Initial Research Findings

Subsentio Vertical Market Opportunity Assessment

Initial screening results across eight potential expansion markets

November 2026Prepared by Evergreen Results
1 / 38

What the first screening phase indicates

Executive Summary

  1. Fintech, Payments & Crypto emerged as the strongest initial candidate because direct request volumes, operational pain, technical fit, and API readiness are clearly visible.
  2. Social, Dating & Gaming scored strongly on demand and capability fit, but buyer concentration, sophisticated internal teams, and sensitive-data access create material commercial barriers.
  3. Consumer & Cloud SaaS should advance as a narrowly defined data-custodial category. The broad SaaS label includes too many companies where customers retain control of the responsive records.
  4. Banking & Credit Unions remains a recommended deep-dive market. Its 73 reflects open questions about qualified demand, outsourcing adoption, differentiation, and commercial access despite the market's large institution base.
  5. Insurance & Insurtech is the first reserve because strong outsourcing evidence is offset by specialized incumbents and a weaker capability fit.
  6. All eight markets remain in consideration. Four move into deeper research now; four remain on hold pending stronger evidence.
2 / 38

What we assessed and what comes next

Scope of the Initial Screening

Questions addressed

  1. Which verticals show enough evidence of recurring legal-request demand to warrant more research?
  2. Where does Subsentio appear to have the strongest capability adjacency?
  3. Which markets have a plausible pool of reachable, qualified buyers?
  4. Where are the biggest evidence gaps and strategic risks?

Questions reserved for the deep-dive phase

  1. Selection of the final one or two target markets
  2. Market sizing precise enough for investment planning
  3. Direct evidence of buyer willingness to outsource
  4. Implementation economics, pricing, and go-to-market planning
3 / 38

One consistent 100-point framework across all eight verticals

How the Markets Were Evaluated

01

Recurring Evidence of Demand

20%
02

Addressable Potential Buyer Pool

15%
03

Operational Burden & Complexity

15%
04

Willingness to Outsource

15%
05

Fit With Subsentio's Existing Capabilities

15%
06

Competitive Whitespace / Differentiation

10%
07

Ease of Market Entry

5%
08

Repeatability & Repeatability

5%
4 / 38

Attractiveness and certainty are intentionally separate

How We Assessed the Evidence

1

Verified fact

Directly supported by a credible source.

2

Representative evidence

A real example showing the issue exists, with limited market-wide implications.

3

Proxy / estimate

A directional measure used when direct market data is unavailable.

4

Strategic inference

A conclusion derived from multiple signals.

5

Hypothesis requiring validation

Important, but not yet supported strongly enough to treat as a finding.

5 / 38

Scores organize the evidence and support relative comparison

Initial Ranking

1Fintech, Payments & Crypto
82Advance
2Social, Dating & Gaming
78Advance
3Consumer & Cloud SaaS
74Advance selectively
4Insurance & Insurtech
74First reserve
5Banking & Credit Unions
73Advance
6Marketplaces & On-Demand
68Hold
7Mobility, Rental & Telematics
64Hold
8Logistics, Delivery & Fleet
58Hold

Banking, SaaS, and Insurance are separated by one point. Their order matters less than the evidence and open questions behind each score.

6 / 38

Provisional priorities for the next research phase

Provisional Deep-Dive Group

1

Fintech, Payments & Crypto

82

Test the reachable midmarket and the managed-service gap beyond Kodex and internal teams.

2

Social, Dating & Gaming

78

Test parent-level buyer accessibility and underserved coverage needs outside the largest platforms.

3

Consumer & Cloud SaaS

74

Narrow to custodial communications, storage, collaboration, and consumer AI platforms.

4

Banking & Credit Unions

73

Prove the qualified midmarket and one repeatable core-system integration pattern.

First Reserve

Insurance & Insurtech | 74

Promote if a defensible underserved niche emerges or SaaS/Banking fail their depth tests.

7 / 38

The research confirmed the market size and identified five qualification questions

Why Banking Did Not Score Higher

Banking still received 5/5 for prospect depth and 4/5 for demand, operational burden, and capability fit. The 73 reflects open qualification questions, and Banking still advances.
  1. Qualified demand is still unmeasured. Thousands of institutions exist; the next phase must determine how many independent organizations receive 50 or more relevant legal requests annually.
  2. Outsourcing adoption is only partially visible. Outside counsel and outsourced subpoena support exist, while public sources offer limited visibility into how widely banks delegate the operating work.
  3. Differentiation needs more work. Banks already use internal legal-order teams, portals, outside counsel, and specialized providers.
  4. Market entry carries substantial friction. Third-party risk reviews, information-security requirements, procurement, and incumbent relationships can materially slow a new vendor.
  5. Integration economics remain open. Legacy systems, acquired platforms, historical records, and permission structures can increase delivery cost.
8 / 38

Weighting prospect depth more heavily moves Banking to 76; the same qualification questions remain

Banking Sensitivity Test

Current73
→
Alternative weights76
  1. Increase Potential Buyer Pool from 15% to 25%
  2. Reduce Operational Burden from 15% to 10%
  3. Reduce Willingness to Outsource from 15% to 10%
  4. Banking moves into the same score band as Social and ahead of SaaS and Insurance
  5. Fintech remains the leader
9 / 38

Findings That Changed Our Initial View

01

Insurance showed stronger demand than expected

Insurance produced the strongest outsourcing evidence and some of the clearest operational burden. Integrated incumbents and domain-specific delivery requirements kept it just outside the initial group.

