Security & Technology · Government

AI in a public deliverable is now a FOIA record.

Tokto records every AI tool deployed in the agency, every prompt, every model output, and every vendor data flow at the procurement control plane, ready for the IG, the auditor general, FOIA, and the federal monitor.

What keeps you up at night

A FOIA request lands on the AI-detection tool used in a Title VI matter. The CISO has the procurement file but no per-prompt record. The same week, a federal monitor under a DOJ consent decree asks for the AI pricing-platform audit trail and a state AG asks how AI was used in a constituent decision. Three different timelines, three different deliverables, one missing log.

  • Every AI tool tied to a procurement, a vendor, a use case, a constituent or student, and a decision rule.
  • A complete record for the auditor general, FOIA / public records, the procurement officer, the federal monitor, and the IG.
  • Policy applied at the prompt: no AI use in a public deliverable without verification, no proctoring or detection tool without bias testing.
  • Defensibility under Title VI complaint, public-records request, federal procurement audit, and IG review at once.
  • An AI proctoring tool produces a false positive. A Title VI complaint reaches federal court. There is no per-decision record.
  • An AI vendor uses non-public competitor data to drive a public-dollar decision. DOJ consent decree, court-appointed monitor for years.
  • A constituent-facing chatbot ships a fabricated citation. FOIA arrives the next morning on the prompt and source list.
  • An AI deployment is in public use without bias testing on file. State AI procurement law and inspector general both open in the same quarter.

Tokto sits across every AI deployment a public institution ships, from constituent-facing chatbots to AI detection tools used in academic and licensing decisions. Each output is attributable to the procurement, the vendor, the decision rule, and the affected person. Every prompt becomes a record the public records officer and the IG can read.

When the DOJ files a seven-year consent judgment on an AI pricing platform, when a Title VI complaint reaches federal court on an AI false-cheating accusation, when the auditor general asks how AI was used in a public deliverable, the record is the same record. The CISO does not assemble it under FOIA pressure.