Built for Washington public agencies

Three judgments on every record. One pass.
Every exemption cited.

Autessa FirstPass™ for Public Records determines whether each document is responsive, whether it is exempt, and what to redact. Every exemption and redaction carries its statutory basis. A reviewer on your staff keeps the final call.

  • No upfront cost
  • Unlimited users
  • Running in days
  • Affordable for agencies of all sizes
PowerViewerRequest #2026-0417Sample
  • PDFIncident_report_0419.pdf§ RCW 42.56.230(3) — personal informationExempt
  • EMLPermit_correspondence.eml§ RCW 42.56.080 — responsive, no exemptionRelease
  • IMGSite_photo_geo.jpeg§ WAC 44-14-04003 — redact GPS metadataRedact
  • DOCPolicy_working_draft.docx§ RCW 42.56.280 — adoption not establishedTo reviewer
ISO 42001ISO 27001SOC 2 Type IICJIS Security AddendumHIPAA CompliantGDPR CompliantNIST 800-53 Moderate

What it changes for your office

Requests keep growing. Staffing does not.

Records volume compounds every year: more email, more text, more video, and now AI drafting both the documents agencies create and the requests they receive. FirstPass helps the team you have keep up.

For the reviewer

One pass makes the three determinations that used to take three reads. FirstPass carries the volume; the reviewer works the exceptions and the close calls, and clears far more documents in a day.

For the records officer

Every reviewer works from the same encoded exemption set with the same citations, so determinations stay consistent across analysts and across years. The FirstPass Compliance Assistant and the team collaboration features strengthen onboarding for new staff. The PRO generates reliable, auditable, defensible reports on demand.

For counsel

Audited records, not just logs. The audit record covers FirstPass's own activity alongside the reviewers' decisions: every determination with its basis, its reasoning, and the rule version that produced it, every override, every rule change. Reports are customizable to what the PRO or counsel needs: the exemption log for a response, the full trail for a challenge.

Request homeSources & determinationsSample

Each row is one source the custodians handed over. Counts are records, and an email with its attachments is one record and one determination.

1,360 of 1,360 records reviewed

ResponsiveNot responsiveSensitive
Policy Office mailboxMailbox export1,055902 responsive79 not74 sensitive
Operational standards working filesShared drive folder215168 responsive35 not12 sensitive
District office correspondenceMailbox export7761 responsive9 not7 sensitive
Permit program dataSpreadsheets and exports118 responsive2 not1 sensitive
Incident report bundleScanned PDF bundle21 responsive0 not1 sensitive

The product

Autessa FirstPass, what your team works in.

PowerViewer

The reviewer's view, engineered from time-and-motion testing of how records review actually gets done. Flip through thousands of pages and documents with everything a determination needs in front of you: the document, the classification, the citation, what is marked for redaction, and the FirstPass Compliance Assistant for the borderline question. Shortcut keys carry a reviewer through pages, documents, and queues. Once the reviewer accepts the marks, the redactions are applied to the release copy while the original stays untouched.

PowerViewerSoft marks and the released copySample

In review · soft marks

Program analyst [3b] Personal informationD. Whitfield noted in margin comments that inconsistent application has produced divergent outcomes, and can be reached at [3b] Personal information(916) 555-0142 during the comment period.

Text stays readable while the reviewer works. Click a box to relabel it.

Released copy · burned

Program analyst RCW 42.56.230(3) noted in margin comments that inconsistent application has produced divergent outcomes, and can be reached at RCW 42.56.230(3) during the comment period.

Content is removed from the file, not hidden, and the code names the exemption withheld there.

Compliance Assistant

Your agency's records practice, answerable in place. A reviewer working a borderline document asks the question and gets the agency's answer with the authority behind it: whether a draft policy is deliberative, whether an employee's birthdate is exempt, how a similar request was handled before. It strengthens onboarding for new analysts, and FirstPass reports on recurring questions to help plan training.

Compliance AssistantReviewer assistantSample

Advisory only. It explains and cites; you make every mark.

Reviewer

Does 42.56.230(3) cover volunteers, or only agency employees?

Assistant

RCW 42.56.230(3) applies to both agency employees and people who volunteer with the agency. The exemption protects personal contact information: residential addresses, personal phone numbers, personal email, and dates of birth.

  • The protection covers employees or volunteers of any public agency.
  • Work-provided contact information is never exempt, only the personal equivalents.
  • A public official acting in an official capacity is outside the exemption.