02

The SaaS opportunity needs a narrower definition

The most credible SaaS opportunity is a narrower set of platforms that hold responsive third-party data and control production.

03

Social platforms show strong demand and difficult access

Large platforms closely match Subsentio’s operating model. Many also have sophisticated internal teams and concentrated parent ownership.

04

Industry counts need qualification

Carrier, branch, brand, license, and establishment counts must be filtered for data custody, recurring request volume, and buyer fit.

10 / 38

Several themes appeared across otherwise different industries

Cross-Market Findings

  1. The next phase must verify whether each priority market contains 25 to 50 independent, reachable U.S. buyers with at least 50 relevant requests per year.
  2. Kodex is both complementary infrastructure and a competitive capability. Subsentio must prove incremental managed-service value.
  3. Intake APIs cover the front end of the workflow. Production economics depend on authorized records interfaces, historical coverage, permissions, data custody, and exception labor.
  4. Validation-only and overflow support appear plausible, but buyer demand and pricing still need direct validation.
  5. Civil and government workflows should be treated separately because service, jurisdiction, disclosure authority, and routing differ.
  6. International coverage may strengthen the value proposition, while jurisdictional variation and exception handling add cost. Clear scope boundaries will matter.
11 / 38

How the framework should be interpreted

How to Read the Scores

Use the scores to

  1. A consistent comparison across the same eight criteria
  2. A structured way to identify research priorities
  3. A record of why a market advanced, held, or became a reserve
  4. A way to separate market attractiveness from evidence confidence

Keep separate

  1. Market sizing and probability of success
  2. Direct evidence of buyer willingness to outsource
  3. Market-wide prevalence beyond the cited companies
  4. The extent of outsourced human response
  5. Meaningful distinctions at the one- or two-point level
12 / 38

What the deep dives must resolve before selecting the final one or two markets

Next-Phase Decision Gates

These questions need to be resolved before selecting the final one to two target verticals.
  1. Verify a parent-level population of 25 to 50 qualified and reachable U.S. buyers.
  2. Estimate how many prospects plausibly clear the 50-request annual threshold.
  3. Identify the economic buyer, internal champion, and likely budget owner.
  4. Map internal, software, outside-counsel, and managed-service alternatives.
  5. Define the service gap Subsentio can fill beyond Kodex and existing providers.
  6. Evaluate reusable production interfaces and realistic implementation economics.
  7. Identify a credible differentiator substantial enough to justify market entry.
13 / 38

Broad screening summary | 73/100 | Moderate confidence | Advance

Banking & Credit Unions

Bottom Line

Advance provisionally. A broad regulated institution base and recurring records work justify a deeper look at a midmarket offer. The main barriers are bank vendor approval, incumbent relationships, and limited visibility into how many institutions meet the request-volume threshold.

Market Scope

Include regional/community banks, scaled credit unions, and digital banks holding customer records. Exclude bank branches, duplicate holding-company subsidiaries and nonbank fintechs counted elsewhere. Mortgage servicing is adjacent evidence, not included automatically.

Potential Buyer Pool

FDIC-derived data identify 4,238 insured institutions in Q2 2026. NCUA reports 4,287 federally insured credit unions at year-end 2025, including 739 above $500 million in assets. These figures establish a large institution base. The number of independent buyers clearing the 50-request threshold remains unknown. Hundreds may warrant qualification in the next phase.

Evidence of Demand

Bank of America and Credit Union 1 publish formal compulsory-process channels, and CT's New York sample shows a rising subpoena trend. Together, they confirm recurring demand. National frequency by institution still needs validation.

14 / 38

Current workflow, ownership, alternatives, and technical fit

Banking & Credit Unions: Current Workflow

Operational Burden

KeyBank's stated 30-to-60-business-day processing window signals a complex production process. Account matching, older records, and cross-system retrieval are likely cost drivers that need validation.

Likely Internal Owner

Published owners include Legal Order Processing, Legal Operations, and subpoena-processing teams. The likely economic buyer is legal or compliance leadership, with operations and security involved in approval.

How Companies Handle It Today

Internal teams, proprietary portals, ServePort, outside counsel, and managed processing are all established alternatives. Hodgson Russ offers partial or fully outsourced compliance. Public sources provide limited visibility into how widely banks use this model.

Willingness to Outsource

The evidence is mixed. A vendor-reported mortgage case describes 150 to 200 subpoenas per month and outsourcing after acquisitions. That example shows large-scale outsourced processing is feasible in an adjacent segment, while bank-specific adoption remains unclear.

Technical Fit

Symitar APIs suggest reusable credit-union integration potential. A practical connector would still depend on historical record coverage, document access, entitlements, and implementation cost. Permissioned customer APIs remain the preferred delivery model.

50+ Request Threshold

Scaled institutions are plausible candidates for the 50-request threshold, but the full distribution is unknown. Asset size, portal use, and Section 314(a) activity are weak substitutes for measured legal-request volume. The next phase needs process-specific counts.

