Built for UK public bodies
Disclose with
confidence. Every time.
AI proposes the redactions. Your officers decide. GovRedact handles SAR and FOI disclosures end to end, with a defensible audit trail.
Pay per case · No subscription · Data never leaves the UK
20working days
statutory FOI deadline tracked per case
100%human sign-off
no redaction leaves without officer approval
0data offshore
every byte stays in Azure UK South & West
1click
from approved review to safety-checked bundle
Everything from upload to disclosure bundle
A complete workflow built around the FOIA and DPA process your team already follows.
AI proposes. Humans decide. Always.
Every message and attachment is scanned for third-party personal data, commercial sensitivity, and legal privilege, with the FOIA or DPA exemption cited for each proposal. Bundle generation stays locked until every proposal has been accepted, rejected, or edited by one of your officers. This is a legal requirement, and we enforce it by design.
True PDF redaction
Underlying text is permanently removed from the output PDF, not hidden behind a black box. The result passes the copy-paste test every time.
$ pdftotext bundle.pdf -
The attendees included ████████████
✓ no recoverable text
Immutable audit trail
Every decision in a tamper-evident log: who, when, which exemption. ICO-ready reports in one click.
Any mailbox export
PST, MSG, EML, ZIP, PDF, DOCX, XLSX and scanned images, normalised into a reviewable format automatically.
Microsoft Entra ID
Staff sign in with their existing council Microsoft accounts. No separate passwords to manage.
UK sovereign hosting, pay-per-case billing
All data stays in Azure UK South and UK West with a full data processing agreement as standard. You pay only when you process a case: the price is shown before any work begins, and card or invoice/PO are both supported.
How it works
A six-stage pipeline built on the FOIA and DPA workflow your team already follows. Nothing is processed, and nothing is charged, until a person says so.
Start your first caseUpload the mailbox export
Drag and drop PST, MSG, EML, ZIP, or PDF files. The normalisation pipeline extracts every email and attachment into a structured, searchable format.
Review the cost estimate
Before any AI processing begins, you see the page count and price. You approve the cost before work starts. No payment is taken until you confirm.
AI scans every message
Structured redaction proposals are generated for each document, with the exemption code, the specific text span, and a plain-language reason.
Caseworker reviews every proposal
Each proposal is shown in context alongside the original text. Accept, reject, or edit with a reason code. Bundle generation stays locked until every proposal is reviewed.
Bundle generated and safety-checked
A redacted PDF bundle is produced with a cover sheet, case summary, and per-message audit page. A safety check scans the output before release.
Download and disclose
One click to download the completed bundle. The case then enters its retention period before secure deletion.
Pay per case. Nothing else.
No subscription, no per-seat fees, no annual licence. The price is based on the page count of the case, you see it before processing begins, and no payment is taken until you approve.
| Tier | Pages | Price per case |
|---|---|---|
| XS | 1–50 | £50 |
| S | 51–150 | £100 |
| M | 151–500 | £175 |
| L | 501–2,000 | £300 |
| XL | 2,001–10,000 | £600 |
| XXL | 10,000+ | Quote |
Page counts come straight from your mailbox search. Card or invoice/PO, both supported from day one.
Every case includes
- AI redaction proposals with exemption codes
- Human review interface and bulk tools
- True PDF redaction and safety check
- Immutable audit log and ICO reports
- Deadline tracking against statutory limits
- UK GDPR data processing agreement
County associations
Your own portal. Your own brand.
Pre-buy case bundles at wholesale rates and offer your member councils a fully white-labelled portal with your name, logo, and colours.
Talk to us about partnership →Common questions
Is the AI making the redaction decisions?
No. The AI proposes redactions and your caseworkers make every decision. The bundle generation step is locked until every AI proposal has been explicitly accepted, rejected, or edited by a human. This is enforced by design.
Where is our data stored?
All data is stored exclusively in Microsoft Azure UK South and UK West regions. No data leaves the United Kingdom. A full data processing agreement (DPA) under UK GDPR Article 28 is provided as standard.
Can we redact PDFs and attachments, not just emails?
Yes. We support PST, MSG, EML, PDF, DOCX, XLSX, PPTX, and image files (JPEG, PNG, TIFF). All attachments are converted to reviewable text and included in the AI scan. PDF redaction permanently removes underlying text, not just overlays.
We are on Microsoft 365 Business Premium. Can we still use it?
Yes. Business Premium councils can search and redact email content. Searching Teams messages, SharePoint files and OneDrive requires an E3 or E5 licence; for a single large case a one-month licence step-up unlocks full search, and we will guide you through it.
How do we handle very large cases with thousands of documents?
AI scans run in parallel, the review interface includes bulk decision tools, and you can filter and sort messages to prioritise your work.
Is GovRedact on the G-Cloud Digital Marketplace?
Yes. We are listed on G-Cloud under the Digital Marketplace, meaning UK public sector bodies can procure without a full OJEU tender process. Contact us for framework details.
What happens to our data after a case is closed?
Cases enter a configurable retention period. At the end of it, all case data including messages, attachments, AI proposals, and bundles is permanently deleted.
Can we use our existing Microsoft Entra ID (Azure AD) accounts?
Yes. GovRedact integrates directly with Microsoft Entra ID via OIDC. Staff sign in with their existing council Microsoft accounts. No separate password or user management needed.
See GovRedact with your own workflow
We'll walk through a live case in 30 minutes. Response within one business day.