RCW 42.56.230(3)

Your office withheld volunteer contact details on the last three requests that raised this.

Protected Registry

One example of the agency-specific customization built in. Names your agency places on the registry are redacted on sight, in every document, regardless of context. Some identities can never depend on a judgment call made under deadline, and the registry removes the judgment: the protection travels with the name, across every request, until your agency removes it.

Protected Registry3 protected namesSample

Redacted on sight, in every document, regardless of context, until your agency removes the name.

Protected witness · case 2024-118Active investigationRCW 42.56.240(1)14 documents
Minor complainant · intake 7742Identity of a minorRCW 42.56.230(3)6 documents
Undercover staff aliasOfficer safetyRCW 42.56.240(1)3 documents

Always on. A registry name is never left to a judgment call made under deadline.

Collaboration

A close call does not have to be made alone. Without leaving the document, a reviewer can easily invite a colleague to review and share their opinion: the same pages, the same citation, the same marks. No forwarding a file, no explaining the situation from scratch, no waiting for a meeting.

CollaborationDiscussion threadSample
DOC-214 · page 2 · [8a] Deliberative processResolved
MR

M. ReyesReviewer9:41 AM

The draft is clearly pre-decisional, but nothing here establishes whether it was ever adopted or implemented. Asking before I mark it.

JO

J. OkaforPublic Records Officer9:52 AM

Agreed that the document alone does not get you there. We took the same position on the operational standards draft in March and released it with the staff names redacted.

AL

A. LindqvistCounsel10:06 AMDecision

Release with the 42.56.230(3) marks. Note in the log that adoption could not be established, so the reasoning is on the record if this comes back.

The thread stays with the document, so the reasoning is on the record rather than in an inbox.

Learning Loop

Your reviewers' corrections become your agency's rules. Every override is captured with its reasoning. Corrections that recur surface as candidate rules a records officer reviews, refines, and adopts into the agency's library, or declines. The system changes only when a person accepts the change.

Learning LoopCandidate ruleSample
Personal mobile numbers in signature blocksProposed

RCW 42.56.230(3)

Reviewers consistently redact personal mobile numbers that appear in email signature blocks, which the current rule reads as work contact information.

Corrected by reviewers 12 times in the last 30 days

Adopt into libraryDeclineAwaiting a records officer

Nothing changes until a person accepts the change.

Rule Library

The source of truth for your agency's exemption practice. Every exemption your office applies is encoded as a rule with its citation, and your agency decides which ones FirstPass may assert on its own and which always route to a person. Those defaults apply to every request without anyone retyping them. Updating a rule is a records officer's edit, and the change takes effect on the very next document. Over time the library becomes your agency's institutional knowledge in working form: the exemptions you apply, how you apply them, and every change on the record.

Rule LibrarySample

52 exemptions encoded · 28 rules running · 18 switched off

Privilege & litigation · 2

[1a]Attorney-client privilegeExact matchAI ruleRCW 5.60.060(2); RCW 42.56.070(1)High
[1b]Attorney work productAI ruleNot runningRCW 42.56.290Low

Privacy & commercial · 2

[2a]Invasion of privacy frameworkAI ruleNot runningRCW 42.56.050High
[4a]Employee personal informationAI ruleRCW 42.56.230(3)High

Financial & trade · 1

[4c]Account numbersExact matchAI ruleRCW 42.56.230(5); RCW 9.35.005High

Investigative · 1

[6a]Active investigation recordsAI ruleRCW 42.56.240(1)High

Audit Defense Reporting

Every determination, its statutory basis, its actor, and its timestamp, covering FirstPass's own activity alongside the reviewers' decisions, exportable as CSV, PDF, or JSON. The exemption log for a response and the full trail for a challenge come from the same record, built the day the calls were made.

The log is append-only: entries are added, never edited or removed, so what you produce months later is what was recorded at the time. Each determination also records the version of the rule that produced it, so a call made in March is explained against the rule as it stood in March. When counsel asks why document 214 was withheld, the answer is a lookup.

AI activity is audited and governed

Most systems log what people did. FirstPass logs what it did: every automated determination attributed to the system as actor, the rule and version behind it, the exemption asserted or declined, and every document it routed to a person instead of deciding. An agency answering for its use of AI, or an ISO 42001 auditor asking how the system behaved, reads it from the same trail.

One record, several reports

The exemption log that accompanies a response, the withholding index for an appeal, and the complete trail counsel needs for litigation are views of the same record, generated on demand rather than assembled after the fact.