15 / 38

Recommendation and remaining questions

Banking & Credit Unions: Recommendation and Open Questions

Civil-Request Opportunity

Potentially material: bank guidance separates third-party subpoenas from litigation involving the bank. Garnishment/levy execution should be scoped separately from records production and legal interpretation.

Validation-Only Offer

A possible entry offer is intake screening and completeness review for institutions that already retrieve records efficiently. The service would still need counsel-led escalation and clear customer control over disclosure decisions. Buyer demand for validation as a standalone service remains open.

Overflow Support

Acquisition-related outsourcing suggests a possible overflow offer around migrations, acquisitions, and coverage gaps. The next phase should look for direct evidence that buyers purchase this type of support.

International Scope

A U.S.-first service appears more manageable than a global offering. Cross-border data and entity-specific requirements still need assessment, and the research did not establish a repeatable multinational package.

Potential Differentiator

A potential advantage would combine a focused core-system connector with measurable processing reliability and expert exception handling. Generic intake alone would not create enough separation from established portals and outside counsel.

Ease of Market Entry

Low to moderate. Buyers are identifiable, but bank third-party risk oversight adds diligence and monitoring work. Public sources did not provide a reliable benchmark for sales-cycle length.

Repeatability

Moderate if standardized around one core and bounded processes. Acquired systems and record-retention variation could erase automation savings. Connector coverage and exception hours are the key tests.

Main Risks

The main risks are regulated vendor onboarding, entrenched incumbents, fragmented legacy data, scope confusion between legal orders and records production, and limited evidence about the qualified parent-level market.

What We Still Need to Prove

We still need to establish the distribution of annual request volumes, current buyer spending, incumbent satisfaction, outsourcing prevalence, historical API coverage, and implementation economics. The current demand and depth sources leave qualified buyer depth open for the next phase.

Recommendation

Advance to deep research. The next phase should prove that a reachable midmarket population exists and identify at least one repeatable integration pattern.

16 / 38

Broad screening summary | 82/100 | Moderate confidence | Advance

Fintech, Payments & Crypto

Bottom Line

Advance. Direct request volumes, data-rich workflows, and an established intake ecosystem make this the strongest initial candidate. The next phase should define a managed service that adds clear value beyond request software and internal compliance teams.

Market Scope

Include money transmitters/payment platforms, custodial crypto exchanges, and consumer fintech platforms controlling account or transaction records. Exclude noncustodial tools, small agents/locations and chartered banks counted under Banking; deduplicate parent companies.

Potential Buyer Pool

NMLS reports 599 licensed money transmitters in 2024, and NYDFS provides a second regulated-entity discovery source. These are useful starting lists. A qualified buyer census still requires parent-level deduplication and scale filtering. After parent-level deduplication and scale filtering, a pool of dozens to low hundreds appears plausible.

Evidence of Demand

Coinbase reports 12,716 requests in its October 2024-September 2025 year. Kraken reports 7,957 in 2025, including 2,188 U.S.-origin requests. These establish high demand at major exchanges, not typical fintech volume.

17 / 38

Current workflow, ownership, alternatives, and technical fit

Fintech, Payments & Crypto: Current Workflow

Operational Burden

Legal sufficiency, account matching and partner-bank handoffs create real operational complexity. Chime distinguishes records requests from financial-order execution by partner banks.

Likely Internal Owner

Coinbase identifies analysts and legal advisers; Kraken identifies specialist compliance production staff; Chime has LEGR. Likely budget owners are compliance/legal leaders, with engineering/security influence. Economic-buyer mapping remains inference.

How Companies Handle It Today

Internal specialists, Kodex, and managed legal-response providers all operate in this market. Stripe's guide confirms portal adoption, while public sources provide less visibility into how much of the human response work is outsourced.

Willingness to Outsource

The evidence is mixed. Tooling adoption and available managed providers are positive signals, while disclosure decisions and core compliance ownership often remain internal. A partial managed operation may be more credible than full replacement.

Technical Fit

Kodex provides request and verification APIs, which creates a strong intake foundation. Account and transaction extraction still requires customer-authorized production interfaces, permission controls, and sufficient historical coverage.

50+ Request Threshold

Directly established at the cited exchanges. The next phase must determine whether 25 to 50 independent, reachable U.S. buyers outside the largest incumbents also qualify. Licenses alone cannot answer this.

18 / 38

Recommendation and remaining questions

Fintech, Payments & Crypto: Recommendation and Open Questions

Civil-Request Opportunity

Stripe separates law-enforcement intake from formal civil process. Model civil service as its own workflow; partner-bank attachments/freezes should not be bundled automatically with records fulfillment.

Validation-Only Offer

A possible entry offer is expert exception review layered onto identity verification. Coinbase's internal expertise confirms that the work exists, while also showing that sophisticated buyers may already handle it in-house.

Overflow Support

International demand spikes and specialist staffing gaps could support an overflow offer. Public sources did not provide a reliable measure of fintech-specific buyer demand for that service.

International Scope

High complexity is directly visible in multinational request reporting and entity-specific process. Country coverage should be bounded, with counsel escalation priced separately because automation will vary by request and jurisdiction.

