Government · A state public-safety agency
Records search that meets the mission — and the statute.
Investigative search time cut 60%. NIST AI RMF controls documented for the CIO and counsel.
Challenge
Investigators were querying decades of records across three legacy systems. A commercial copilot was proposed. Counsel correctly blocked it: no data-classification story, no model-risk owner, no Section 508 plan, and a vendor who could not answer FedRAMP questions.
Approach
AIDA assessment adapted for government: compliance maturity as a first-class dimension.
Use-case vetting with counsel, CIO, and the field — a written 'will / will not' list before any tool was chosen.
Architecture stayed inside the agency boundary. Retrieval, not generation, for the first release.
Workforce training for investigators and a separate briefing for procurement so the next buy would not repeat the last.
Outcome
What moved.
Search time fell 60% on the pilot caseload. The control set maps to NIST AI RMF and the state's AI policy. The commercial copilot was not purchased. The agency now has a reusable pattern for the next five use cases.
Client names are used with permission or as published composites. Every figure on this page traces to a specific engagement and can be walked through on a call. Confidential work stays unpublished.
Next step
A similar constraint?
If the problem looks familiar, the discovery call is the right next hour.