Control Risks' discovery spin-off changes your counterparty before it changes your technology
LawNext reported in October 2026 that Control Risks, the global strategic intelligence and security firm, has agreed to spin off its Discovery + Data Insights and Forensics businesses into a stand-alone company. It will operate initially as Control Risks – Compliance, Investigations & eDiscovery and will be owned by private equity firm Beringer Capital. Control Risks keeps what it calls a "meaningful" equity stake, size undisclosed, plus a strategic partnership. Closing is expected before the end of 2026. Georges Sabongui, CEO of CloudNine from 2021 to 2024 and chief commercial officer at X1 from 2019 to 2021, will run it. Teams across the Americas, EMEA and APAC transfer, including partners Michele Wiener, Brad Kolacinski, John Kim and Brian Mich. LawNext's account gives no price.
What actually changes for a client with a live matter?
On the announcement's own terms, nothing changes until closing, which is expected before the end of 2026; until then the businesses run as usual inside Control Risks.
After closing, the open questions are practical. Which legal entity signs your statements of work? How are in-flight matters moved across? What happens to your data-processing terms? LawNext's account addresses none of this, and the interim name suggests the paperwork may be revisited.
If you have a collection mid-review, or a production deadline near closing, treat the transfer as a project risk rather than a press release.
Is this a technology story or an ownership story?
Ownership. The announcement promises more investment in technology, talent and geographic expansion, but names no product, platform, roadmap or budget. Treat the technology claim as intent, not a deliverable.
Sabongui's record is in e-discovery and forensics companies, which makes him a credible operator. A CV is not a product plan, though. He says the new company will invest more aggressively. More than what? No baseline, amount or measure has been given, and the stake size and deal terms are equally opaque. A private equity owner will want growth. Whether that arrives as new capability, higher prices or acquisitions is unknown.
What should I ask my provider before it closes?
Ask who the contracting entity will be, where evidence sits and under whose control, which sub-processors and hosting providers change, and whether the people on your matter stay.
Two points the coverage skips. First, Control Risks is described as a strategic intelligence and security firm, and it keeps both equity and a partnership. Ask what separation exists between it and the new company, and what information, if any, flows back. Second, a change of entity is a custody event. The chain-of-custody record should log the transfer of your evidence, and any commitment that privileged material is never used to train models should be confirmed as carrying over.
Architecture matters here. Where evidence stays in your own cloud account under your own keys, a change of vendor owner matters far less. Where it sits in the vendor's environment, it matters a lot. If a provider can't answer these questions before closing, that tells you something.
Frequently asked questions
Who owns and runs the new company?
Beringer Capital owns it and Georges Sabongui is CEO. Control Risks retains an equity stake of undisclosed size.
Is the deal complete?
No. Control Risks has entered into an agreement and expects closing before the end of 2026.
Do I need to act now?
Not to keep service running. But get written answers on the contracting entity and data handling before closing, not after.
The original report
Control Risks, a global strategic intelligence and security firm, said today that it has entered into an agreement to spin off two of its businesses, Discovery + Data Insights and Forensics, into a new, stand-alone company that will operate initially under the name of Control Risks – Compliance, Investigations & eDiscovery. The new company will…
LawNext
Industry headlines from other publications. Each links to the original reporting on the publisher's own site.