Join this hands-on, instructor-led virtual training to automate records management and data retention in Laserfiche.
Join this hands-on, instructor-led virtual training to automate records management and data retention in Laserfiche.
Join this hands-on, instructor-led virtual training to enhance metadata templates and fields and dive into more administrative features.
Elevate your form and process design! This hands-on lab will show how to build sophisticated forms and processes to enhance user experience and process maintenance.
Designed for new users to get caught up on Laserfiche administration basics, this lab-style instructor-led training will provide the foundations necessary to successfully manage, administer, and troubleshoot your Laserfiche system. Topics covered include repository design, metadata administration, repository security and records management, along with repository and task automation.
New security suite extends Laserfiche’s proven security controls and adds near real-time data replication for governments, law enforcement and security-conscious enterprises.
LONG BEACH, CALIFORNIA, Aug. 6, 2026 — Laserfiche — the leading SaaS provider of intelligent content management — today announced the launch of Enterprise Security, an advanced suite of security enhancements designed for organizations navigating complex regulatory environments. Enterprise Security addresses GovRAMP and CJIS (Criminal Justice Information Services) security requirements based on the NIST SP 800-53 framework. For organizations handling privileged citizen, legal or corporate data, these built-in controls streamline audit preparation and fortify defenses.
With organizations placing a higher priority on data stewardship and corporate governance, enterprise IT leaders require a security architecture that protects data without slowing down operations. Laserfiche Enterprise Security extends Laserfiche Cloud’s highly resilient infrastructure with multi-region data replication, elevated security controls for privileged accounts, and built-in governance safeguards.
“Maintaining data integrity and compliance has always been at the heart of Laserfiche’s operations,” said Michael Allen, CTO at Laserfiche. “With Enterprise Security, Laserfiche provides enterprise IT users, especially those in government, law enforcement and highly regulated industries, with the complementary controls designed to meet stringent information security standards and protect their most sensitive assets.”
High-Security Controls and Regulatory Alignment
Laserfiche Enterprise Security introduces multi-region disaster recovery, enhanced oversight capabilities, and government-ready cloud security controls tailored for mission-critical data and sensitive operations.
Key capabilities included with Enterprise Security:
Laserfiche is listed on the GovRAMP Progressing Product List, with the Enterprise Security suite delivering the architectural controls required to support these standards.
Tailored for Mission-Critical Operations
Enterprise Security is built for organizations that safeguard heavily regulated and sensitive data, where seamless recovery and strict information control are vital to everyday operations:
“Highly regulated sectors, from law enforcement to state and local governments, face a unique challenge: They must modernize content management while upholding non-negotiable security standards,” said Andrea Malick, principal advisory director at Info-Tech Research Group. “Solutions that offer built-in compliance frameworks like CJIS and GovRAMP give enterprise IT buyers the confidence to migrate sensitive workloads to the cloud without compromising control.”
Pricing and Availability
Enterprise Security is available starting today as a supplemental SKU for qualifying Laserfiche Cloud deployments.
Laserfiche is also introducing Business+, a new comprehensive subscription tier designed for organizations that want high-level security capabilities built directly into their standard platform deployment.
For More Information
Laserfiche will achieve GovRAMP Verified status, demonstrating its implementation of security controls aligned with GovRAMP and NIST SP 800-53.
Contact us for more information.
Laserfiche Cloud supports CJIS-ready controls that help organizations securely manage Criminal Justice Information (CJI). Enterprise Security provides enhanced auditing, monitoring, encryption and administrative controls that address CJIS and other security requirements.
Contact us for more information.
This report details the controls for Laserfiche Cloud related to the criteria for the security, availability and confidentiality principles set forth in TSP section 100, 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy (AICPA, Trust Services Criteria). To view a copy of this report, please contact us.
Laserfiche has obtained the ISO/IEC 27001:2022 certification for its information security management system (ISMS) within the scope defined by its Statement of Applicability, covering its suite of SaaS and self-hosted enterprise content management and process automation applications.
Laserfiche’s SOC Type 2 Plus covers the security requirements set forth in the Health Insurance Portability and Accountability Act of 1996 (HIPAA), provided within Title 45 Code of Federal Regulations Sections 164.308 – 312 (45 CFR Sections 164.308-312) (the Security Requirements).
