Federal government

A post is a federal record. Manage it like one.

The Federal Records Act doesn't care what medium a record lives in — and NARA's guidance says so explicitly. Brolly captures your agency's connected social media with the metadata, revision history and integrity evidence a federal record demands.

Get a demo

AgenciesBureausCommissionsFederal programs

Neoclassical federal government building at dusk with pink-lit columns and an American flag
The framework

Three authorities define your obligation.

Statute

Federal Records Act

44 U.S.C. defines records by content and business context. Social media created or received in agency business that documents government activity is a record — full stop.

Guidance

NARA

NARA's social media records guidance expects social media records to be captured and scheduled like any other record — and treats "the platform keeps it" as the risk it is.

Access

FOIA

Agency social media records are FOIA-searchable and FOIA-producible. Statutory timelines don't pause while someone hunts through platform exports.

Captured records, under your control.

Platform exports miss comments, strip context and can't prove integrity. Brolly captures the record (posts, public comments, replies, edits, deletions and media) through official platform connections, into storage your agency governs.

  • Revision history — originals, edits and deletion events
  • Raw metadata & audit logs, with digital checksums on every export, supporting integrity and chain-of-custody review
  • Retention aligned to approved schedules

FOIA-ready by default.

Search every account and platform at once, review the captured chronology, and export production-ready packages in PDF, CSV, HTML or JSON — with audit logs recording every search and export along the way.

  • Saved searches for recurring request patterns
  • Production packages assembled from the captured record
  • Every action logged for accountability
Trust

Security your procurement team can sign off on.

Brolly is ISO/IEC 27001:2022 certified and CSA STAR registered, with controls aligned to NIST SP 800-53. Records are encrypted in transit and at rest, with audit logs on every record and digital checksums on every export.

Visit the Trust & Security Center
ISO/IEC 27001:2022Certified information security management system.
CSA STAR registeredListed on the Cloud Security Alliance STAR registry.
NIST SP 800-53 alignedControls aligned for public-sector security review.
Encrypted everywhereAES-256 at rest, TLS 1.3+ in transit.
99.9% uptime SLAAvailability commitment in the service agreement.
MFA & role-based accessAccess scoped to your team, with activity logged.

Ask us about your agency’s assessment path — certification documents and completed security reviews are available under NDA. Trust & Security Center →

Federal questions

Asked by records officers and FOIA teams.

Does the Federal Records Act cover social media?
Yes. Under the Federal Records Act (44 U.S.C.), records are defined by content and business context, not medium — and NARA guidance makes explicit that social media content meeting the definition of a federal record must be captured and managed like any other record.
What does NARA expect agencies to do?
NARA’s guidance on managing social media records expects agencies to identify which accounts and content constitute records, capture them, including comments and revisions where they form part of the record, and manage retention under approved schedules.
How does FOIA apply to agency social media?
Social media records held by an agency are subject to FOIA like any other agency record. The practical question is whether you can search and produce them, including captured content that was edited or deleted, within statutory timelines.
Is a platform’s own archive enough?
Platform data exports are incomplete (comments and context are routinely missing), unverifiable and outside your control. A federal record needs capture you govern, with metadata, revision history and integrity protections intact.
What is Brolly’s security posture for federal use?
ISO/IEC 27001:2022 certified, CSA STAR registered, controls aligned to NIST SP 800-53, AES-256 at rest and TLS 1.3+ in transit, MFA and role-based access, on AWS multi-AZ infrastructure. Certification documents and completed security reviews are available under NDA for your agency’s assessment.

Meet the FRA where records actually live now.

See your agency's channels captured, scheduled and FOIA-ready inside Brolly.

Get a demo