Someone writes in and asks for everything you hold about them, and the law starts a one-month clock (a calendar month, not a working one). Disclose runs the request as a case in Foldr: it searches the shares and mailboxes you point it at, keeps the review and redaction on the record, and delivers a bundle you can stand behind.
Disclose is part of Foldr Governance, so a request lands on the files, permissions and audit trail you already run. Nothing is copied into a separate tool; the case comes to where the documents live.
A case knows its due date the way the ICO counts it: a calendar month to the corresponding date. Verifying the requester’s identity stops the clock, and an extension needs a recorded justification with a hard ceiling. No spreadsheet of dates on the side.
Estate search covers every backend Foldr connects to, including the file servers and NAS boxes that cloud-only tools can’t reach. Scanned paper counts too; OCR text is searchable like everything else.
Collect from Microsoft 365 and Gmail mailboxes, but only ones on an allow-list your administrator controls. Every mailbox search is audited: what was asked, of which mailbox, and what came back.
The search manifest records what was searched, what matched, and which places returned nothing. When someone asks “did you really look?”, the answer is a document rather than a recollection.
Work the results in one review table, or decide in the viewer while reading. Keep, exclude, record why, and the case carries a sign-off step before anything is released.
Redactions are applied to a converted copy, removing the text underneath rather than drawing a rectangle over it, and document metadata is scrubbed on the way out. Grace can suggest what needs covering; a person makes the call.
Four stages, all inside the case, all on the record.
Log the request and the due date is computed for you, the way the guidance counts it. Need to check the requester is who they say they are? Asking for ID stops the clock, and verifying them restarts it, with every transition recorded.
Point the case at shares and allow-listed mailboxes and let it gather everything that mentions the subject, wherever it lives: SharePoint, OneDrive, Gmail, the SMB server in the back office, scanned letters included. The manifest keeps the score, including the places that returned nothing.
Every collected item gets a decision with a reason attached. Third-party details are redacted on a converted copy, never the original, with Grace suggesting candidates and a person confirming each one. Sign-off gates the case before anything leaves.
Generate the disclosure bundle with its manifest of what went out and what was withheld, and deliver it through Foldr’s secure links to the named recipient, instead of a password-protected ZIP and a second email with the password. Public bodies answering FOI get a preset with the exemptions framed that way.
Disclose rides the Governance machinery: the review engine, the audit trail, the permissions model you already trust. A subject access request stops being a scramble across inboxes and becomes a workflow with a deadline, run by the people you’ve nominated and nobody else.
About GovernanceA school’s SAR arrives about a pupil, with safeguarding tangled through it; a council’s request arrives as FOI with exemptions to apply. Disclose treats every keep, exclude and redaction as a recorded human decision, so whoever fields these (often the DPO, sometimes the school office) can show exactly how the answer was made.
Estate search runs on the same index as Search. Grace reads the same documents when suggesting redactions. Governance supplies the sign-off and the audit trail. Nothing about a disclosure happens in a side system.
Try it free for 30 days, no credit card. Or get in touch about self-hosting.