Laserfiche has published VPATs and ACRs available for all Laserfiche Cloud and self-hosted products. Alignment to the WCAG 2.2 Level AA standard is the basis of our approach to compliance with Section 508 and EN 301 549 requirements. See accessibility details…
DoD 5015.2 details the Department of Defense’s baseline requirements for Records Management Applications (RMA), that facilitate adequate and appropriate basis for addressing the basic challenges of managing records in the automated environment that increasingly characterizes the creation and use of records. Laserfiche Cloud records management controls are based on our self-hosted Department of Defense 5015.2 version 3-certified electronic records management capabilities.
Laserfiche features support non-alterable record archival requirements such as WORM (write once, read many) used to address SEC Rule 17a-4 for broker dealers. Beyond financial services, Laserfiche’s controls can also be applied to support records management practices for electronically stored information (ESI) requiring prevention of any unauthorized alternations or deletions of digital records.
Laserfiche has completed the Higher Education Community Vendor Assessment Toolkit (HECVAT) questionnaire. Contact us for more information.
Laserfiche security controls are aligned with NIST 800-53.
Laserfiche AI services are provided using AI models and services from OpenAI. For information on AI services in regions where OpenAI is not available, please contact us.

Regional data privacy requirements
Laserfiche AI addresses privacy and security standards of our current data center locations supporting GDPR (EU), CCPA/CPRA (USA), and PIPEDA (Canada) for low to moderate risk data. Our AI features are architected to support regional and industry-specific compliance needs, providing the same level of data sovereignty and protection you expect from Laserfiche Cloud.
For more information related to Laserfiche AI and data privacy, refer to the following:
Laserfiche designs its AI features with safety and security as core principles. We manage prompting risks through two layers of protection:
Your confidential content is not accessible to other customers or unauthorized third parties. Laserfiche distinguishes between two types of data:
Below are some of the security controls Laserfiche software includes. If you have questions about a particular security solution or control, please contact us directly.
Laserfiche Cloud supports single sign-on with Active Directory Federation Services (AD FS) and SAML authentication with identity providers such as Okta and Azure Active Directory.
The Laserfiche Cloud repository audit log includes details of user actions, including viewing, modifying, creating and deleting documents, and similar operations on metadata and other repository objects.
Administrators can use access rights to limit and control access to individual documents and objects. For example, security tags restrict access to documents on a document-by-document basis.
Laserfiche Cloud utilizes host-based intrusion detection systems to reduce the risk of data theft by individuals or organizations attempting to gain unauthorized access.
Administrators can configure access rights and privileges to limit actions that users can perform across the repository based upon role assignments or group memberships.
Laserfiche AI data is encrypted at rest (AES-256) and in transit (TLS 1.2+). Laserfiche does not utilize any of your data to train internal or external AI models.
Laserfiche Cloud supports industry-standard password controls, such as password minimum length, complexity and history.
Laserfiche engages third-party vendors to conduct external penetration testing of the Laserfiche Cloud system.
Laserfiche performs a vulnerability scan of backend servers that run in the Laserfiche Cloud hosting environment.
Laserfiche Cloud’s firewall configuration settings are regularly reviewed based on industry standards.
Laserfiche Cloud supports auditing of both access and modification of objects in repositories.
Laserfiche Enterprise Security enhances security, resilience and governance capabilities for organizations managing sensitive, highly regulated data in Laserfiche Cloud.1 It provides FIPS 140-3 encryption2, privileged-user activity visibility, configurable session controls and multi-region disaster recovery with near real-time account-level replication.
Available to Laserfiche Cloud Business customers as an optional Add On, included with Business+ and offered for eligible Municipal Cloud packages.
| Laserfiche Cloud Security Features | Professional Tier | Business Tier | Business+ Tier |
|---|---|---|---|
| AES‑256 Data Encryption | ✓ | ✓ | ✓ |
| Role‑Based Access Controls | ✓ | ✓ | ✓ |
| Single Sign‑On (SSO/SAML/AD FS) | ✓ | ✓ | ✓ |
| DDoS Protection | ✓ | ✓ | ✓ |
| Unauthorized AI Bot Prevention | ✓ | ✓ | ✓ |
| Administrative and Repository Auditing | ✓ | ✓ | ✓ |
| Configurable Inactivity Timeouts | ✓ | ✓ | ✓ |
| Advanced Audit Trail | Add On | ✓ | ✓ |
| FIPS 140-3 Cryptographic Modules | ✓ 3 | ✓ | |
| Four-Hour Repository Snapshots | ✓ | ✓ | |
| Multi-Region Disaster Recovery Support | ✓ | ✓ | |
| GovRAMP (Pending) | ✓ | ✓ |
Mille Lacs Corporate Ventures (MLCV), created by the tribal government of the Mille Lacs Band of Ojibwe, manages the business affairs of the Band.
