Join this hands-on, instructor-led virtual training to enhance metadata templates and fields and dive into more administrative features.
Join this hands-on, instructor-led virtual training to enhance metadata templates and fields and dive into more administrative features.
Elevate your form and process design! This hands-on lab will show how to build sophisticated forms and processes to enhance user experience and process maintenance.
Designed for new users to get caught up on Laserfiche administration basics, this lab-style instructor-led training will provide the foundations necessary to successfully manage, administer, and troubleshoot your Laserfiche system. Topics covered include repository design, metadata administration, repository security and records management, along with repository and task automation.
New security suite extends Laserfiche’s proven security controls and adds near real-time data replication for governments, law enforcement and security-conscious enterprises.
LONG BEACH, CALIFORNIA, Aug. 6, 2026 — Laserfiche — the leading SaaS provider of intelligent content management — today announced the launch of Enterprise Security, an advanced suite of security enhancements designed for organizations navigating complex regulatory environments. Enterprise Security addresses GovRAMP and CJIS (Criminal Justice Information Services) security requirements based on the NIST SP 800-53 framework. For organizations handling privileged citizen, legal or corporate data, these built-in controls streamline audit preparation and fortify defenses.
With organizations placing a higher priority on data stewardship and corporate governance, enterprise IT leaders require a security architecture that protects data without slowing down operations. Laserfiche Enterprise Security extends Laserfiche Cloud’s highly resilient infrastructure with multi-region data replication, elevated security controls for privileged accounts, and built-in governance safeguards.
“Maintaining data integrity and compliance has always been at the heart of Laserfiche’s operations,” said Michael Allen, CTO at Laserfiche. “With Enterprise Security, Laserfiche provides enterprise IT users, especially those in government, law enforcement and highly regulated industries, with the complementary controls designed to meet stringent information security standards and protect their most sensitive assets.”
High-Security Controls and Regulatory Alignment
Laserfiche Enterprise Security introduces multi-region disaster recovery, enhanced oversight capabilities, and government-ready cloud security controls tailored for mission-critical data and sensitive operations.
Key capabilities included with Enterprise Security:
Laserfiche is listed on the GovRAMP Progressing Product List, with the Enterprise Security suite delivering the architectural controls required to support these standards.
Tailored for Mission-Critical Operations
Enterprise Security is built for organizations that safeguard heavily regulated and sensitive data, where seamless recovery and strict information control are vital to everyday operations:
“Highly regulated sectors, from law enforcement to state and local governments, face a unique challenge: They must modernize content management while upholding non-negotiable security standards,” said Andrea Malick, principal advisory director at Info-Tech Research Group. “Solutions that offer built-in compliance frameworks like CJIS and GovRAMP give enterprise IT buyers the confidence to migrate sensitive workloads to the cloud without compromising control.”
Pricing and Availability
Enterprise Security is available starting today as a supplemental SKU for qualifying Laserfiche Cloud deployments.
Laserfiche is also introducing Business+, a new comprehensive subscription tier designed for organizations that want high-level security capabilities built directly into their standard platform deployment.
For More Information
Laserfiche will achieve GovRAMP Verified status, demonstrating its implementation of security controls aligned with GovRAMP and NIST SP 800-53.
Contact us for more information.
Laserfiche Cloud supports CJIS-ready controls that help organizations securely manage Criminal Justice Information (CJI). Enterprise Security provides enhanced auditing, monitoring, encryption and administrative controls that address CJIS and other security requirements.
Contact us for more information.
This report details the controls for Laserfiche Cloud related to the criteria for the security, availability and confidentiality principles set forth in TSP section 100, 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy (AICPA, Trust Services Criteria). To view a copy of this report, please contact us.
Laserfiche has obtained the ISO/IEC 27001:2022 certification for its information security management system (ISMS) within the scope defined by its Statement of Applicability, covering its suite of SaaS and self-hosted enterprise content management and process automation applications.
