Joman Kwong, strategic solutions manager: financial services, on how credit unions can build a secure information-governance backbone.
Joman Kwong, strategic solutions manager: financial services, on how credit unions can build a secure information-governance backbone.
Managing records across all business units poses a complex and daunting task for banks and credit unions. In the highly regulated banking industry, these institutions must handle a large volume of sensitive and confidential records, such as customer information and financial transactions. To meet regulatory requirements, they need a centralized, secure, and traceable platform. The ever-changing landscape of regulatory compliance from entities like the Federal Deposit Insurance Corporation (FDIC), National Credit Union Administration (NCUA) and Bank Secrecy Act (BSA), presents a significant challenge. Non-compliance can lead to severe fines, penalties, legal and reputational risks, and a loss of customer trust.
To address these challenges effectively, we invite you to join a complimentary webinar. In this session, we will explore how to create a standardized and efficient solution using Laserfiche Records Management and process automation. The webinar will cover the following topics:
Don’t miss this opportunity to discover how Laserfiche can help your organization tackle the complexities of records management and compliance in the banking sector.
SITUATION
⢠Capturing, routing and storing member information was manual and lacked consistency
⢠Operations needed to scale at a pace that aligned with the credit unionās growth trajectory
⢠The credit union sought a platform for automation that would integrate with existing tech stack
RESULTS
⢠All staff now use Laserfiche regularly in a variety of key processes
⢠Saved hundreds of hours each month
⢠Alleviated the burden of mergers as the credit union grows
āWe address peopleās needs and solve problems ā itās what credit unions do,ā said Matthew Tingey, senior applications specialist at American United Federal Credit Union (FCU).
The philosophy has powered American United FCU since 1952, driving the organizationās growth to serve more than 26,000 people today. And along with that growth has come transformation, to create a single source of truth for records, integrate core technology systems and enable easier self-service for members.
āI was originally asking questions like, āCan I automate this? Can I batch process these things? Where can I take the annoying parts out of this process?āā said Tingey. āBut itās never good enough to solve my own problem. I need to solve problems for everyone in the organization. Thatās where Laserfiche came in.ā

The credit union now uses Laserfiche as its repository for member information, and the main workflow engine for automated processes across the organization, including finance, member relations, money movement and more, saving hundreds of hours each month and alleviating the burden of mergers as the organization continues to grow.
Like many growing organizations, American United FCU had information ā including member documents, HR employee records, financial records and more ā incoming from a multitude of channels, being handled in a variety of ways. Tingey, a dedicated credit union professional who has worked in every department across the organization, recognized a need to standardize archival of documents. At the same time, he saw an opportunity to automate information capture.
The credit union began using Laserfiche process automation to automate records management activities, routing documents to where they needed to be stored within the repository, with the needed metadata, no matter the source.
āWeāve processed multiple millions of documents through there,ā said Tingey. āEmployees just need to click, and it gets to where it needs to go.ā
American United FCU, supported by Laserfiche solution provider Millennial Vision (MVi), has built out a Laserfiche program that also supports the organizationās total quality management initiative, which aims to improve processes with an eye toward growth and profitability.
āThese tools help us do things more efficiently, bridge the gap between some of our other software tools, and let our teams work in better collaboration. They really solve a lot of problems.ā
With the initial solution in place, it was time to connect other systems to eliminate human error and make the repetitive tasks around document capture and storage even easier.
āFrom there, I wanted Laserfiche to talk back to our core [account system] to verify the information being captured,ā Tingey said. āNow, itās not just member documents that weāre processing through the system but applications, loan documents, and other daily work. The process has expanded and grown. Itās the single source of truth, and really the backbone of our process automation.ā
In addition to having Laserfiche verify information from the organizationās core, CUProdigy, the credit union has a number of integrations that support a more seamless everyday work experience for employees.

āWeāve also built a large database of information that we want to track and report on in Microsoft Power BI, and Laserfiche plays a big role in that,ā Tingey said, adding that he keeps track of data issues ā caused by activities like an employee leaving the organization, for example ā through daily reports. āLaserfiche is a big part of managing the data that is used to create those Power BI reports.ā
Similarly, Tingey has transformed the way that the organization validates data, identifying potential issues through Forms processes (started by Laserfiche Workflow) that trigger when an issue occurs. These items were previously actively tracked by an employee on a continual basis; today, no one needs to remember to review the reports since processes are triggered in Forms when issues occur ā plus, instructions are integrated into the form so that less training and individual knowledge is required to address them.
