Skip to content
Ohalo is now DataXray.What changed
Modules / AutoFOIA

FOIA review in days, not months

AutoFOIA takes FOIA, Privacy Act, and declassification review requests from intake to a Bates-numbered release in one application, inside your own environment, including air-gapped networks. It works on files DataXray has already read. AI suggests what’s responsive, and your reviewers make every call. Redactions remove the text instead of covering it.

What it makes possible

Releases that hold up

When FOIA offices review responsive records in shared drives, track them in spreadsheets, and redact PDFs by hand, requests stay open for many months. The AutoFOIA module gives FOIA professionals a faster path from request to release, and takes the hand work out of redaction.

  • Your team stops tracking requests in spreadsheets and passing files between separate tools. Each request moves from intake to release in the same place.

  • Redacted text is removed from the released copy, not covered over. A black box drawn over a PDF only hides the text, and anyone who receives the file can copy it out.

  • AI suggests what’s responsive, and a reviewer confirms every decision.

The workflow

One application, from intake to release

Configured to how you work. Your team chooses the AI model, including on-premises models. We set the module up around the requests your office handles, and we can extend it when you need something it doesn't do yet.

  1. Intake

    Log the request and scope its parameters.

  2. Search

    Search everything DataXray has indexed, with filters or a query language.

  3. Review

    Work through the review queue with keyboard shortcuts and mark each document responsive or not.

  4. Redact

    Detected entities are redacted automatically, and the text is removed from the output.

  5. Produce

    Generate a Bates-numbered release package and cover sheet.

Capabilities

The hard parts of FOIA review, handled

Entity detection, AI triage, and redaction are built into AutoFOIA, not added on through other vendors' tools.

  • Real rasterized redactionEach page is flattened to an image before release, so redacted text is gone from the file, not hidden under a box.
  • AI triage with your modelAI summarizes each document and suggests whether it’s responsive, using your choice of model, including on-premises. A reviewer confirms every call, and each AI call is recorded.
  • Native entity detectionPII and other sensitive entities come straight from DataXray's classifiers. There is no separate redaction tool or third-party integration to license and maintain.
  • Bulk decisions and hand-offReviewers get batch selection, notes, session undo, and a needs-review hand-off to a supervisor.
  • Classified-network readyAutoFOIA runs on a FIPS-capable runtime with encryption at rest, a classification banner, an idle session lock, and a system-use notification, all deployed inside your own accreditation boundary.
  • Live in daysA single self-contained container ships the interface, API, database, and document conversion together. There are no external services and no multi-month implementation project.
How it compares

Fewer systems between request and response

A FOIA office usually works a request across separate systems. It tracks the request in a case management system, searches for records with an e-discovery tool, and collects the documents before anyone can review or redact them.

The AutoFOIA module does all of this in one application, on files DataXray has already read and classified, so there is no collection step. It is built to close the gaps behind inadvertent disclosures and multi-month deployments. Redactions remove the text instead of covering it, and the module deploys in days inside your own boundary.

Frequently asked questions

What is FOIA?

The Freedom of Information Act (FOIA) is a US law that gives the public the right to request records from federal agencies. Agencies must search for the records, review them, redact information that’s exempt from release, and send out the rest within set deadlines. Every US state also has its own public records law.

What is AutoFOIA?

AutoFOIA is a DataXray module that handles FOIA, Privacy Act, prudential search, and mandatory declassification review requests. It takes each request from intake and search through AI triage and redaction to a Bates-numbered release package.

Do I need DataXray to use AutoFOIA?

Yes. AutoFOIA runs on the files DataXray has already read and classified, so no file is read twice. It uses the same sign-in, entity detection, and audit boundary, and you add it to your existing DataXray license with no separate integration project.

What is rasterized redaction and why does it matter?

AutoFOIA renders each page to a canvas, applies redactions in pixel space, and embeds the result as an image, so the text under each redaction is no longer in the file. Black rectangles drawn over text leave the text extractable underneath.

Does the AI decide what to release?

No. The AI stages a summary and a responsiveness opinion that a human reviewer confirms. The provenance of every AI call is recorded, and you can bring your own model, including on-premises.

Does it run in air-gapped or classified environments?

It runs wherever DataXray runs, including air-gapped networks. AutoFOIA adds a FIPS-capable runtime with encryption at rest, a classification banner, an idle session lock, and a system-use notification, all deployed inside your own accreditation boundary.

How long does it take to deploy?

Days. A single self-contained container ships the interface, API, database, and document conversion together, with no external services.

Can it be configured to our needs?

Yes. Your team chooses the AI model, and we set the module up around the requests your office handles. If you need something it doesn't do yet, talk to us.

In 30 minutes, see how DataXray reads what other tools only label