Laserfiche’s SOC Type 2 Plus covers the security requirements set forth in the Health Insurance Portability and Accountability Act of 1996 (HIPAA), provided within Title 45 Code of Federal Regulations Sections 164.308 – 312 (45 CFR Sections 164.308-312) (the Security Requirements).
Laserfiche has published VPATs and ACRs available for all Laserfiche Cloud and self-hosted products. Alignment to the WCAG 2.2 Level AA standard is the basis of our approach to compliance with Section 508 and EN 301 549 requirements. See accessibility details…
DoD 5015.2 details the Department of Defense’s baseline requirements for Records Management Applications (RMA), that facilitate adequate and appropriate basis for addressing the basic challenges of managing records in the automated environment that increasingly characterizes the creation and use of records. Laserfiche Cloud records management controls are based on our self-hosted Department of Defense 5015.2 version 3-certified electronic records management capabilities.
Laserfiche features support non-alterable record archival requirements such as WORM (write once, read many) used to address SEC Rule 17a-4 for broker dealers. Beyond financial services, Laserfiche’s controls can also be applied to support records management practices for electronically stored information (ESI) requiring prevention of any unauthorized alternations or deletions of digital records.
Laserfiche has completed the Higher Education Community Vendor Assessment Toolkit (HECVAT) questionnaire. Contact us for more information.
Laserfiche security controls are aligned with NIST 800-53.
Laserfiche AI services are provided using AI models and services from OpenAI. For information on AI services in regions where OpenAI is not available, please contact us.

Regional data privacy requirements
Laserfiche AI addresses privacy and security standards of our current data center locations supporting GDPR (EU), CCPA/CPRA (USA), and PIPEDA (Canada) for low to moderate risk data. Our AI features are architected to support regional and industry-specific compliance needs, providing the same level of data sovereignty and protection you expect from Laserfiche Cloud.
For more information related to Laserfiche AI and data privacy, refer to the following:
Laserfiche designs its AI features with safety and security as core principles. We manage prompting risks through two layers of protection:
Your confidential content is not accessible to other customers or unauthorized third parties. Laserfiche distinguishes between two types of data:
Below are some of the security controls Laserfiche software includes. If you have questions about a particular security solution or control, please contact us directly.
Laserfiche Cloud supports single sign-on with Active Directory Federation Services (AD FS) and SAML authentication with identity providers such as Okta and Azure Active Directory.
The Laserfiche Cloud repository audit log includes details of user actions, including viewing, modifying, creating and deleting documents, and similar operations on metadata and other repository objects.
Administrators can use access rights to limit and control access to individual documents and objects. For example, security tags restrict access to documents on a document-by-document basis.
Laserfiche Cloud utilizes host-based intrusion detection systems to reduce the risk of data theft by individuals or organizations attempting to gain unauthorized access.
Administrators can configure access rights and privileges to limit actions that users can perform across the repository based upon role assignments or group memberships.
Laserfiche AI data is encrypted at rest (AES-256) and in transit (TLS 1.2+). Laserfiche does not utilize any of your data to train internal or external AI models.
Laserfiche Cloud supports industry-standard password controls, such as password minimum length, complexity and history.
Laserfiche engages third-party vendors to conduct external penetration testing of the Laserfiche Cloud system.
Laserfiche performs a vulnerability scan of backend servers that run in the Laserfiche Cloud hosting environment.
Laserfiche Cloud’s firewall configuration settings are regularly reviewed based on industry standards.
Laserfiche Cloud supports auditing of both access and modification of objects in repositories.
Laserfiche Enterprise Security enhances security, resilience and governance capabilities for organizations managing sensitive, highly regulated data in Laserfiche Cloud.1 It provides FIPS 140-3 encryption2, privileged-user activity visibility, configurable session controls and multi-region disaster recovery with near real-time account-level replication.