āMore recently, weāve added some API integrations with the core to this process,ā Tingey explained. āWe pull information out of CUProdigy to use in Laserfiche Workflow and Forms via database queries. Notes can be pushed back to accounts with a click of a button in a form. A couple of the items that instructed the user to fix an issue can now be resolved automatically via the API without human intervention. These data validations and the automation around them have allowed our QA to be more efficient, effective and consistent.ā
One game-changing integration for the credit union was between Laserfiche and DocuSign, which allowed Tingey to automate a common activity for credit unions: member information changes. The legacy process was manually driven and admittedly not very employee- or member-friendly.
The organization has enhanced the overall experience for employees and members by embedding the entire process into Laserfiche Forms:
Similarly, the credit unionās wire transfer process has benefited from Laserfiche Forms and an integration with DocuSign.
āIn terms of solutions, I borrow from myself,ā Tingey said, explaining that heās often able to build on successes by taking a process and repurposing it by making tweaks to forms or steps.
The legacy wire transfer process, which involved many manual activities performed by employees, left members and auditors with little visibility into the required steps. The new Laserfiche process, however, gives the credit union the ability to provide helpful context to the member about what they are signing and the wire disclosure via the DocuSign integration.
āOnce complete, employees only need to click a button to attach it to the form, and processing of the wire in our core is done via API, with minimal tasks required by the employee,ā Tingey said. The form is automatically routed to the necessary employees for review and processing, and all supporting documentation is archived in the Laserfiche repository with standard naming conventions and metadata.

The new wire transfer process saves up to 25 hours of staff processing time per month, while also reducing opportunities for human error and increasing staff satisfaction.
āWeāve taken all the annoying little parts out of the process, like downloading a PDF, uploading it to DocuSign, marking fields on it, manually sending it to the member, downloading it again, etc.ā said Tingey. āAnother benefit is that when the member is prompted for signature, information will pop up to tell them exactly what theyāre doing. It will let them know weāre doing a change of information process and hereās that weāre changing, or a wire transfer and hereās our wire disclosure. So instead of just signing something because theyāre being asked to sign something, members feel more informed and taken care of.ā
Since the initial implementation of Laserfiche for process automation, American United FCU has had a lot of success automating back-office activities as well as some member processes that employees handle. Going beyond the back office to positively impact the member experience has always been the ultimate goal, however.
āThese automated processes are all increasing member satisfaction,ā Tingey said. āWhether our members are in-branch or doing things remotely, they are saving time and donāt have to wait for a teller to manually find all the documents they need to get things done.ā
Today, Tingey is focused on transforming the member experience with the launch of a new website, which will feature enhanced self-service features powered by Laserfiche Forms. One such feature is the rewards claim request, which enables members to claim an end-of-year dividend that the credit union offers as a perk for members based on the products and services theyāve used throughout the year. The claim form lists all of the possible products and services that qualify for a reward amount, and the member enters a few details to verify themselves. The form verifies this information against the database to qualify the submission, and a Laserfiche workflow sends an email confirmation, recording all activities into a database so that rewards can be paid out at the end of the year.
Laserfiche digitization and automation projects have supported increased focus on the member experience, even through significant periods of growth for the credit union. Since 2007, the organization has completed 10 mergers, enabling asset growth from about $39 million to just over $370 million (as of April 27, 2023).
While mergers are always a huge undertaking, the process was made less painful with standardized and automated processes in place. āMergers are very, very large projects ā everything gets dumped into a central location, and thereās cleanup and moving things around,ā said Tingey. āIf it werenāt for the structure from Laserfiche and the tools like Workflows, they would be nearly impossible.ā
Laserfiche has become such a vital part of American United FCUās infrastructure that many employees arenāt able to imagine life without it today.

