Theta Lake: Initiation of Coverage

GAII Intelligence defines the Risk, Compliance & Surveillance market as software that applies AI to the supervisory obligations of investment firms, banks and trading venues: capturing and retaining communications and trading records, detecting misconduct and market abuse, reviewing regulated content, and evidencing those controls to regulators. Buyers are chief compliance officers, heads of surveillance and conduct risk, and the technology and records teams that support them.

Capabilities we treat as mandatory

• Complete, defensible capture: records of every in-scope channel or trading system, reconciled and retained to regulatory standards such as SEC 17a-4.
• Explainable detection: every alert or finding traceable to the policy, rule or signal that produced it, in a form a regulator can examine.
• Institutional data handling: a stated position on where client data goes, how long it is held, and whether it is used for model training.

Capabilities we treat as differentiating

• False-positive reduction: measurable cuts in alert volume without loss of true positives, with a disclosed method.
• Agentic triage: agents that disposition first-level alerts and assemble cases under human supervision.
• Holistic coverage: communications, trade and conduct data analysed together rather than in separate tools.
• AI-channel governance: capture and supervision of employees' use of AI assistants as a regulated channel.

Theta Lake competes with Smarsh, Global Relay and Proofpoint in archiving, with Behavox and Shield in AI-led supervision, and with LeapXpert in messaging capture, which is also a partner.

The following are the capabilities and characteristics that, in our assessment, most distinguish Theta Lake within the Risk, Compliance & Surveillance market. Each is drawn from publicly documented product capability, published interviews with management, or independent review.

• Collaboration capture: Video, screen-share, whiteboards, reactions, files, chat, voice and AI artefacts captured in context and replayable.
• AI-assistant governance: Capture and inspection of Copilot, Zoom AI Companion, Claude and ChatGPT Enterprise, with prompt-injection and jailbreak detection.
• OEM distribution: Powers Zoom Compliance Manager (2024) and Webex Compliance Hub (2026).
• Analyst validation: First in five of six Gartner Critical Capabilities use cases (2025); Visionary in the Magic Quadrant.
• AI assurance: ISO 42001 and CSA STAR for AI Level II certification; classifier audit and drift reports.
• Integrations: 150+ API endpoints, Relativity, CrowdStrike and data-warehouse connectors.

The following are factors that prospective clients should weigh, and areas where our public review did not find sufficient evidence to reach a settled view. Several are common across vendors at this stage of the market and are not specific to Theta Lake. We encourage prospective clients to raise each of them directly with the company; we have done the same, and will update this note as answers arrive.

• Scale: About $71m raised, no round since March 2022, and about 110 staff.
• Assurance gaps: ISO 27001 not located; SOC 2 type gated; SSO and SCIM not confirmed.
• Training terms: No public no-training statement; models are trained partly on customer feedback.
• Evidence: No published accuracy benchmarks; capability counts are company figures.
• Scope: No trade surveillance and no MNPI module.
• Pricing: Not published; no trial.
• Autonomy: Review assistance rather than autonomous triage.

Theta Lake, Inc. was founded in 2017 in Santa Barbara, California by Devin Redmond, who previously co-founded Nexgate (acquired by Proofpoint), and Rich Sutton, with an office in New York. It holds 18+ patents, including what it describes as the first for risk detection in video communications.

Theta Lake raised a $5m seed led by Neotribe, a $12.7m Series A led by Lightspeed (2020) and a $50m Series B led by Battery Ventures (2022), with Cisco, Zoom, RingCentral, Salesforce and Wells Fargo as strategic investors — about $71m in total. Revenue and valuation are not disclosed.

Company-reported figures are shown as such and are not independently verified. Verification is carried into the vendor questionnaire.

Theta Lake covers capture, archive, review and AI governance for collaboration tools. Figure 2 sets out our assessment of how it maps onto the compliance and surveillance workflow.

Unified Capture

100+ certified integrations, with a connector to third-party archives.

