archive and capture, where it is likely already present at many funds. Fit is medium for surveillance, depending on whether you also need trade surveillance.

Commercial: Quote-based. Typically priced per user per channel for capture and archive, with surveillance as an add-on. No public pricing.

Open questions

  • Digital Reasoning close date: announced 2020-11-10 and expected within 60 days; no close announcement found.
  • K1 entry date (2016 buyout vs. 2017 Actiance combination) and whether the reported 2025 secondary closed and who holds what now.
  • Silver Lake: no evidence found of any Silver Lake investment in Smarsh. Ask the brief’s author for the source.
  • Current certifications (SOC 2 Type II, ISO 27001) and data-residency options for AI surveillance on AWS.
  • Whether Smarsh’s ChatGPT capture covers ChatGPT Enterprise, Edu and Team, and whether Copilot Studio agents are in scope.
  • TeleMessage remediation status and current product name for mobile capture.
  • CEO as of 2026-10 (Wikipedia says Kim Crawford Goodman; not checked against a primary source).

Sources

History

  • [2026-10-26] Page created and researched in one pass. Primary comms-surveillance, chosen over a “capture/archive is upstream” framing: Smarsh sells surveillance (Digital Reasoning lineage, Intelligent Agent) and is the main capture point for Copilot, ChatGPT and Claude conversations. Established K1 PE ownership (Actiance combination 2017-11-15), the Digital Reasoning announcement (2020-11-10, close unconfirmed), the TeleMessage 2025 breach, and AI-assistant capture claims. A Silver Lake investment could not be verified and is not asserted.

Graph View

Backlinks