āLaserfiche is a cornerstone of our environment.Ā The automation functionalities alone save us thousands of hours annually, but on top of that it helps us in so many ways to gather, process, and document nearly every piece of information that passes through our organization.Ā There isnāt a single member of our team that doesnāt interact with Laserfiche, and most of them are working with the system throughout the day, every day.ā
Banking institutions ā including banks and credit unions ā place high value on the interaction between customers or members and employees in order to build loyalty and drive business growth. Today, the customer-first approach is more important than ever before, and the digital customer experience is at the top of their priorities. While brick-and-mortar branches are here to stay in the post-pandemic era, customers expect consistent in-branch service as well as a seamless omnichannel experience. Recent BAI research reported that consumers expect 61% of their banking business to be digital and 39% to involve human intervention by 2024. To achieve omnichannel excellence, banking institutions need to provide 24/7 access to services and digital self-service for activities ranging from new account opening to loan applications, as well as an online portal for clients to access their own documentation.
In order to keep pace with customer expectations, banking institutions are leveraging process automation to enhance human interactions ā by supporting customersā ability to access the services they want when they want them; reclaiming time for employees to spend on value-added activities and customer service; and easing collaboration between teams, departments and branches. Digital workflows and processes are also key to boosting productivity so that banking institutions can take on more customers and add new services without the resource strain or sacrificing quality of service. Here are some of the top transformative process automation initiatives that forward-looking banking institutions are leveraging to enhance the customer experience:
1. Self-Service Portals and Online Forms
Even when digital, incoming applications and customersā records are often scattered electronically across organizationsā local network drives and individual repositories without a standardized folder structure. Studies have shown that the average employee spends 3.6 hours each day searching for information. When customers are waiting ā whether in-person at a branch or online ā this translates to longer wait times and decreased satisfaction. Self-service portals with links to online forms where customers can easily initiate service requests or send in information ā which can then be automatically routed to the appropriate departments or personnel for approval, or to customer folders ā help to alleviate the headaches of manually routing data and shorten processing time, while also creating a 24/7 access to services for customers.
2. A Single Source of Truth: Automated Records Management in a Central Repository
Digitization of paper files is nothing new to banking institutions, however, many of them can take these efforts much further. By establishing a centralized repository, and leveraging process automation tools to auto-file customer information into a standardized folder structure, banking institutions can save time for employees who are able to be more responsive to customer needs since they have customer information at their fingertips. At the same time, automating processes related to customersā data eliminates error-prone manual tasks, improving accuracy of information. With a centralized repository that has granular access controls, too, banking institutions support information governance and compliance with regulatory requirements. As a result, organizations mitigate the risk of unauthorized access to customer information and build and maintain trust with their customers.
3. Integrate Line-of-Business Applications for End-to-End Automated Solutions
Many banking institutions took a piecemeal approach to digital transformation during the pandemic as a reaction to immediate needs. Today, however, organizations need to assess the technologies adopted over the past few years in order to consolidate and optimize IT investments. Integrations can help to connect the different applications, systems and sites where customer data is stored, enabling banking institutions to create more holistic automated solutions and a complete digital experience for customers and the employees who serve them. For instance, integrations can further reduce manual and repetitive data entry by prepopulating customer information into electronic forms. Integration tools such as integration-platform-as-a-service (iPaaS) connectors and APIs can support organizationsā increasingly complex integration needs. By creating a more connected enterprise, banking institutions can better facilitate information flow and avoid repetitive data entry; provide branch employees with accurate, real-time information; and enable a better, more personalized customer experience overall.
The Member-Centered Digital Transformation Journey
Even as many banking institutions are accelerating digital initiatives, the human element remains the most important piece of the transformation puzzle. A recent survey found that more than 80% of credit unions are prioritizing digital as a competitive differentiator, however, only 14% provide solutions that focus on their membersā digital experience. Banking institutions are at an inflection point, and itās critical that business leaders make decisions about digital initiatives ā whether itās creating an automated customer onboarding process or implementing an AI-powered chatbot ā through the lens of the customer experience.
How can Laserfiche help banks and credit unions enhance the customer experience with process automation?
Check out our banks and credit unions solution page for more information!
Recent advancements in artificial intelligence, or AI, have captured attention and imagination around the world. In fact, AI and its enabling technology, machine learning, have been around long enough to drive game-changing benefits that we already enjoy as clients and staff.
