Not an official website of the United States government
Platform guide

FOIA Enterprise Capability Platform

An enterprise Freedom of Information Act and Privacy Act capability that operates inside the Army's own Microsoft 365 environment. It covers the full lifecycle: public intake and requester education, federated records search across tenant repositories, AI-assisted redaction with human review, formal release approval, and publication to the electronic reading room. Everything on this page is reachable directly from the links below.

Boundary and posture

An architectural position of this build, not a live system check.

Data egress

Zero data egress
Request content, attachments, and review artifacts remain inside the Army Microsoft 365 tenant. No records are transmitted to a vendor hosted environment.

Hosting boundary

Army M365 tenant
The platform executes within the Army's existing tenant, inheriting its identity, conditional access, and audit configuration.

Authorization

IL5 authorized, IL6 in assessment
Controlled Unclassified Information (CUI) workloads are authorized at Impact Level 5. Impact Level 6 assessment is underway.

The two journeys

Suggested demonstration path

Each step jumps straight to the screen it describes.

What is real and what is simulated

Stated plainly, before anyone asks
This is a demonstration environment. The list below separates the working capability from the parts that stand in for a production integration.
Real in this build
  • The redaction engine. The released record is generated as a separate artifact that never contains the withheld characters.

  • The statutory redaction markings and the indication of the amount withheld.

  • The audit trail of every decision, including which suggestions a reviewer accepted, rejected, or added by hand.

  • The open-format exports, which produce genuine CSV, JSON, and HTML files.

Simulated for demonstration
  • The seeded cases and records are synthetic, modelled on the structure of Army releases rather than drawn from real ones.

  • Federated search runs deterministic matching over seeded repositories rather than calling Microsoft Graph.

  • Requester accounts have no authentication.

  • Notifications are generated for review and are not transmitted.

Records, tracking numbers, and case data shown throughout are fictional and do not represent actual Army records or requests.