Available to Laserfiche Cloud Business customers as an optional Add On, included with Business+ and offered for eligible Municipal Cloud packages.
| Laserfiche Cloud Security Features | Professional Tier | Business Tier | Business+ Tier |
|---|---|---|---|
| AES‑256 Data Encryption | ✓ | ✓ | ✓ |
| Role‑Based Access Controls | ✓ | ✓ | ✓ |
| Single Sign‑On (SSO/SAML/AD FS) | ✓ | ✓ | ✓ |
| DDoS Protection | ✓ | ✓ | ✓ |
| Unauthorized AI Bot Prevention | ✓ | ✓ | ✓ |
| Administrative and Repository Auditing | ✓ | ✓ | ✓ |
| Configurable Inactivity Timeouts | ✓ | ✓ | ✓ |
| Advanced Audit Trail | Add On | ✓ | ✓ |
| FIPS 140-3 Cryptographic Modules | ✓ 3 | ✓ | |
| Four-Hour Repository Snapshots | ✓ | ✓ | |
| Multi-Region Disaster Recovery Support | ✓ | ✓ | |
| GovRAMP (Pending) | ✓ | ✓ |
Mille Lacs Corporate Ventures (MLCV), created by the tribal government of the Mille Lacs Band of Ojibwe, manages the business affairs of the Band.
At Laserfiche, we have embraced a culture of privacy, which includes embedding privacy-by-design in our engineering efforts, and have implemented controls and policies throughout our organization. Laserfiche is a B2B company based in California. The State of California has passed strict, broad privacy regulation through the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) while the General Data Protection Regulation (GDPR) leads the European Union’s privacy efforts. Many other countries, states and territories have implemented privacy regulations as well. Laserfiche endeavors to continually adapt and adhere to ever-evolving regulations that apply to its business.
Operationally, we strive to keep our stakeholders’ data secure and retain only information we collect from you where we have an ongoing legitimate business need to do so, like providing you with a service you have requested, or to comply with applicable legal, tax or accounting requirements.
At Laserfiche, all employees are required to complete annual privacy training which covers applicable privacy regulations and data handling best practices.
In addition to what we communicate in our Privacy Notice, our Cloud Subscription Agreement with accompanying Data Processing Addendum specific to the Laserfiche Cloud platform addresses data privacy regulations including GDPR, CCPA and PIPEDA.
For personal data transferred from the United Kingdom, the European Union and Switzerland, we provide appropriate safeguards per the Data Privacy Framework. To learn more, visit the “International Transfers” section of the Privacy Notice.
We collect information that you provide directly to us only for legitimate business purposes. For example, when you manage your user profile, participate in interactive features (such as the Contact Us page), request newsletters or other marketing communications, request customer support, enter login information, or otherwise communicate with us. To learn more visit the “Information We Collect” section of the Privacy Notice.
You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing emails we send you. To learn more, visit the “How Laserfiche Uses and Shares the Information We Collect” section of the Privacy Notice.
To read our complete Privacy Notice, visit our Privacy Notice page.
Whether you have product questions, support needs or want to partner with us, we’re here to help you on your digital transformation journey. Fill out the form and a Laserfiche team member will be in touch as soon as possible.
Transform ideas into autonomous execution and get more done, faster. With simple natural language prompts, AI Agents streamline administrative work and help teams improve efficiency, consistency and operational speed.
Type your request in Smart Chat, and Agents will deliver a ready-to-review action plan. You approve the work; they handle the execution.
Use Agents to automatically carry out a wide range of bulk actions:
Laserfiche AI Agents boost productivity for the entire team, tackling complex tasks across all levels of the organization.
Our Difference
Gartner® named Laserfiche a Leader in the 2026 Gartner Magic Quadrant™ for Document Management.
Laserfiche is a Customers’ Choice in the 2025 Gartner® Peer Insights™ ‘Voice of the Customer’: Document Management report.
Laserfiche named 2025 Emotional Footprint Champion by Info-Tech Research Group in the Enterprise Content Management – Enterprise category.
Highly rated by customers, with a 4.7 average star rating and #1 in the Document Management category on G2.
Named a Leader in the Nucleus Research CSC Technology Value Matrix™.
Featured Resource
Learn how forward-thinking leaders are deploying AI Agents across their organizations to securely scale daily operations and drive lasting digital transformation.