In practice

The details that decide whether a release holds up.

Three of them, handled the way your office already handles them: what the release copy has to show, what happens to the original, and what a redaction has to rest on.

On the release copy

Every redaction states the exemption it stands on

A requester is entitled to know not just that something was withheld but under what exemption. In most offices that means an analyst labeling redactions one box at a time, by hand, on the way out the door. FirstPass prints the exemption code inside each box as the redaction is applied, so the release explains itself and the exemption log matches it line for line.

On the files

The original stays exactly as uploaded

Through every stage of review and release, the record you uploaded is the record FirstPass holds. Redactions are applied to a separate release copy, and both are kept.

On the law

It knows what a losing redaction looks like

A withholding cannot rest on RCW 42.56.050 alone. That statute defines when privacy is invaded, and the Attorney General's Open Government Resource Manual is explicit that it is not itself an exemption. FirstPass requires a second exemption that independently covers the same text before a privacy redaction stands.

Below: the same document in PowerViewer, with the release copy on the left and the basis for every call on the right.

PowerViewerDOC-214 · VND.OPENXMLFORMATSSample

Responsiveness

Responsive

Sensitivity

Sensitive · 1 code

Redaction

3 redactions

Department of Regulatory Services

Policy Working Draft · Released with redactions

Operational Standards Review — Working Draft

Prepared by: Policy Office
Reviewing analyst:RCW 42.56.230(3)· Internal distribution only
Date: 2025-10-30

This working draft sets out a revised standard for the assessment of operational permits issued under the program. It is a pre-decisional document circulated for internal comment and does not represent adopted agency policy.

1. Purpose

The draft proposes that field staff apply a consolidated review checklist when evaluating renewal applications. Contact for questions is RCW 42.56.230(3) during the comment period.

2. Background

Prior guidance left key thresholds to individual discretion. Reviewer RCW 42.56.230(3) noted in margin comments that inconsistent application has produced divergent outcomes across districts, and recommended a single standard be adopted before the next cycle.

This document remains under revision and has not been adopted or implemented.

Deliberative status — routed to reviewer

Determination

Exempt in part3 marked for redaction

Rules fired · Rule Library v14

[3b]Personal informationAsserted

RCW 42.56.230(3)

Staff name and direct line withheld. Privacy under 42.56.050 does not stand alone; 230(3) independently covers the same text.

[8a]DeliberativeTo reviewer

RCW 42.56.280

Deliberative status turns on whether the draft was adopted and implemented, which the document alone does not establish. Open question stated for the reviewer.

Output

Save release copyOverrideSend to PRO

Accepted marks are applied to the release copy with the exemption code printed in each box. The original stays exactly as uploaded.

Defensibility

When a withholding is challenged, the answer already exists.

Today, defending a withholding means reconstructing it: pulling old emails, asking the analyst who has since left, rebuilding reasoning from memory months after the call was made. Under RCW 42.56.550 the burden of proving the exemption sits with the agency, and fees, costs, and daily penalties sit on the other side of losing.

With FirstPass, the record was built the day the call was made. Every determination carries its statutory basis, its reasoning, and the version of the rule that produced it, so a call made in March can be explained in November against the rule as it stood in March. The audit log is append-only and recorded by the system itself, covering FirstPass's activity and every reviewer decision. When counsel asks why document 214 was withheld, the answer is an export.

The agency keeps the determination throughout. FirstPass proposes each call and cites its basis; a reviewer confirms or overrides it. When a document alone cannot settle a question, FirstPass routes it to a person with the open question stated.

Your records stay inside your own boundary, and corrections your reviewers make refine your agency's rules alone.

One record, every call accounted for, including the rules that found nothing.

Decision trailDOC-214 · Policy_working_draft.docxSample

Every call the pipeline made about this record: what each rule was asked, what it answered, and the ones that found nothing.

Rules considered

52

Matched

3

Found nothing

44

Not running

5

Routed to a person

1

Failed

0

Responsiveness[1a] Responsive to the requestMatched

RCW 42.56.080

Operational permit standards fall inside the scope of the request as filed.

Sensitivity[4a] Employee personal informationMatched

RCW 42.56.230(3)

Staff name and direct line identified on pages 1 and 2.

Sensitivity[1a] Attorney-client privilegeFound nothing

RCW 5.60.060(2)

No privileged communication present in this record.

