Feith enforces federal records compliance on the record itself, from capture through disposition. Zero Trust aligned, FedRAMP authorized, and DISA-JITC certified continuously since 2002.
Other systems enforce compliance at the folder or the perimeter. Feith enforces it on each record: six controls that travel with the record and resolve at query time, not at the directory.
CUI, PII, and classification markings applied automatically on capture.
Native classification markings (U//FOUO, CUI, SECRET, and the rest) plus custom agency taxonomies, rule- and ML-driven.
Schedule-driven retention, with disposition locked to the schedule.
Records can’t be deleted outside the schedule. Holds suspend disposition without altering the schedule itself.
Pattern-based and ML-assisted PII identification across every record type.
Configurable taxonomies for agency-specific PII, CUI categories, and sensitive program data. Keyword alerts flag sensitive communications.
Classification, nationality, and supplemental markings enforced at the record level.
Clearance and caveats travel with the record. ABAC evaluates user attributes against record markings at query time.
Directory-integrated roles with attribute filters on every query.
Access lives at the record level, resolved on every query. RBAC and ABAC combine; CAC, PIV, PKI, MFA, and biometrics are all supported.
Automated redaction with reviewer accept/reject and FOIA exemption coding.
Every redaction decision, including AI suggestions the reviewer rejected, lands in the audit log.
Admins assign users to roles in the directory; roles are cumulative, so a higher clearance inherits every lower tier. ABAC filters each query at run time, so access resolves at the record level.
| Role / group | Unclassified | CUI | Secret |
|---|---|---|---|
| Resource Mgt Unclassified only | ✓ | – | – |
| Resource Mgt · CUI CUI + Unclassified | ✓ | ✓ | – |
| Resource Mgt · Secret Secret + CUI + Unclassified | ✓ | ✓ | ✓ |
From the Federal Records Act to FRCP eDiscovery, the same platform satisfies the capabilities each regime demands. A capability is listed only where Feith demonstrably satisfies it.
44 U.S.C. Ch. 31
Not applicable: Redaction & release.
OMB M-23-07 · M-19-21
Not applicable: Redaction & release.
DoD records
5 U.S.C. § 552
5 U.S.C. § 552a
Accessibility
Not applicable: Capture & metadata, Classification & markings, Retention & disposition, Audit & chain of custody.
32 CFR 2002 · NIST 800-171
Federal Rules
Write-once and hash-chained. Every event embeds the cryptographic hash of the one before it, so the chain itself is the proof.
hash = SHA-256( event_id ‖ record_ref ‖ actor ‖ action ‖ timestamp ‖ payload ‖ prev_hash )
No anonymous events. No nullable actor. Schema-versioned and backwards compatible.
Each event embeds the hash of the prior event. The chain is the proof.
Modifying any field of any event invalidates that event’s hash, which breaks every later link. A change is mathematically detectable, not silent.
Every capture, classification, access, modification, hold, and disposition is logged with the actor that triggered it. Service accounts, system actions, and human users each carry a distinct identity through the chain. No anonymous events.
The audit log is append-only. Each event references the cryptographic hash of the prior event, and anti-tamper digests guard against manipulation. A break in the chain is detectable, not silent.
Holds attach to records, queries, custodians, or schedules. Suspended dispositions stay suspended until the hold is released, and releases are documented. FRCP obligations are met without forensic recovery.
When a record reaches the end of its schedule, the disposition (transfer to NARA, deletion, or accession) is documented with the same rigor as any other event. The custody record travels with the transfer.
One identity layer authorizes every path in. One encrypted, single-tenant vault holds the records. One append-only audit layer records everything, with operations watching the floor.
M365 · ServiceNow · FOIA.gov · Pay.gov · files · databases · paper
Encrypted records store
Continuous monitoring · anomalous-access alerts · 24/7 SOC integration · WAF / IPS compatible · customer-managed keys
Data sovereignty isn’t a setting. It’s the architecture. AI runs inside your boundary, against records that never leave it.
The model comes to the records. Nothing crosses the perimeter.
AI orchestration runs inside the deployment. Cloud, on-prem, or air-gapped, the model talks to records that already sit behind your accreditation, not across an external API.
Vendor-agnostic across cloud and on-premises foundation models. Azure OpenAI and open-weight models are supported, and your records never enter a vendor training corpus.
Every AI-assisted action is logged with the model reference, input, output, and the reviewer’s accept-or-reject decision. Audit-grade AI: explainable, reversible, accountable.
The credentials a federal records officer screenshots before sending the meeting invite. Each plate names the specific posture the authorization actually grants: authorized, certified, validated, aligned, or ready.
Cloud, on-premises, and classified air-gapped deployments all share one Records API, one compliance posture, and one audit log. Bit-for-bit identical, no degraded mode.
Civilian agencies that want managed services and rapid deployment.
Agencies with data-sovereignty requirements or legacy integration constraints.
Defense and intelligence missions that require air-gap operation.
Identical platform capabilities across all three models: same Records API, same compliance enforcement, same audit posture.
Non-classified IP Router Network. DoD unclassified operations.
Secret IP Router Network. DoD Secret-level operations.
Joint Worldwide Intelligence Communications System. TS/SCI operations.
Government cloud environments at higher classification levels.
What civilian agencies run in the FedRAMP cloud is what Feith delivers inside accredited facilities: no external connectivity, no degraded mode.
Outside the boundary: no external connectivity, no degraded mode, no exfil path.
Feith holds a Facility Security Clearance. Sensitive workloads can be hosted in Feith-cleared environments where a customer’s accreditation requires it.
63% of Feith staff hold a Secret or higher clearance; 49% hold SCI. Every administrator of a sensitive federal system is a US resident with an active TS/SCI clearance. Program leadership includes retired senior Intelligence and Special Operations personnel.
Classification, nationality, and supplemental markings are enforced at the record level. A user’s clearance filters results without revealing that inaccessible records exist.
The integrated Declassification Review module supports cross-domain workflows (Automatic (ADR), Mandatory (MDR), and Systematic (SDR) review) in compliance with Executive Order 13526.
Interagency consultation happens inside the classified boundary. Multiple cleared agencies coordinate over the same records without removing them from controlled environments.
Classification, retention, redaction, AI orchestration, and audit logging operate identically inside the boundary. No degraded mode, no reduced feature set: the Records API, workflow engine, and audit log are bit-for-bit the same.
US-only, FOCI-clean, and FAR-compliant today, hardened in partnership with the US Intelligence Community and DoD.
Support, development, services, and engineering performed exclusively within the United States.
No non-US proprietary code or tools in development or continuous monitoring of the platform.
Free of foreign ownership, control, or influence. Facility Security Clearance maintained.
No engagement with Forced Technology Transfer countries. No Covered Equipment in the platform stack.
Fully compliant with Federal Acquisition Regulation 52.204-24 and 52.204-26.
Across three tiers: named civilian agencies, the Department of Defense, and the Intelligence Community.
Named civilian customers, including:
Plus cabinet-level departments, independent agencies, and additional civilian customers.
DoD components and Joint / Combatant Commands, deployed across:
US Intelligence Community customers, deployed across:
Schedule a 30-minute architecture review with a Feith security engineer. Bring your framework; we’ll map it.
A Feith security engineer will reach out within one business day to schedule your 30-minute architecture review.