At Laserfiche, we have embraced a culture of privacy, which includes embedding privacy-by-design in our engineering efforts, and have implemented controls and policies throughout our organization. Laserfiche is a B2B company based in California. The State of California has passed strict, broad privacy regulation through the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) while the General Data Protection Regulation (GDPR) leads the European Union’s privacy efforts. Many other countries, states and territories have implemented privacy regulations as well. Laserfiche endeavors to continually adapt and adhere to ever-evolving regulations that apply to its business.
Operationally, we strive to keep our stakeholders’ data secure and retain only information we collect from you where we have an ongoing legitimate business need to do so, like providing you with a service you have requested, or to comply with applicable legal, tax or accounting requirements.
At Laserfiche, all employees are required to complete annual privacy training which covers applicable privacy regulations and data handling best practices.
In addition to what we communicate in our Privacy Notice, our Cloud Subscription Agreement with accompanying Data Processing Addendum specific to the Laserfiche Cloud platform addresses data privacy regulations including GDPR, CCPA and PIPEDA.
For personal data transferred from the United Kingdom, the European Union and Switzerland, we provide appropriate safeguards per the Data Privacy Framework. To learn more, visit the “International Transfers” section of the Privacy Notice.
We collect information that you provide directly to us only for legitimate business purposes. For example, when you manage your user profile, participate in interactive features (such as the Contact Us page), request newsletters or other marketing communications, request customer support, enter login information, or otherwise communicate with us. To learn more visit the “Information We Collect” section of the Privacy Notice.
You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing emails we send you. To learn more, visit the “How Laserfiche Uses and Shares the Information We Collect” section of the Privacy Notice.
To read our complete Privacy Notice, visit our Privacy Notice page.
Whether you have product questions, support needs or want to partner with us, we’re here to help you on your digital transformation journey. Fill out the form and a Laserfiche team member will be in touch as soon as possible.
Transform ideas into autonomous execution and get more done, faster. With simple natural language prompts, AI Agents streamline administrative work and help teams improve efficiency, consistency and operational speed.
Type your request in Smart Chat, and Agents will deliver a ready-to-review action plan. You approve the work; they handle the execution.
Use Agents to automatically carry out a wide range of bulk actions:
Laserfiche AI Agents boost productivity for the entire team, tackling complex tasks across all levels of the organization.
Our Difference
Gartner® named Laserfiche a Leader in the 2026 Gartner Magic Quadrant™ for Document Management.
Laserfiche is a Customers’ Choice in the 2025 Gartner® Peer Insights™ ‘Voice of the Customer’: Document Management report.
Laserfiche named 2025 Emotional Footprint Champion by Info-Tech Research Group in the Enterprise Content Management – Enterprise category.
Highly rated by customers, with a 4.7 average star rating and #1 in the Document Management category on G2.
Named a Leader in the Nucleus Research CSC Technology Value Matrix™.
Featured Resource
Learn how forward-thinking leaders are deploying AI Agents across their organizations to securely scale daily operations and drive lasting digital transformation.
Additional Resources
Whether you have product questions, support needs or want to partner with us, we’re here to help you on your digital transformation journey. Fill out the form and a Laserfiche team member will be in touch as soon as possible.
In the fast-paced, often chaotic world of healthcare, every second counts. For a multi-state healthcare organization with 50 locations, the challenge wasn’t just delivering quality patient care; it was also managing the complex web of administrative tasks that often pulled their staff away from what mattered most — patients.
“Our corporate mission statement is to deliver quality, effective nursing care to our seniors, pediatrics and young adults,” said Jeff Nichols, chief technology officer at The Alden Network. “But our mission from an IT perspective is to deliver a great experience to our clients, who are also our fellow employees.”

One factor getting in the way of that mission was the organization’s reliance on manual processes. Documents were being faxed, emailed, or physically carried from one department to another. This led to delays and prevented staff from spending all their time and skills on patient care.