For wealth managers in particular, AI can improve what both clients and staff experience, while saving on operational costs ā in effect, better results for less investment. Supporting interactions with AI-driven tools such as automatic form fill, chatbots and automatic documentation filing can streamline operations and reduce the potential for human error. It also frees employees to focus on higher-value tasks such as supporting clients and developing new business. AI-driven automation can improve the top and bottom lines, while helping organizations tighten their compliance programs.
For example, the implementation of AI makes workflow automation tools for processes like client data transfer even more powerful, further elevating positive outcomes, such as freeing up back-office administrators from repetitive tasks. Imagine having a cleaner, better-documented process with fewer data-entry errors to resolve, and more time for staff to spend on higher-value tasks such as resolving those errors ā or automating more processes. Moreover, making client data available across a wealth managerās systems also creates opportunities to leverage that information to provide tailored services. The ability to offer clients new products and services at the right time can further improve the investor experienceā particularly when wealth managers can offer these opportunities before clients are even aware they need them.
AI-driven process automation tools are already available and can be simple to customize or even build using low-code or no-code platforms. In other words, you donāt have to be a software engineer to get started. The key for advisors looking to take advantage of these tools is to take an incremental approach. Thereās no need to do everything all at onceāhowever, it is important to have a broader digital transformation strategy to serve as a guide and to prioritize your efforts in a way that yields the greatest operational impact over time.
Download the whitepaper āWhat ChatGPT Means for Wealth Managementā.
CATIC migrated content from a legacy document management system into Laserfiche, resulting in over $325,000 annual cost savings and creating up to…
MPI was able to continue serving its members through one of the longest writers and actors strikes in entertainment industry history.
Featured Resource
Over 50% of insurers cite data fragmentation as their top operational challenge. Find out how to transform data from an obstacle into your competitive edge.
Whether you have product questions, support needs, or want to partner with us, we’re here to help you on your digital transformation journey. Fill out the form and a Laserfiche team member will be in touch as soon as possible.
Spend less time searching and sorting. Laserfiche helps you better manage unstructured data ā like transcripts, meeting notes, audio files and more ā using AI and automation to organize, route and manage documents with speed and accuracy.
AI-powered tools extract key data, identify document types, and generate instant summaries ā helping you turn content into insights, not clutter.
Our Difference
Gartner® named Laserfiche a Leader in the 2026 Gartner Magic Quadrant⢠for Document Management.
Laserfiche is a Customersā Choice in the 2025 GartnerĀ® Peer Insights⢠āVoice of the Customerā: Document Management report.
Laserfiche named 2025 Emotional Footprint Champion by Info-Tech Research Group in the Enterprise Content Management – Enterprise category.
Highly rated by customers, with a 4.7 average star rating and #1 in the Document Management category on G2.
Named a Leader in the Nucleus Research CSC Technology Value Matrixā¢.
Featured Resource
According to IDC, the amount of global data will balloon to over 200,000 exabytes by 2026. Learn how organizations can centralize growing volumes of data with a secure document management system.
Whether you have product questions, support needs, or want to partner with us, we’re here to help you on your digital transformation journey. Fill out the form and a Laserfiche team member will be in touch as soon as possible.
With economic uncertainty being the new normal, the demand for reliable financial institutions has risen tremendously. F&M Bank is one institution that has been able to maintain its customer trust for the past century, seeing significant growth particularly in recent years. Now with 25 branches across Los Angeles, Orange, and Santa Barbara counties, F&Mās expansion has led to more information management needs, technology demands and regulatory compliance requirements.
The bank initially implemented Laserfiche as a document management system and quickly expanded its use organization-wide. F&Mās experience using Laserfiche as a document management system was the foundation for the bankās expanded usage of Laserfiche for process automation.
āWhat started as a way to scan and search for information is now a fully integrated enterprise content management solution,ā said Morgan Wheeler, business intelligence manager and vice president at F&M Bank. āWe have roughly 90 different active workflows running to the tune of about 1,500 times per day. We have about 60 different production forms, and nearly every single bank employee uses Laserfiche as part of their job.ā
As F&M grew and workplace needs evolved, the bank sought a business process automation solution to create more efficiency and connect with its core banking system for a seamless employee experience.