Potential Differentiator

Subsentio could differentiate through managed response layered onto existing intake, with auditable exception handling and reliable production across platform and partner-bank boundaries. The offer would need to be clearly distinct from Kodex integrations and existing managed providers.

Ease of Market Entry

Moderate. Specialist buyer roles are visible; security reviews, financial-data sensitivity and incumbents impede entry. Public sources did not provide reliable sales-cycle or certification benchmarks.

Repeatability

Relatively strong if account/transaction schemas and one intake integration repeat. Partner-bank relationships, multiple jurisdictions and bespoke histories remain the principal cost risks.

Main Risks

The main risks are strong competition, entrenched internal teams, duplicate counting across affiliates, global request volumes being applied to the U.S. market, overestimating outsourcing from software adoption, and scope creep across partner-bank responsibilities.

What We Still Need to Prove

We still need to establish an independent parent-level buyer count, midmarket annual volumes, outsourcing budgets, API deployment effort, and the share of cases that require counsel.

Recommendation

Advance. Deep research should test depth beyond major exchanges and isolate a bounded production/exception service that buyers cannot already obtain economically from incumbents.

19 / 38

Broad screening summary | 68/100 | Moderate confidence | Hold

Marketplaces & On-Demand

Bottom Line

Hold as a credible near miss. Recurring demand is visible, although market concentration and an uncertain middle tier make other verticals a better use of the first deep-dive slots.

Market Scope

Include retail/resale marketplaces, accommodation/booking platforms and service marketplaces holding both sides' data. Exclude individual sellers and affiliates. Assign ride-hailing/rental to Mobility and last-mile delivery platforms to Logistics to avoid double counting.

Potential Buyer Pool

Marketplace 100 offers discovery breadth, while Marketplace Pulse shows concentration of transaction scale. Neither establishes a qualified U.S. population. A pool of tens is plausible after excluding foreign-only firms and duplicate parents, but 25-50 qualified buyers is not demonstrated.

Evidence of Demand

Etsy reports 624 member-related subpoenas and similar requests in 2025. Airbnb documents a global legal-response operation. These establish recurring platform demand without proving broad midmarket frequency.

20 / 38

Current workflow, ownership, alternatives, and technical fit

Marketplaces & On-Demand: Current Workflow

Operational Burden

Production requires linking accounts, transactions and counterparties. Airbnb describes 24/7 emergency response. The burden and specialist coverage are real examples; their cost across smaller marketplaces is unknown.

Likely Internal Owner

Airbnb's Law Enforcement Operations and eBay's Criminal and Regulatory Investigations Team show specialist ownership. Legal/trust leadership is a likely buyer; investigations beyond records production should stay outside the offer.

How Companies Handle It Today

Dedicated internal teams, proprietary portals and managed legal operations compete. Relevant third-party offerings exist, but no marketplace-specific adoption prevalence was established.

Willingness to Outsource

Managed providers show that the work can be outsourced, but public buyer-side evidence is limited. Portal adoption confirms a mature workflow without showing how often companies delegate the underlying response operation.

Technical Fit

Structured orders support a technical hypothesis. eBay's seller-scoped order API has permission and history limits and is not an API to platform-wide legal records. A customer-owned production endpoint would still be required.

50+ Request Threshold

Etsy clearly exceeds the threshold. The broader buyer pool still needs validation because GMV, listing counts, and brand recognition are weak substitutes for measured request volume.

21 / 38

Recommendation and remaining questions

Marketplaces & On-Demand: Recommendation and Open Questions

Civil-Request Opportunity

Airbnb excludes governmental civil investigations from its criminal portal. Civil intake, private-party service, and disclosure review require a separate procedure from the law-enforcement queue.

Validation-Only Offer

A possible entry offer is expert exception review for platforms that already retrieve records efficiently. Etsy's 441 productions from 624 requests confirms meaningful review work, although the remaining requests cannot be treated as invalid or automatically monetizable.

Overflow Support

Generic backlog support exists; no marketplace-specific purchase evidence establishes durable demand. Investigate temporary coverage before assuming a full outsourcing replacement.

International Scope

Cross-border users and entity-specific process create pain, but potentially costly customization. Keep U.S. buyer counting separate from worldwide requests and foreign platform listings.

Potential Differentiator

Subsentio could differentiate through reliable cross-party data assembly and expert coverage layered onto existing tools. That advantage would need to show measurable improvement in cycle time, effort, or response quality.

Ease of Market Entry

Moderate-to-low: specialist owners are visible, but transaction concentration puts many attractive prospects behind substantial security/procurement barriers. This is inference, not measured sales-cycle evidence.

Repeatability

Moderate. Common account/order patterns help; platform-specific schemas, travel records and service-market variations hinder repeatability.

Main Risks

The main risks are a small parent-level buyer pool, market concentration, limited production access, uncertain outsourcing demand, and overlap with the mobility and delivery categories.

What We Still Need to Prove

Missing: qualified middle-market population, current outsourcing spend, representative per-platform counts and repeatable production integration costs. Two depth proxies were reviewed; neither substitutes for a U.S. qualified census.

