DOJ · DOJ-0341 · record R1766

AI-assisted Legacy Code Modernization

Department of Justice · Department of Justice / CIV

Overview

Development stage: In development or acquisitionSource: a) Pre-deployment – The use case is in a development or acquisition status.
High-impact designation: Not high-impactSource: c) Not high-impact
Impact justification: Does not produce an output that serves as a principal basis for decisions or actions with legal, material, binding, or significant effect on any of the individuals or entities identified in OMB-25-21.
Start date: Not reported
Withheld from public reporting: NoSource: a) No

Mission

Topic area: Information Technology
Operational functions: Software development assistance, Translation and transcription Derived by keyword rules; see methodology

Problem the AI is intended to solve

This initiative uses AI-assisted code translation and refactoring tools to automatically convert legacy code into modern, secure languages (e.g., Java, Python) while flagging logic gaps and optimizing for cloud environments. Aligns with E.O. 14179’s innovation directive and M-25-21’s governance requirements.

Expected benefits

(1) Modernized applications improve resilience, reduce security risk, and lower long-term IT O&M costs, directly supporting DOJ’s modernization and cybersecurity priorities. (2) Builds on DOJ CIO modernization roadmaps, Federal IT dashboards, and prior migration initiatives to cloud platforms. (3) Reduction in legacy system maintenance costs, outages and performance loss; # of applications successfully migrated; cybersecurity vulnerabilities reduced.

System outputs

Code Generation, Recommendations, Predictions: modernized code output, optimization recommendations, vulnerability predictions.

Technology

AI classification: Generative AISource: Generative AI: AI that generates new or synthetic content (e.g., images, videos, audio, text, code).
System name(s): Not reported
Custom-developed code: Not reported
Public source code: Not reported

Sourcing

How it was built: Not reported
Vendor (as reported): Not reported
Vendors (standardized): None on the standard list

A vendor is the supplier named by the agency. It does not identify the underlying model or AI technology.

Data and privacy

Involves PII: Not reported
Privacy Impact Assessment: Not reported
Authorization to Operate: Not reported
Demographic features: Not reported
Training and evaluation data: Not reported
Federal Data Catalog: Not reported

Governance

0 of 8 minimum-practice questions answered. A blank answer means the agency reported nothing; it does not mean the practice is absent.

Pre-deployment testingNo answer reported

AI impact assessmentNo answer reported

Independent reviewNo answer reported

Ongoing monitoringNo answer reported

Operator trainingNo answer reported

Fail-safeNo answer reported

Appeal processNo answer reported

User and public consultationNo answer reported

Potential impacts and how they were identified

Not reported