The bank turned to Laserfiche, and its Laserfiche solution provider CDI for support in leveraging the platformās business process automation and integration capabilities. F&M integrated Laserfiche with its core banking system and deployed automated workflows that have sped up processes such as financial certification and loan applications, helping the organization to scale. Meanwhile, Laserficheās robust governance tools support compliance with regulatory requirements.
āAt the close of 2019, the bank had $7.6 billion in assets, and we have now reached $11.7 billion,ā said Wheeler, adding that there was a period during the onset of COVID during which F&Mās assets grew more in 100 days than the institution did in its first 95 years of operation (1907-2002). āLaserfiche has been a critical component in our growth.ā
āJust storing things digitally isnāt enough. The information we store needs to be functional digital assets within wider business processes, and that assumes not only automation but integration.ā
ā Morgan Wheeler, Business Intelligence Manager and Vice President at F&M Bank
One process F&M has reimagined to achieve impressive efficiency is financial certification, which previously required tremendous amounts of manual tasks to coordinate dollar amounts with all of the branches, emailed spreadsheets between managers and departments, and validation against historical information.
āFor our branches, it means counting cash, teller drawer amounts, vault and cash center amounts ā and we have all these different accounts, cash in transit, night-drops, merchant services ⦠itās a high-volume, complex activity,ā Wheeler explained.
The bank deployed a Laserfiche solution that allows all departments across all branches to enter information about their accounts in a Laserfiche Form, which is prepopulated with information about what their financial position should be. The form calculates the difference and routes it to the bankās finance and accounting department, and through proper approvals.
āThe Laserfiche process has streamlined how we present our financial figures each month,ā Wheeler said. āThese figures are audited both externally and internally.ā
The new process has saved the bank an estimated 700 hours per month of employee time, while providing a more transparent, prescribed procedure for certification. After the solution was deployed, employees were able to better utilize their time on value-added activities.
As a bank deeply embedded in its community, F&M acted quickly during the COVID-19 crisis when information about the Payment Protection Program was released. It was an opportunity to help people when they needed it most ā and the team had the tools to deliver with Laserfiche.
āThere was very little guidance on how the payroll protection loans were supposed to go out,ā Wheeler said. āWhen the dust settled, F&M Bank issued more than $1 billion in PPP loans to the local community.ā
The executive team assembled to map out how the bank would receive applications and distribute the money, and the F&M team stayed up all night creating a Laserfiche Form and PPP Loan application process.
āWithin a matter of days we were funding loans. The nimbleness of Laserfiche Forms and workflow, plus SQL allowed us to build out an application process for those PPP loans literally overnight. I was not only impressed by F&M as an institution, but I was also impressed with our ability to create literally something out of nothing.ā
ā Morgan Wheeler, Business Intelligence Manager and Vice President at F&M Bank
Applicants began seeing their loans funded in a relatively short time frame, underscoring the bankās commitment to its community, especially in a time of need.
Today, most of the bankās loan processes involve Laserfiche, including the Loan Document Draw process: When a client asks for a loan, Laserfiche helps the bank centralize the process and effectively prepare the pieces of content that need to be gathered for the final document draw when the final loan agreement is drawn up for client signature. Having a strong presence in the commercial real estate industry, F&M has streamlined the collection of loan documents ā which can be hundreds of pages long ā in order to help ensure accuracy and speed.
As an institution regulated by the Consumer Financial Protection Bureau, Federal Reserve Bank, and California Department of Financial Protection and Innovation (DFPI), F&Mās standardized compliance processes continue to pay dividends for the organization and its clients.
In todayās uncertain economic conditions, F&M has also leveraged its technology to build stronger business resilience. The bankās team worked closely with Cities Digital to build a resilient infrastructure that allows the bank to confidently handle unplanned network events, and gracefully failover for planned upgrades and maintenance. āDue to the cooperative effort of Laserfiche, Cities Digital and our IT team, Laserfiche regularly achieves 99.99% uptime during business hours,ā Wheeler said.
F&Mās use of Laserfiche has evolved along with the bank, empowering staff to innovate the way they do business while remaining compliant with industry regulations, and protecting client information and assets.
āLaserfiche is a critical way in which we deliver to our auditors, to our community, to our employees and, most importantly, to our clients.ā
ā Morgan Wheeler, Business Intelligence Manager and Vice President at F&M Bank
Learn more about how to invest in a Laserfiche solution today.