Additional Resources
Whether you have product questions, support needs or want to partner with us, we’re here to help you on your digital transformation journey. Fill out the form and a Laserfiche team member will be in touch as soon as possible.
This Conference brings together senior leaders and practitioners to explore how banks are redesigning their operating models to become smarter, faster, and safer, while strengthening their role as trusted platforms that enable connectivity, capital flows, and sustainable growth. This includes the growing adoption of digital money and assets, from central bank digital currencies and stablecoins to tokenized deposits and securities, alongside new market infrastructures that are reshaping how value is issued and transferred.
Members Trust Company (MTC) manages trust and investment services for more than 65 credit unions and thousands of individual clients across the United States. Through these partnerships, credit unions offer trust and investment products to their members, while MTC administers the underlying accounts and records.
Combining the scale and capabilities of a national trust institution with the personalized, relationship-driven service of a boutique firm, MTC operates under strict federal oversight by the Office of the Comptroller of the Currency (OCC). Its 60 employees oversee more than 5,000 accounts — a lean structure that makes efficiency, reliability and compliance essential to maintaining client trust.
Despite its lean size, MTC’s growing client base and expanding account volume made manual, disconnected processes difficult to sustain. Employees stored tens of thousands of client records, such as account opening forms and trust agreements, in shared drives. This made information retrieval difficult, inconsistent, and prone to errors. “It was a challenge to locate the right documents quickly,” said Diana Begley, process architect at MTC. “We wanted a system that was more structured, reliable and easier to manage.”
When Hurricane Irma knocked out power across Florida, MTC recognized that its locally managed systems created risk for both business continuity and client service. MTC made the strategic decision to move information to the cloud to better protect client assets, maintain uptime and modernize operations. The company selected Laserfiche for its secure, accessible infrastructure and powerful automation capabilities. This would enable staff across the country to access records for its nationwide client base reliably and securely, even during a disruption.

MTC’s first goal was to improve accuracy and efficiency in two key areas of account management while maintaining strict regulatory compliance. Laserfiche automated its account opening and account request processes so that every document, approval and audit trail is captured and stored correctly.
Records management and metadata automation capabilities from Laserfiche keep these processes consistent and auditable. Each document is filed with complete metadata, making information easy to locate during regulatory audits and internal compliance reviews. Laserfiche also reduces manual errors and variability between departments.
These improvements allow MTC to maintain the personalized, relationship-driven service it’s known for, even as the company’s client base continues to grow.

After launching the new system, MTC immediately saw measurable improvements. It reduced account servicing steps from 15 to two, cutting average handling time from 45 minutes to about 15 minutes per request. The new workflows eliminated the need to interpret incomplete requests or manually route tasks between departments, replacing that guesswork with clear, automated steps that keep every request on track.
Since introducing the Request Portal, MTC has processed more than 1,300 automated tasks, with full adoption still underway. Each process includes integrated notifications, approvals and filing, eliminating the back-and-forth emails and status checks that staff once handled manually. Staff report higher satisfaction and fewer errors, while clients experience faster turnaround times and consistent service. “Laserfiche lets our team focus on client relationships instead of administrative tasks,” Begley said.
To create a unified experience, MTC connected Laserfiche with other essential systems across the organization to create a unified view of client activity and documents:
Together, these integrations give staff and partners faster, more reliable access to client information. Digital signatures speed up document turnaround, while synchronized data ensures teams always work from the most accurate record. The result is a more connected client experience, with fewer handoffs and less manual work across departments. That means MTC can provide faster, more consistent service without losing the attentive client care that defines its approach.

Today, 83% of employees use the system daily. Automation significantly reduced the time staff and partners spend on repetitive tasks while improving data accuracy and compliance readiness. The decision to deploy in the cloud also reduced IT overhead, eliminating the need to manage servers, perform updates or handle routine maintenance.
As a result, MTC enjoys stronger business continuity, fewer interruptions and better scalability for future growth. “We have a reputation for reliability,” Begley said. “Laserfiche enables us to deliver on that every day.”