Recommendation

Hold. Reconsider the market if deeper account qualification reveals an accessible middle tier or a repeatable production pattern in accommodation or retail marketplaces. Limited public counts are not enough to close the market permanently.

22 / 38

Broad screening summary | 74/100 | Moderate confidence | Advance selectively

Consumer & Cloud SaaS

Bottom Line

Advance selectively. The opportunity is concentrated in communications, storage, collaboration, and consumer AI platforms that actually control responsive user records. Company scale alone is a weak predictor of legal-request volume.

Market Scope

Include communications platforms, consumer storage/collaboration platforms and consumer AI services holding relevant user records. Exclude ordinary workflow software, customer-controlled deployments and fintech/social companies counted elsewhere.

Potential Buyer Pool

SaaS Capital's 1,000+ company survey and the Cloud 100 show a large discovery universe, not qualified U.S. demand. Tens to low hundreds of custodial platforms is a working search hypothesis; foreign entities, cross-vertical companies and low-custody tools must be removed.

Evidence of Demand

Twilio reports 4,842 government requests in 2025, 1,775 U.S.; OpenAI reports 620 non-content, 146 content and 28 emergency requests in H1 2026. Bitly reports only 20 in its 2025 categories, a material counterexample to size-based qualification.

23 / 38

Current workflow, ownership, alternatives, and technical fit

Consumer & Cloud SaaS: Current Workflow

Operational Burden

Customer-versus-provider custody, content classification, emergency response, and legal review create real complexity. Adobe's published process also shows that some enterprise requests must be redirected to the customer, limiting the provider's ability to fulfill every request.

Likely Internal Owner

Adobe identifies Trust & Safety review. Likely buyers are legal/privacy/trust leaders with security and engineering influence; ownership and budget authority vary by product and require confirmation.

How Companies Handle It Today

Internal teams, Kodex, and managed legal operations are all established alternatives. An integrated portal confirms a mature workflow, while the extent of outsourced human response remains unclear.

Willingness to Outsource

Moderate, with adoption uncertainty. Supplier capabilities suggest feasibility, but no SaaS-wide outsourcing rate or validation-only budget was established.

Technical Fit

Potentially strong where the provider owns a structured production interface. Kodex already supports production integration and human review, so Subsentio would need to add meaningful operational coverage beyond intake connectivity.

50+ Request Threshold

Directly met by the cited communications/AI examples; not by Bitly's disclosed 2025 categories. Qualify data custody and actual request counts before software revenue or user totals.

24 / 38

Recommendation and remaining questions

Consumer & Cloud SaaS: Recommendation and Open Questions

Civil-Request Opportunity

Government-request policies may not extend to civil production. Twilio's published guidelines exclude civil litigants, so service, custody, and record type require a separate workflow.

Validation-Only Offer

A possible entry offer is legal exception handling layered onto existing APIs. Requester verification, legal sufficiency, and customer authorization are separate steps, and public sources did not establish standalone buyer demand for this service.

Overflow Support

General legal-operations providers offer backlog and ongoing support. SaaS-specific demand for holiday, staffing, or surge coverage still needs direct buyer evidence.

International Scope

Twilio's report confirms global demand. Worldwide request volume should be evaluated separately from the size of the U.S. buyer pool. Jurisdictional routing and tenant control may limit automation.

Potential Differentiator

Subsentio's strongest potential advantage is reliable, auditable production and exception coverage for midmarket platforms that control user data. The fit is strongest in communications and much weaker across generic SaaS.

Ease of Market Entry

Moderate. Buyer functions are recognizable and many companies are technically mature, but production permissions and security approval are substantial gates. No measured sales-cycle advantage was established.

Repeatability

Repeatability appears relatively strong within a tightly defined platform type and much weaker across SaaS as a whole. The model depends on reusable schemas and bounded retention and custody rules.

Main Risks

The main risks are an overbroad market definition, overreliance on communications examples, low-demand counterexamples, customer-controlled data, proprietary integrations, and established managed-service competitors.

What We Still Need to Prove

Missing: 25-50 qualified independent U.S. prospects, current spend, request distribution outside large platforms and repeatable integration costs. Two broad depth sources were reviewed but neither resolves the narrowed population.

Recommendation

Advance with a deliberately narrow focus on data-custodial platforms. If the qualified buyer pool is too small, move Insurance into the deep-dive group instead of expanding the SaaS definition beyond the evidence.

25 / 38

Broad screening summary | 78/100 | Moderate confidence | Advance

Social, Dating & Gaming

Bottom Line

Advance. The strongest direct request volumes and 24/7 workflows align closely with Subsentio's operating capabilities. Buyer concentration and established trust teams make commercial access the central challenge.

Market Scope

Include social/community platforms, dating operators and online multiplayer/game platforms that hold account or communications records. Exclude game studios without live user-data operations, content moderation alone and multiple brands of one parent.

Potential Buyer Pool

ESA confirms a substantial gaming ecosystem, while the number of relevant operators still needs qualification. Match's multi-brand ownership demonstrates why brand-level lists overstate depth. Tens of parent-level prospects is plausible; a qualified 25-50-company U.S. pool remains unverified.

Evidence of Demand

Snap reports 25,449 U.S. government requests in H1 2025. Reddit reports 1,179 standard government/LE account-information requests, including 777 U.S., in that half-year. These are direct demand evidence, not typical dating/game-company benchmarks.