SEC Rule 17a-4 and 18a-6 under the Securities Exchange Act of 1934, which define a set of electronic recordkeeping and prompt production of records requirements for registered broker-dealers, security-based swap dealers (āSBSDsā) and major security-based swap participants (āMSBSPsā), have their first updates in 25 years. The amendments are effective on January 3, 2023.
āThe amendments are designed to modernize recordkeeping requirements given technological changes over the last two decades and to make the rule adaptable to new technologies in electronic recordkeepingā, quoted from the SEC recent press release. The most noticeable amendment is adding an audit trail as an alternative stated in Rule 17a-4(f)(2)(ii)(A) to the long-ago adopted requirement to preserve records in write-once, read-many (WORM) format. It eliminates the need for firms to deploy a separate electronic recordkeeping system used for compliance purposes only, which also lowers the compliance cost.
Firms have the final discretion to adopt an electronic recordkeeping system that meets either the audit trail requirement or the WORM requirement. It should provide a complete time-stamped audit trail to preserve electronic records in a manner that permits the recreation of an original record if it is altered, overwritten or erased; defined terms extracted from the final rule include:
The audit trail requirement particularly applies to final records required pursuant to the rules, in lieu of drafts or iterations of records that would not otherwise be required to be maintained and preserved under Rule 17a-3 and 17a-4 or Rules 18a-5 and 18a-6. Moreover, the electronic recordkeeping system used by the firms must automatically verify the completeness and accuracy of its processes for storing and retaining records electronically.
The SEC and FINRA continue to levy steep fines on wealth management firms. As recently as 2022,Ā SEC charged 16 Wall Street firmsĀ with widespread recordkeeping failures. The firms admitted the facts and agreed to pay combined penalties of more than $1.1 billion. āIn 2022 so far, there has been a record year with over 760 SEC enforcement actions representing $4 billion in fines,ā says Timothy D. Welsh, President, CEO and Founder at Nexus Strategy, LLC, in aĀ webinarĀ conducted by WealthManagement.com and Laserfiche.
The Compliance landscape keeps rapidly evolving. It is imperative to choose a comprehensive solution that supports the urge to tackle the increasing compliance challenges presented by SEC and FINRA rules with powerful audit trail functionalities, document and records management capabilities and process automation toolsets to make compliance a breeze.
Want to learn more? Access our Laserfiche Records Management solution page and learn more about how you can partner with Laserfiche to simplify recordkeeping compliance in your firms.
This report details the controls for Laserfiche Cloud related to the criteria for the security, availability and confidentiality principles set forth in TSP section 100, 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy (AICPA, Trust Services Criteria). To view a copy of this report, please contact us.
Laserfiche has obtained the ISO/IEC 27001:2022 certification for its information security management system (ISMS) within the scope defined by its Statement of Applicability, covering its suite of SaaS and self-hosted enterprise content management and process automation applications.
Laserficheās SOC Type 2 Plus covers the security requirements set forth in the Health Insurance Portability and Accountability Act of 1996 (HIPAA), provided within Title 45 Code of Federal Regulations Sections 164.308 ā 312 (45 CFR Sections 164.308-312) (the Security Requirements).
Laserfiche has published VPATs and ACRs available for all Laserfiche Cloud and self-hosted products. Alignment to the WCAG 2.2 Level AA standard is the basis of our approach to compliance with Section 508 and EN 301 549 requirements. See accessibility details…
DoD 5015.2 details the Department of Defenseās baseline requirements for Records Management Applications (RMA), that facilitate adequate and appropriate basis for addressing the basic challenges of managing records in the automated environment that increasingly characterizes the creation and use of records. Laserfiche Cloud records management controls are based on our self-hosted Department of Defense 5015.2 version 3-certified electronic records management capabilities.
Laserfiche features support non-alterable record archival requirements such as WORM (write once, read many) used to address SEC Rule 17a-4 for broker dealers. Beyond financial services, Laserficheās controls can also be applied to support records management practices for electronically stored information (ESI) requiring prevention of any unauthorized alternations or deletions of digital records.
Laserfiche has completed the Higher Education Community Vendor Assessment Toolkit (HECVAT) questionnaire. Contact us for more information.
Laserfiche security controls are aligned with NIST 800-53.
Contact us for more information.