MTC continues to expand automation to additional account processes and explore new ways to leverage AI capabilities. The company plans to connect Laserfiche with its trust accounting system for straight-through processing. It is also looking to implement Intelligent Data Capture to handle incoming checks and invoices more efficiently.
Together, these connected processes create a consistent, compliant framework that supports growth and reliable client service. With Laserfiche, MTC can continue operating with the reach of a national firm while preserving the personal service that sets it apart.
“Laserfiche gives us the agility to scale without adding staff,” Begley said. “It’s helping us build a smarter, more efficient future for our clients and our team.”
Coopecaja, a savings and credit cooperative in Costa Rica, operates with the complexity of a bank, providing mortgages, consumer loans and savings services to its members. While the organization is dedicated to offering robust financial benefits, the management of physical documentation created significant logistical and financial hurdles.
The cooperative previously relied on physical archives, storing documents in filing cabinets and external servers. This resulted in excess storage costs and slower member service. Coopecaja needed a solution that would not only digitize their records but also align with national archival standards.
To alleviate these inefficiencies, the organization implemented Laserfiche to centralize document management and streamline processes across the enterprise.
“Laserfiche has been a great tool to provide faster and easier access to information,” said Marlene Norori, archivist at Coopecaja. “Working with the platform is much more efficient and fits our administrative and document management needs perfectly.”

Managing records in accordance with strict regulatory requirements and safeguarding sensitive member data is challenging with physical records. Physical files also slow internal processes and make it difficult to enforce strict access controls. As a cooperative, Coopecaja is governed by a legal framework and regulations issued by the General Superintendency of Financial Institutions (SUGEF) concerning supervision, regulation, and applicable financial controls. Additionally, for document management, Coopecaja must follow the archival standards issued by the National Archive of Costa Rica as well as other international standards.
To centralize records and enforce granular access controls, the cooperative adopted Laserfiche’s cloud-based enterprise content management (ECM) system.
“The permissions structure allows staff to find what they need quickly and securely,” said Sharon Ureña Sánchez, archive assistant at Coopecaja. “It also ensures that each person has access only to the information they need and not additional data.”
With documentation in Laserfiche, Coopecaja minimized the need for printing and physical filing. The platform’s search templates and metadata capabilities helped the cooperative organize information, mirroring their previous archival structure in a secure digital environment.
Staff can now access information instantly without leaving their desks, freeing up time to focus on higher-value tasks rather than information retrieval.
“The time saved has been significant — we’ve greatly reduced waiting times for other departments when they need access to information,” said Sánchez. “Laserfiche provides us speed and accessibility.”
“Laserfiche has significantly reduced physical storage costs,” said Norori. “The goal now is to eliminate obsolete documents that have already passed their retention period and keep only what’s necessary in Laserfiche.”
By centralizing records in Laserfiche, Coopecaja created a secure environment that strictly enforces data privacy without hindering productivity.
Beyond records management, Coopecaja is now using Laserfiche to automate key processes. Previously, joining the cooperative was a time-consuming, manual experience. Members were required to visit branch locations in person to complete registration paperwork. This reliance on physical presence and paper forms created delays and administrative burdens for both members and staff.
Coopecaja transformed the experience by implementing a fully digital onboarding process. “Once members complete the registration process online, the digital documents are automatically uploaded to Laserfiche,” said Norori. “This has saved both our members and our staff a lot of time.”
This also ensures that member information — such as social capital contributions and membership files — is complete, eliminating the back-and-forth that results from forgotten documents.
The transition has accelerated service delivery and improved member convenience. Staff can now complete reviews instantly online rather than handling physical paperwork, significantly reducing processing time.
As Coopecaja plans for the future, the team is confident that they have a scalable foundation. “As we continue adding documents and storage needs grow, with our Laserfiche Cloud infrastructure, we can expand as needed,” added Sánchez.
Join over 400 IT professionals to explore how exponential technologies are transforming organizations.