26 / 38

Current workflow, ownership, alternatives, and technical fit

Social, Dating & Gaming: Current Workflow

Operational Burden

Emergency coverage, preservation, identity matching and jurisdictional process are visible. Discord uses verified government intake; Bumble requires the correct entity and identifiers.

Likely Internal Owner

Roblox identifies teams working around the clock with law enforcement. Budget ownership likely sits with legal or trust-and-safety leadership, while security and engineering control access to the underlying systems. Moderation staffing should be evaluated separately from legal-response staffing.

How Companies Handle It Today

Internal specialists, Kodex, and managed response providers are established alternatives. A new provider would need to improve on sophisticated existing operations, not simply replace a manual process.

Willingness to Outsource

Moderate. Relevant suppliers exist, but internal safety infrastructure is deeply embedded. Public sources offer limited visibility into operational outsourcing and standalone validation demand.

Technical Fit

Kodex intake/case APIs provide a workflow route. Private account and content production still requires authorized platform interfaces. Public developer APIs provide little insight into legal-response access.

50+ Request Threshold

Clearly met by major social examples. Dating consolidation and smaller game operators require separate qualification; no market-wide annual volume distribution was found.

27 / 38

Recommendation and remaining questions

Social, Dating & Gaming: Recommendation and Open Questions

Civil-Request Opportunity

Reddit reports 28 private-party information requests in H1 2025, a much smaller category that includes both criminal-defense and civil matters. It should be treated as a mixed workflow that includes civil and criminal-defense matters.

Validation-Only Offer

A possible entry offer is expert handling of legal exceptions and complex jurisdictional routing beyond identity verification. The challenge is that many likely buyers already have capable in-house review teams.

Overflow Support

Around-the-clock operations make coverage a plausible entry point. Public sources did not show how often social or gaming companies purchase overflow support, so buyer demand remains an open question.

International Scope

Entity and jurisdiction rules create genuine work. A bounded country and process scope is more credible than a uniform global offer. Low-volume specialist cases could undermine unit economics.

Potential Differentiator

Subsentio could differentiate through dependable emergency and exception coverage integrated with existing intake systems, backed by auditable production quality. Existing managed providers and sophisticated internal teams raise the standard for that offer.

Ease of Market Entry

Low-to-moderate. Buyers are identifiable, but a concentrated parent pool and sensitive communications data create trust and procurement hurdles. No specific mandatory certification or sales-cycle duration was verified.

Repeatability

Strong within recurring account/preservation workflows; less strong across bespoke content systems and international exceptions. Keep moderation/investigations outside the production-service model.

Main Risks

The main risks are buyer concentration, strong incumbent trust teams, sensitive-content access, high-stakes emergency work, confusion between moderation and legal-response operations, and overcounting brands or studios as independent buyers.

What We Still Need to Prove

Missing: reachable midmarket parent count, outsourced operating spend, game/dating volume distribution, API access and emergency exception costs. Two depth sources were assessed but are not qualified-population measures.

Recommendation

Advance. Focus the deep dive on accessible parent-level buyers and underserved platforms, without allowing the largest social-network request totals to carry the full category.

28 / 38

Broad screening summary | 64/100 | Moderate confidence | Hold

Mobility, Rental & Telematics

Bottom Line

Hold. Location and trip records create a credible service need, but concentrated ownership, unclear qualified depth and fragmented custody weaken the case for immediate deep research.

Market Scope

Include ride-hailing/vehicle-sharing platforms, rental groups, and telematics providers that actually control responsive records. Exclude rental branches and fleet operators counted in Logistics. Count corporate parents once.

Potential Buyer Pool

Auto Rental News identifies major groups and independents, while NABSA's 69 members span organizations, cities, and businesses across six countries. The relevant U.S. buyer pool may range from single digits to a few dozen scaled parent companies, but that estimate still needs validation.

Evidence of Demand

Lyft has a dedicated law-enforcement response function; Turo collects detailed legal-process requests. Current annual request counts were unavailable. Large operators may exceed 50 requests, but that threshold still needs direct validation.

29 / 38

Current workflow, ownership, alternatives, and technical fit

Mobility, Rental & Telematics: Current Workflow

Operational Burden

Trip/vehicle/person matching, urgency and custody division create work. Samsara warns that some device data is not in its cloud and directs investigators toward customers, limiting provider-level fulfillment.

Likely Internal Owner

Lyft names Law Enforcement Response specialists. Legal/privacy/operations are likely economic-buyer stakeholders; rental-group ownership and telematics customer relationships require separate validation.

How Companies Handle It Today

Internal specialists and portals are directly evidenced. Generic digital-platform managed response and ALSP support are alternatives, but mobility-specific operational adoption was not demonstrated.

Willingness to Outsource

Outsourcing appears plausible, but segment-specific buyer evidence is limited. Portal use and vendor service catalogs show that the workflow exists without establishing how often rental or telematics companies outsource it.

Technical Fit

Samsara's history API demonstrates structured telematics retrieval, not rental-system integration. Customer permissions, device synchronization and other trip/payment systems can require multiple connectors.

