Epiq buys Canopy’s AI breach-response platform

25 Sep 2026 (ET): Epiq said it acquired Canopy, a data-breach response technology company. Canopy’s Auto Review uses agentic AI to automate first-level review so teams can jump from culling to quality control; the platform will fold into Epiq AI and Epiq Service Cloud. Price not disclosed.

FINANCE desk — when a company is hit, the lawyers who tell people their data was exposed are often on a clock that starts the day they know who was affected. The slow work is the first pass through the files. Epiq says it already serves more than 87% of that breach counsel, and it is buying Canopy’s Auto Review, which uses an agent to do that first pass so a team can move straight to checking the result. The release does not say what Epiq paid.

What the release says was bought. Epiq announced the acquisition of Canopy, called a leading data breach response technology company. The release says the deal lets organizations manage cyber incidents more efficiently and accurately by combining the Canopy platform with the global scale, cyber expertise, and ongoing AI investment of Epiq. Leading, efficiently, and accurately are the release’s words. The company page does not print a price, a valuation, or any other deal term. Do not invent a number.

What the platform does. The patented Canopy platform assesses exposed data, detects sensitive information, and identifies impacted individuals. Its Auto Review feature uses agentic AI to automate first-level data mining review, allowing teams to move directly from culling to quality control. Agentic, here, means the software is supposed to do that first pass, not only answer a question about the files. Culling is the first sort: set aside files that do not matter and keep the ones that might. Quality control is a person checking what the software kept. Data mining, in this sentence, means searching the exposed files for sensitive information and for the people it belongs to. Those glosses are this desk’s. Patented is the release’s word. This desk did not read the patent.

Where the release says the platform will live. The platform will be integrated into Epiq AI™, which the release calls an agentic AI solutions suite, and will be accessible through the Epiq Service Cloud, a legal technology and services platform that provides clients with streamlined access to cyber solutions. Will be integrated, and will be accessible, are the release’s tense. This desk did not open Service Cloud.

Who joins. Epiq welcomes the Canopy team, including former Chief Operating Officer Adi Elliott, who joins as Vice President, Product Management, Cyber. The release says Elliott brings experience leading software and services businesses across legal technology, cyber incident response, and data-driven operations. Canopy engineers and cyber response specialists also join Epiq to contribute to the development of Epiq AI™ for Cyber. Also join, and to contribute, are the release’s tense. This desk did not see an offer letter or a headcount.

Scott Berger, as a quote, not as a client list this desk checked. Berger, Senior Vice President, Managed Services and Cyber Solutions at Epiq, said Canopy has been a longstanding partner to Epiq in helping organizations respond to cyber incidents. He said that by welcoming its technology and engineering talent into the team, clients benefit from a more connected breach response experience. He said they gain next-generation cyber solutions that further reduce risk exposure through proactive preparedness and strengthen post-event response with AI. Those are his sentences on the page. Longstanding, more connected, and next-generation are his words.

Adi Elliott, as a quote. Elliott said Canopy was built to support organizations in understanding the scope and impact of a cyber incident and responding with greater speed and confidence. He said that with Epiq, they gain global resources and scale to build on the foundation that made Canopy successful and bring that technology to more organizations. Those are his sentences on the page. Greater speed, and more organizations, are his words. They are not a measured before-and-after.

The scale lines, kept as the company’s figures. Epiq says it is a trusted partner to more than 87% of breach counsel and over 70% of cyber insurers. Breach counsel, here, means the lawyers who handle a breach for a company. A cyber insurer is the insurer that covers that kind of loss. Those glosses are this desk’s. The company supports more than 1800 cyber incidents annually, delivering up to 95% data reduction using AI and facilitating up to 2 million notifications per day. Data reduction, here, means the software throws out files that are not part of the notice, so the pile left to review is smaller. A notification is the notice sent to a person whose data was exposed. Those glosses are this desk’s. More than 87%, over 70%, more than 1800, up to 95%, and up to 2 million are the release’s. Up to is the release’s ceiling, not a count this desk audited. The release says Epiq AI for Cyber extends that work.

Who the about box says Epiq is. Epiq takes on large-scale and complex tasks for corporations, law firms, and the courts by integrating people, process, technology, and data intelligence. It says clients rely on it to streamline legal, compliance, and settlement administration workflows. The about box says a presence in 17 countries and 4000 people worldwide. The site line is epiqglobal.com. The press contact is John Lute, Senior Director, Marketing, John.Lute@epiqglobal.com. 17 and 4000 are the about box. The box does not print a price. Do not turn 4000 into a headcount this desk counted.

What the card shows. The card is Canopy’s Auto Review launch graphic, the product graphic for the agentic feature the release says Epiq is buying. A dark blue band carries three green trees and the Canopy wordmark. A light blue strip reads CANOPY NEWS. The headline is “Canopy Unveils Auto Review: Agentic AI for Incident Response Data Mining,” with Auto Review set on a green bar. No date is printed on the card. It is not an Epiq wordmark, and it is not a photograph of a signing. The catalog chip is FINANCE.

Plain English for the rest of the card. Epiq, a company that does large legal jobs for corporations, law firms, and courts, said it bought Canopy. Canopy’s software looks through files exposed in a breach, finds sensitive information, and names the people affected. Auto Review is the part that uses an agent to do the first pass, so the team can go straight to checking the work. Epiq says that software will sit inside Epiq AI and be reached through Epiq Service Cloud. Adi Elliott, who was Canopy’s chief operating officer, joins as a vice president for the cyber product. The page does not say the price.

PRIMARY here: Epiq’s 25 Sep 2026 news post, datelined New York, plus the GlobeNewswire address whose public listing shows September 25, 2026 09:00 ET, Source: Epiq — Tier A PRIMARY, the company’s own release. STATUS PRIMARY. The desk label on the chip is CONFIRMED because that is the catalog word for a primary page we can stand on. The acquisition, the leading-company line, the patented platform, Auto Review’s agentic first-level review, the move from culling to quality control, the integration into Epiq AI™ and Epiq Service Cloud, Adi Elliott’s new title, the engineers and specialists, both quotes, more than 87% of breach counsel, over 70% of cyber insurers, more than 1800 incidents a year, up to 95% data reduction, up to 2 million notifications a day, the 17 countries, the 4000 people, and John Lute are that release’s. NOT claimed: a price, a valuation, a patent this desk read, a Service Cloud screen this desk opened, an audited percentage, a headcount this desk counted, a GlobeNewswire HTML body this desk loaded, a stock tip, or investment advice. The card is the Canopy Auto Review launch graphic. Distinct from the already-filed cognition-1b-arr, nscale-pre-ipo-336b, overlord-labs-10m-seed, and gen-ai-data-checker. The catalog chip is FINANCE, not SIGNAL.