Search and Archiving

SEC 17a-4 archive with replay, legal hold and eDiscovery.

Proactive Compliance

85+ AI detections, custom lexicons and multi-level review.

AI Governance Suite

Capture and inspection of AI assistants and notetakers (2025–26).

Scope of the product today

We did not locate trade surveillance, an MNPI module or public pricing.

Theta Lake uses its own task-specific models — pattern matching and neural networks by content and risk type — trained on public data and customer feedback, with 85+ pre-built detections and classifier audit reports.

No accuracy benchmarks are published; the model behind its AI Compliance Advisor is not disclosed.

Theta Lake captures 100+ tools — Zoom, Teams, Webex, RingCentral, Slack, Symphony, messaging apps via LeapXpert, trade-floor voice via IPC and AI assistants — in full context, with reconciliation reports and a WORM archive.

Clients can keep data in their own storage and connect data warehouses.

Theta Lake fits supervision of collaboration tools and AI assistants, either as a full archive or as a capture-and-detection layer feeding an existing archive.

Trade surveillance and regulatory filing are outside scope.

Theta Lake lists SOC 2, ISO 42001, CSA STAR for AI Level II and PCI DSS in a gated trust centre, and runs on AWS and Azure with bring-your-own storage and key. Figure 3 sets out what our public review located.

We would encourage buyers to request the SOC 2 report, ISO 27001 plans, SSO and SCIM, and no-training terms.

The offsetting factor is distribution: Zoom and Webex chose Theta Lake for their own compliance products.

Pricing is not published; Zoom Compliance Manager is sold as a paid add-on.

Buyers already using an archive can add Theta Lake for collaboration capture.

Theta Lake is the only company in the Established Solutions quadrant of the segment matrix: high investment utility, with market strength held back by scale.

GAII Risk, Compliance & Surveillance coverage, 20 October 2026, scored on the segment variant of Data & Content and Workflow Fit; not directly comparable with Research & Intelligence scores.

11.1 Where Theta Lake is strongest relative to peers

• Against archive incumbents, on collaboration and AI-assistant capture.
• Against surveillance vendors, on capture fidelity.
• Against peers, on OEM distribution.

11.2 Areas of narrower functional focus

Theta Lake has built depth in capture and detection rather than scale or trade surveillance.

• Scale: no round since 2022.
• Assurance: ISO 27001, SSO unconfirmed.
• Scope: no trade surveillance.
• Commercial: no pricing.

Scores are on a 0–10 scale. Each dimension score is the mean of its sub-criteria, and the GAII Overall Score is the weighted mean of the six dimensions. The detailed sub-criteria scores that build each dimension are set out in Appendix A.

These are the areas where our public review did not find sufficient evidence to form a settled view. We have put them to the company and will update this note when they are answered. Prospective clients may find them a useful agenda for their own evaluation call.

• The SOC 2 report type and period.
• ISO 27001 plans.
• SSO/SAML and SCIM.
• No-training terms.
• Model behind the AI Compliance Advisor.
• Accuracy evidence.
• Pricing.
• Revenue and runway.
• Support model and SLAs.
• Trade surveillance plans.
• Subprocessors.
• Named references.

This note is an assessment of a vendor against a defined framework, not a recommendation to buy or to decline. The following are the considerations we would put at the centre of an evaluation of Theta Lake specifically.

If you run compliance or surveillance

• Test capture of your collaboration tools and AI assistants.
• Consider it alongside your existing archive.
• Pilot custom detections.

If you are responsible for technology or vendor risk

• Open with Figure 3; request SOC 2 and SSO details.
• Assess bring-your-own storage.
• Review AI-governance coverage.

If you are assessing the category rather than the company

• AI assistants are a new compliance channel.
• Collaboration platforms embed compliance partners.
• AI management certifications are emerging.

Each dimension score in Section 12 is the mean of the sub-criteria below. Data & Content and Investment Workflow Fit use the Risk, Compliance & Surveillance segment variant.