50+ Request Threshold

Likely at large operators, but no representative current frequency distribution or 25-50-qualified-buyer population was established. Membership, fleet size and rental revenue cannot substitute.

30 / 38

Recommendation and remaining questions

Mobility, Rental & Telematics: Recommendation and Open Questions

Civil-Request Opportunity

Lyft separates private-party civil requests from criminal law enforcement. Accident-related demands may be relevant, but litigation involving the company should not automatically be counted as third-party records work.

Validation-Only Offer

A possible entry offer is review of identifiers, jurisdiction, and scope before records retrieval begins. Existing specialists may already handle this efficiently, so the next phase would need to test whether buyers see enough incremental value.

Overflow Support

Coverage during migrations, staffing gaps, or volume spikes is plausible, although direct buyer evidence remains limited in this vertical. General legal-operations providers offer an alternative, while recurring demand within mobility remains unclear.

International Scope

Entity, custody and location data complicate routing. International membership counts must be excluded from U.S. depth; geographic variation may raise service costs more than demand.

Potential Differentiator

Subsentio could differentiate through accurate trip and vehicle identity resolution, paired with secure assembly of location records across a defined system stack. The offer is strongest where the prospect actually controls the records.

Ease of Market Entry

Low-to-moderate because major rental/platform parents concentrate purchasing power and sensitive location data raises access barriers. Buyer reachability and sales-cycle duration remain estimates based on market structure.

Repeatability

Moderate only within one operating model. Rental, ride-hailing and telematics have different records and custody; combining them into one connector strategy would likely be impractical.

Main Risks

The main risks are a small independent buyer pool, limited request-volume data, fragmented custody across devices and customers, rental workflows that differ from telematics, and concentrated incumbents.

What We Still Need to Prove

We still need current request counts, a parent-level qualified buyer count, direct outsourced-client examples, and rental-system API evidence. The public record is incomplete, so the score reflects uncertainty more than weak demand.

Recommendation

Hold. Reconsider the market if a narrowly defined rental or telematics segment shows enough qualified buyers and a common, accessible system of record.

31 / 38

Broad screening summary | 58/100 | Low confidence | Hold

Logistics, Delivery & Fleet

Bottom Line

Hold at lower priority. Delivery platforms show recurring legal-response work, but the broader fleet and logistics market has limited evidence of 50-plus annual requests or routine outsourcing.

Market Scope

Include last-mile delivery platforms, scaled third-party logistics/parcel operators and fleet operators holding responsive records. Exclude tiny/private fleets, passenger carriers and telematics vendors counted in Mobility. Ordinary operational compliance is outside scope.

Potential Buyer Pool

FMCSA's 2,132,868 active registered carriers span many operation types and sizes; Transport Topics' top 100 is North American. Neither measures qualified U.S. buyers. Tens to low hundreds is only a scale-filtering hypothesis; the 50+ subset is unmeasured.

Evidence of Demand

DoorDash and Instacart document compulsory-process workflows. These delivery-platform examples cannot establish comparable recurring requests at trucking firms, and current annual counts were not found in the reviewed guidance.

32 / 38

Current workflow, ownership, alternatives, and technical fit

Logistics, Delivery & Fleet: Current Workflow

Operational Burden

Matching orders, customers, drivers, and merchants creates real complexity. Telematics adds another layer because data may sit with the fleet customer, the device, or the platform. Market-wide demand remains unclear.

Likely Internal Owner

Instacart identifies its legal department. Likely logistics buyers span legal/claims/operations with privacy/security involvement, but economic ownership in traditional fleets remains an inference.

How Companies Handle It Today

Platform-specific internal intake is evident. General managed legal support is available, but public sources did not reveal a logistics-wide outsourced operating model.

Willingness to Outsource

Outsourcing potential is lower than in the leading markets because we found little fleet-specific adoption evidence, and much of the visible legal work may relate to the company's own litigation instead of third-party records production.

Technical Fit

Good technical signal within telematics: permissioned vehicle-history APIs. Full response may also need order, HR, dispatch and document systems; shared integration economics are not yet demonstrated.

50+ Request Threshold

The threshold has not been established across a meaningful buyer population. Delivery platforms should be qualified separately from fleets, and accident or insurance claims belong in the count only when they create relevant third-party records requests.

33 / 38

Recommendation and remaining questions

Logistics, Delivery & Fleet: Recommendation and Open Questions

Civil-Request Opportunity

Instacart separates civil third-party subpoenas from law-enforcement requests. Civil relevance may be greater for fleets, but the distinction between discovery in own litigation and third-party production is essential.

Validation-Only Offer

Legal intake review could help firms that lack specialist staff. The economics may be difficult, however, if request volume is low enough that retained counsel remains the more practical option.

Overflow Support

Generic support exists; no direct traditional-fleet surge-purchase example was found. Seasonal operating activity is not itself evidence of seasonal legal-request demand.

International Scope

Cross-border operations may add routing work, but the North American company dataset cannot inflate U.S. depth. The economic value of specialized international coverage still needs direct validation.

Potential Differentiator

A potential advantage would be repeatable retrieval across a common telematics and dispatch stack. The model weakens if every customer requires bespoke data assembly or if most work falls outside third-party records response.

