Automated redaction of documents based on security-level determination

A device to manage ingestion of documents from an ingestion unit having document scanning functionalities, the device including:

• an input connectable to the ingestion unit;
• an output connectable to a computer network of an information system including a document storage system, wherein scanned document files outputted by the ingestion unit are received at the input and processed by the device, prior to release via the output to the computer network, wherein the device is physically interposed between the ingestion unit and the computer network such that the device provides a memory location isolated from the information system;
• a processor that executes software instructions, wherein the execution of those software instructions causes the device to:
• process a scanned document received from the ingestion unit based on a predefined security protocol thereby to identify one or more alert artefacts in the document, based on a predefined set of alert artefacts;
• based at least in part upon the identified one or more alert artefacts, determine a first security level for the document;
• redact portions of the document based on locations of one or more of the identified alert artefacts, thereby to define a modified version of the document having a second security level lesser than the first security level;
• and
• redact portions of the document based on locations of one or more of the identified alert artefacts, thereby to define multiple versions of the document having respective unique security levels;
• and
• a display screen that enables a user to preview the multiple versions, and select one or more of the multiple versions for release into an information system;
• wherein the device selectively releases the selected one or more of the multiple versions of the document to the information system on the computer network, without releasing the associated redacted portions to the information system.