Contact us for more information.
Laserfiche AI services are provided using AI models and services from OpenAI. For information on AI services in regions where OpenAI is not available, please contact us.

Regional data privacy requirements
Laserfiche AI addresses privacy and security standards of our current data center locations supporting GDPR (EU), CCPA/CPRA (USA), and PIPEDA (Canada) for low to moderate risk data. Our AI features are architected to support regional and industry-specific compliance needs, providing the same level of data sovereignty and protection you expect from Laserfiche Cloud.
For more information related to Laserfiche AI and data privacy, refer to the following:
Laserfiche designs its AI features with safety and security as core principles. We manage prompting risks through two layers of protection:
Your confidential content is not accessible to other customers or unauthorized third parties. Laserfiche distinguishes between two types of data:
Below are some of the security controls Laserfiche software includes. If you have questions about a particular security solution or control, please contact us directly.
Laserfiche Cloud supports single sign-on with Active Directory Federation Services (AD FS) and SAML authentication with identity providers such as Okta and Azure Active Directory.
The Laserfiche Cloud repository audit log includes details of user actions, including viewing, modifying, creating and deleting documents, and similar operations on metadata and other repository objects.
Administrators can use access rights to limit and control access to individual documents and objects. For example, security tags restrict access to documents on a document-by-document basis.
Laserfiche Cloud utilizes host-based intrusion detection systems to reduce the risk of data theft by individuals or organizations attempting to gain unauthorized access.
Administrators can configure access rights and privileges to limit actions that users can perform across the repository based upon role assignments or group memberships.
Laserfiche AI data is encrypted at rest (AES-256) and in transit (TLS 1.2+). Laserfiche does not utilize any of your data to train internal or external AI models.
Laserfiche Cloud supports industry-standard password controls, such as password minimum length, complexity and history.
Laserfiche engages third-party vendors to conduct external penetration testing of the Laserfiche Cloud system.
Laserfiche performs a vulnerability scan of backend servers that run in the Laserfiche Cloud hosting environment.
Laserfiche Cloudās firewall configuration settings are regularly reviewed based on industry standards.
Laserfiche Cloud supports auditing of both access and modification of objects in repositories.
Mille Lacs Corporate Ventures (MLCV), created by the tribal government of the Mille Lacs Band of Ojibwe, manages the business affairs of the Band.
At Laserfiche, we have embraced a culture of privacy, which includes embedding privacy-by-design in our engineering efforts, and have implemented controls and policies throughout our organization. Laserfiche is a B2B company based in California. The State of California has passed strict, broad privacy regulation through the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) while the General Data Protection Regulation (GDPR) leads the European Unionās privacy efforts. Many other countries, states and territories have implemented privacy regulations as well. Laserfiche endeavors to continually adapt and adhere to ever-evolving regulations that apply to its business.
Operationally, we strive to keep our stakeholdersā data secure and retain only information we collect from you where we have an ongoing legitimate business need to do so, like providing you with a service you have requested, or to comply with applicable legal, tax or accounting requirements.
At Laserfiche, all employees are required to complete annual privacy training which covers applicable privacy regulations and data handling best practices.
In addition to what we communicate in our Privacy Notice, our Cloud Subscription Agreement with accompanying Data Processing Addendum specific to the Laserfiche Cloud platform addresses data privacy regulations including GDPR, CCPA and PIPEDA.
For personal data transferred from the United Kingdom, the European Union and Switzerland, we provide appropriate safeguards per the Data Privacy Framework. To learn more, visit the āInternational Transfersā section of the Privacy Notice.
We collect information that you provide directly to us only for legitimate business purposes. For example, when you manage your user profile, participate in interactive features (such as the Contact Us page), request newsletters or other marketing communications, request customer support, enter login information, or otherwise communicate with us. To learn more visit the āInformation We Collectā section of the Privacy Notice.
You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the āunsubscribeā or āopt-outā link in the marketing emails we send you. To learn more, visit the āHow Laserfiche Uses and Shares the Information We Collectā section of the Privacy Notice.
To read our complete Privacy Notice, visit our Privacy Notice page.
Whether you have product questions, support needs, or want to partner with us, we’re here to help you on your digital transformation journey. Fill out the form and a Laserfiche team member will be in touch as soon as possible.