Ease of Market Entry

Moderate in principle because scaled firms can be identified, but the buyer function and recurring budget are less clear. No measured procurement or sales-cycle advantage was found.

Repeatability

Moderate technical potential inside a tightly bounded fleet stack; weaker commercial repeatability across fragmented logistics businesses. Delivery-platform evidence should not generalize to all carriers.

Main Risks

The main risks are inflated market counts, an unclear request-volume threshold, fragmented data custody, limited outsourcing evidence, scope creep into the company's own litigation, and highly variable records systems.

What We Still Need to Prove

Missing: direct representative volume counts, fleet-specific outsourced cases, independent U.S. qualified depth and budget ownership. Confidence is Low; missing data reduces confidence before implying zero attractiveness.

Recommendation

Hold at lower priority. The market should advance only if later evidence shows a recurring third-party response workload and a reusable path to the underlying data.

34 / 38

Broad screening summary | 74/100 | Moderate confidence | First reserve

Insurance & Insurtech

Bottom Line

Hold as the closest alternative. Insurance showed strong outsourcing evidence and substantial operational burden, but specialized incumbents and the need for deeper insurance expertise lower its initial priority.

Market Scope

Include scaled P\&C insurers, health/life carriers and claims administrators or insurtechs actually controlling records. Exclude brokers, duplicate regulated subsidiaries and routine claims processing without third-party legal requests.

Potential Buyer Pool

NAIC identifies 1,156 health-statement filers; III provides group-level commercial insurance shares. Neither is a count of qualified parent buyers. Hundreds may merit scale filtering across insurers/administrators, but parent deduplication and 50+ qualification remain unmeasured.

Evidence of Demand

Progressive describes potential civil and investigative disclosure of telematics data. CT's California insurance sample shows a 73% rise since YTD June 2019, not national frequency per carrier. An outsourced insurer case adds operational demand evidence.

35 / 38

Current workflow, ownership, alternatives, and technical fit

Insurance & Insurtech: Current Workflow

Operational Burden

Claims files, sensitive personal data, review, production and backlog management create substantial work. The vendor-reported Integreon case confirms that the workflow exists, although its age limits what it tells us about current prevalence.

Likely Internal Owner

The case supports claims/legal operations involvement. Likely buyers are legal operations or claims leadership, with privacy and security involved in approval. Buyer ownership may vary across products and organizations.

How Companies Handle It Today

Internal teams, managed legal operations and ClaimFox's Guidewire-integrated fulfillment are real alternatives. ClaimFox advertises no cost to insurers. Its terms and scope need verification before making an economic comparison.

Willingness to Outsource

Insurance produced the strongest direct outsourcing signal in the screen: a documented operating case and a specialized integrated fulfillment offering. That evidence confirms an active market, while the opportunity for a new entrant still needs to be established.

Technical Fit

Guidewire documents claim-document metadata/content endpoints, supporting technical feasibility. Installed versions, permissions, and legacy documents still vary. Insurance review expertise is an additional requirement.

50+ Request Threshold

Scaled carriers may clear the threshold based on the operating case, but a representative annual distribution is unavailable. Claims volume and legal-entity counts are poor substitutes for compulsory records requests.

36 / 38

Recommendation and remaining questions

Insurance & Insurtech: Recommendation and Open Questions

Civil-Request Opportunity

Likely a central use case, with direct policy evidence for civil subpoenas. Separate third-party records response from ordinary claims administration and litigation defense.

Validation-Only Offer

Complex review may support a specialist validation offer, although established counsel and managed providers already cover portions of the workflow. The next phase would need to test whether buyers value validation as a distinct service.

Overflow Support

The case directly supports capacity/backlog outsourcing. Its 18-to-25-resource expansion covers multiple tasks and cannot be converted into subpoena volume or per-request economics.

International Scope

Not established as a differentiator in this screen. Jurisdiction, records sensitivity and administrator/carrier boundaries could add cost; a U.S.-first scope is the more testable hypothesis.

Potential Differentiator

The strongest potential opening sits outside routine claim-file fulfillment. Difficult exceptions, underserved record types, or response work that requires deeper legal judgment could create a defensible position against integrated incumbents.

Ease of Market Entry

Low-to-moderate: roles are recognizable but specialized incumbents, sensitive records and embedded workflows constrain entry. ClaimFox's advertised economics make price-led assumptions particularly unsafe.

Repeatability

Moderate within a common claims platform; weaker across products, administrators and legacy archives. Existing integration proves feasibility and simultaneously raises the competitive standard.

Main Risks

The main risks are strong incumbents, unclear economics that may be subsidized or requester-funded, an insurance-domain expertise gap, double-counted legal entities, reliance on an older unnamed case, and confusion between claims work and legal-request response.

What We Still Need to Prove

Missing: incumbent scope/pricing details, underserved buyer population, current request counts, switching reasons and Subsentio's insurance-domain delivery advantage. Two depth sources and direct outsourcing evidence were assessed.

Recommendation

Hold as first reserve. It ties SaaS on attractiveness but loses the initial slot on differentiation and capability adjacency. Promote it if a defensible underserved niche emerges or the narrowed SaaS population fails qualification.

37 / 38
38 / 38