Sensitivity[2a] Invasion of privacy frameworkNot running

RCW 42.56.050

Cannot stand alone as an exemption, so it never asserts by itself.

Redaction[8a] Deliberative processTo reviewer

RCW 42.56.280

Turns on whether the draft was adopted and implemented, which the document alone does not establish.

The same evidence across the whole request, exportable the day it is asked for.

Audit Defense ReportingPRR-2025-0412 · append-onlySample

Total documents

487

Processed in one run

Released in full

423

86.9% of documents

Redacted / exempt

64

13.1% of documents

Exemption log

RCW 42.56.230(3)Personal information38 docs
RCW 42.56.240(1)Active investigation records18 docs
RCW 42.56.280Deliberative process8 docs
TimestampEvent, actor & rule versionResult
09:16:05FirstPass determination · rule [1a] v14weekly_patrol_report.pdf · responsive, no exemption assertedReleased
09:16:42FirstPass determination · rule [5c] v14email_legal_advice.msg · RCW 42.56.230(3) asserted, code printed in boxExempt
09:17:20Reviewer override · M. Reyesdoc_214.docx · deliberative asserted, draft never adopted · reasoning recordedOverride
09:18:45Release package generated423 released docs, 64 exemption-log entries, full audit trailExported

See it run on your own records.

Bring a request your team has already closed. We run FirstPass on it, and you measure the output against the determinations your analysts made and defended.

Contact us

FAQ

Questions we're glad to answer.

Is FirstPass configured for the Public Records Act specifically?+

Yes, and configured to your agency rather than to the Act in the abstract. The standing RCW 42.56 exemptions ship encoded, along with the WAC 44-14 model rules guidance. Your program statutes, your positions on the recurring questions, and the calls your counsel has already made get built in during setup.

How does FirstPass handle a document it is unsure about?+

It routes the document to a reviewer with the open question stated, for example whether a working draft has been adopted, which the document alone cannot establish.

What happens when a reviewer disagrees with FirstPass?+

The reviewer's call governs, and the override is captured with its reasoning. Overrides that recur surface as candidate rules a records officer can review and adopt, so a question your office has already settled stays settled.

Does our data train a model used by other agencies?+

No. Your records stay inside your own boundary, and corrections your reviewers make refine your agency's rules alone.

Does FirstPass make the final disclosure decision?+

No. FirstPass proposes a determination with its basis cited, and a reviewer on your staff confirms or overrides it. An agency can later choose to clear specific high-confidence categories automatically. That is a decision the agency makes deliberately.

Can we test FirstPass on our own records before committing?+

Yes, and that is how we suggest every evaluation start. Bring a request your team has already closed. FirstPass runs on the same set and you compare its output against the determinations your analysts made and defended.

How much does FirstPass cost?+

There is no upfront cost, no per-seat charge, and no user limit. Pricing follows usage and is set to be affordable for agencies of any size, so each agency pays in proportion to the records it processes. We work with each agency to make the cost predictable for budget forecasting. The specifics depend on volume and configuration, which a first conversation covers.

How long does FirstPass take to set up?+

Days, depending on the size of the agency and how much configuration your exemption set requires. There is no implementation project.

What file formats does FirstPass handle?+

Email with thread parsing and attachment expansion (MSG, EML, ICS), including messages nested inside messages. Office in both current and legacy formats (DOCX, XLSX, PPTX, DOC, XLS, PPT, RTF), OpenDocument (ODT, ODS, ODP), and Apple Pages. PDF, including scanned pages, which are read visually rather than by character recognition. Plain text, CSV, Markdown, log files, and HTML. Images (JPEG, PNG, TIFF, GIF, BMP, WebP) with EXIF and GPS extraction. Audio and video, where the transcript is produced by the speech-to-text service and reviewed as text. Zip archives are expanded and each item reviewed on its own.

What happens to a file type FirstPass cannot read?+

It is still ingested and routed to a reviewer, never dropped. A production cannot survive a record that silently disappeared, so an unrecognized or unreadable file becomes a document in the queue with the reason stated, for example a rights-protected message that cannot be decrypted. The reviewer decides what to do with it, and the file appears in the audit trail either way.

What security certifications does Autessa hold?+

Autessa is certified to ISO 42001 and ISO 27001 and attested under SOC 2 Type II. Autessa is HIPAA and GDPR compliant and aligned to NIST 800-53 Moderate. A CJIS Security Addendum is executed with each agency. Reports and certificates are available for review.

Also available for California.