To address the issue, Alden turned to Laserfiche. Now, instead of faxes and emails, the organization has over 100 automated Laserfiche Forms processes in place, with even more on the way. The solution has improved efficiency by 70% to 80%, allowing staff to refocus their time and talent to patients.
Before Laserfiche, core business processes — like those in human resources or accounts payable — were not only manually driven but also largely inconsistent across Alden’s 50 locations. When the Alden IT team began looking for an electronic document management system, they saw in Laserfiche a larger opportunity for consistent data orchestration.
“We thought that document storage was going to be 90% of how we used Laserfiche,” Nichols said. “But we are now using Laserfiche Forms and workflow automation in a significant way. Laserfiche Forms helps us get the tasks into the hands of our users, and workflow does all the backend processing of the data.”
In the accounts payable (AP) department, for instance, employees were using triplicate carbon copy forms for purchase orders (POs). “Correspondence [was] going back and forth in email, or some buildings were even just sending a stack of paper in a tote via courier to the AP department,” said Ralph Reinhofer, IT project manager at Alden Network. AP processors had to manually match invoices to receipts, a cumbersome process that could easily lead to delays.
Another company-wide activity — the onboarding process for new hires — was also full of manual, disconnected tasks. “There were times IT would find out that when someone started, they didn’t get a notebook, or door access, or whatever they needed,” Nichols explained. These manual tasks were not just frustrating; they also detracted from the core mission of providing excellent care.
The Solution: Streamlining with Forms and Workflow
“One of the main goals with Laserfiche was removing monotonous, repetitive tasks from our employees, so they can spend more time focusing on the patient, or things related to patient care, rather than moving data from one place to another,” said Reinhofer.
Laserfiche Forms and workflow were the key to solving some of Alden Network’s biggest challenges. Working with Laserfiche solution provider Proven IT, Alden used Laserfiche as a solution to automate AP processes and streamline HR administration. This initiative allowed Alden to digitize and standardize operations across all 50 locations.
Now, instead of relying on couriers or faxes to send information between locations, the organization manages a wide range of tasks digitally. These include:
“Name any internal business process at Alden, and there’s probably a Laserfiche form for it,” Reinhofer said. “And we’ve now given everyone a single way to do everything, so there’s a lot of consistency now.”
The consistency is not only more efficient, but it also helps with employee retention and recruitment. When a new employee needs to learn a process, “there are four other buildings doing it the same way and there’s certainly enough people they can lean on to ask, ‘How does this work?’” Nichols explained. “And it’s always the same answer.”
Since implementing Laserfiche, Alden has seen dramatic improvements in efficiency and productivity. The team has automated over 100 Laserfiche Forms processes with more on the way. Many of these automated processes now run 70% to 80% more efficiently than the manual workflows they replaced. Work that required a full week of manual effort can now be completed in an hour, allowing the IT team to manage workloads that were previously difficult to scale. “We created a monster, because we let the staff think outside of the box,” Nichols said. “Anything that they’ve asked for, we’ve made it into a process. We don’t fault them, because we started this — and it’s effective.”

Alden also relies on Laserfiche to support evolving Centers for Medicare & Medicaid Services CMS administrative requirements. The platform’s flexibility allows the team to respond quickly to regulatory changes while maintaining consistent documentation and tracking across the organization.
The most significant benefit has been empowering staff to focus on their core duties. By automating repetitive administrative tasks, the organization has freed up employee time. “We know people have other things to do,” Nichols said. “They have better uses of their time than these manual tasks you can deploy a robot to do. That’s essentially what Laserfiche has done for us.”
Ultimately, the goal has been to get back to the heart of the organization’s mission. “We want our clinicians to do clinical work,” Nichols explained. “The IT department doesn’t know how to take care of your mom or dad or grandparent. We want the clinicians to do that. We don’t want processes to take our healthcare providers away from what they do best.”
Join over 400 IT professionals to explore how exponential technologies are transforming organizations.
The ASCII Group continues to evolve with the needs of today’s MSPs. ASCII Edge 2026 is where collaboration, peer insight, and emerging technology converge—equipping MSPs to scale smarter and navigate the new era of AI with confidence. This year’s series delivers real-world strategies, expert guidance, and member-driven dialogue focused on strengthening operations, driving innovation, and growing together as a community.