How CivicRecordsOnline works in detail.

Open a supported document in the browser. The Instant Privacy Scan looks for configured patterns and creates draft redactions. Find & Fix Everywhere searches for text or patterns across the document, and manual tools handle anything else. Staff review the matches, decide which exemptions apply, and approve redactions before CivicRecordsOnline creates a separate flattened release copy. The source file remains unchanged while it is retained.

• Instant Privacy Scan — looks for common structured details such as Social Security numbers, phone numbers, emails, dates of birth, addresses, ZIP codes, driver license numbers, VINs, card numbers, and IP addresses, then proposes draft redactions
• Find & Fix Everywhere — search for a name, phrase, internal ID, literal value, or text pattern and apply reviewed matches across the document
• Sensitive Details Check — uses contextual rules to flag possible health details and names of minors for closer staff review; the agency decides whether an exemption applies
• Scanned-paper reading — reads the text out of supported scanned PDFs and images so staff can use the privacy scan and search tools; scan quality, unusual formatting, and handwriting can affect results
• Manual review tools — draw boxes or highlight text to redact anything the scan should not infer
• Exemption tagging — staff can associate a redaction with the exemption code they selected
• Draft review before release — nothing is published silently. Staff approve every redaction before the release copy goes out.
• Permanent Safety Lock — approved redactions are applied to a separate flattened release copy; the source file is not altered by redaction
• Defined matching rules — the scan uses pattern matching rather than a generative AI interpretation, and agency records are not used to train an external AI model

Choose your state during setup and review the included deadline and holiday settings. CivicRecordsOnline applies your saved calendar and timing rules to each request. Add local closures and policy choices before opening the public portal.

• Deadline, holiday, and exemption defaults for supported U.S. jurisdictions, configurable by agency
• Adjust any deadline rule and add custom exemptions to fit your agency
• Skips state holidays and your city's local holidays
• Color-coded deadlines: green means you have time, yellow means soon, red means now
• Automatic reminders to staff before deadlines hit
• Record a configured clock pause while waiting on clarification, where the agency's rules allow it
• End-of-year compliance reports ready when your state asks for them

State laws and agency guidance change. Have your records officer or attorney approve the setup before you go live.

How many times has your office pulled the same budget, the same meeting minutes, the same salary schedule? The system keeps a Released Records Portal — sometimes called a FOIA reading room — a public page of records you have already released. When someone starts a new request, it checks if the answer is already available.

• A Released Records Portal where anyone can search and download what has been released
• When a requester starts typing, the system suggests matching records before they submit
• Track how many requests were answered without new staff work
• Report how often people viewed or downloaded published records

Drag and drop files into the request. View PDFs, images, and other documents right in your browser. Mark what is internal and what is ready to release. When it is time, send the requester a secure download link.

• Upload files supported by the request workspace, up to the configured per-file limit
• Drag and drop multiple files or entire zip folders at once
• View PDFs, images, and common office files without downloading them — redaction covers documents and images only
• Run the Instant Privacy Scan or Find & Fix Everywhere before a record leaves the request
• Requesters get a secure link that expires automatically
• During an active account, release copies remain with the request while source files follow the agency's retention settings

Your agency's own records system stays the system of record for original documents. CivicRecordsOnline holds working copies while you process the request, and is the system of record for the request file itself — the deadlines, correspondence, released copies, and audit trail. Under Settings → Retention (and in the setup wizard), you set how many days after a request closes those working copies are cleared. Your schedule, your decision — the system carries it out.

• Retention schedules — source files are cleared a set number of days after the request closes. The starting number is 180 days, raised automatically where your state allows records disputes for longer, adjustable from 30 days to 10 years, and clearing can be turned off entirely. Nothing is cleared until you save your retention settings during setup — the schedule runs on your decision, not ours
• What the source-file purge does not clear — during an active account, the source-file purge leaves release copies, the request record, and audit history in place
• Proof after clearing — every cleared file leaves a fingerprint in the audit trail, plus its name, size, and type on the request, so you can prove the copy in your own records system is identical, byte for byte, to the file the redactions were applied to
• Automatic closing — after records are sent, a request with no activity closes on its own. The default is 30 days, adjustable from 7 to 365, and it can be turned off. The requester gets an email, and staff can re-open the request at any time
• Litigation hold — a lead clerk or administrator can exempt a request from automatic closing and source-file purging while the hold remains active
• Set it to match your records retention schedule — if you are not sure what number fits, ask your city attorney

Export request metadata from a supported system as CSV, upload it from Settings → Bulk Import, review the mapping, and run the import. Supported dates, statuses, requester contact information, and source IDs can be retained. The importer does not move historical document files or attachments.

• Direct CSV format support for NextRequest, GovQA, JustFOIA, FOIAXpress, and MyGovHub exports
• Generic CSV format for everything else (Tyler exports, internal spreadsheets, custom systems)
• Downloadable CSV template so you know exactly what columns to map
• Retain supported source dates for the imported request record; current deadline behavior also depends on the agency's saved configuration
• Map supported source statuses and report rows that need correction
• Per-row error reporting with one-click retry for the rows that did not import cleanly
• Full import history kept under Settings, including who imported what and when

Your previous system can stay accessible as read-only while CivicRecordsOnline takes over new requests, or files can move on your own timeline.

Staff can open a support ticket inside the application, attach relevant files, reply in a thread, and review the agency's previous tickets.

• Open a ticket from the staff portal — subject, category, message, attachments
• Attach screenshots, problem PDFs, or error exports (up to 10 MB each, 25 MB per ticket)
• Categorize as General, Issue, Billing, or Setup so the right person picks it up
• Mark Urgent for issues blocking the office
• Watch status update from New → In Progress → Resolved without refreshing your inbox
• Threaded back-and-forth with support, every reply timestamped on the ticket
• Full ticket history kept per agency — when a clerk leaves, the next clerk can see what was already asked
• Each ticket gets a number (SUP-2026-XXXXXX) you can quote when emailing
• Email notification on every reply so you do not have to log in to know it was answered

Data is hosted on Microsoft Azure in US regions, encrypted at rest using Azure controls, and encrypted in transit over HTTPS. Redaction scanning uses defined matching rules rather than generative AI, and agency records are not used to train external AI models. Review the IT page for scope and limitations.

• Data encrypted at rest using Azure controls and in transit over HTTPS
• Role and department scope control staff access
• Data hosted on Microsoft Azure in US regions
• Source files follow agency retention settings; account closure and deletion follow the documented data lifecycle
• Every draft, review, publish, and release action is captured in the audit trail
• Accessible for users with disabilities
• Microsoft and Google work-account sign-in are available on every plan
• Security and data-handling details for IT review