Designed for new users to get caught up on Laserfiche administration basics, this lab-style instructor-led training will provide the foundations necessary to successfully manage, administer, and troubleshoot your Laserfiche system. Topics covered include repository design, metadata administration, repository security and records management, along with repository and task automation.
New security suite extends Laserficheâs proven security controls and adds near real-time data replication for governments, law enforcement and security-conscious enterprises.
LONG BEACH, CALIFORNIA, Aug. 6, 2026 â Laserfiche â the leading SaaS provider of intelligent content management â today announced the launch of Enterprise Security, an advanced suite of security enhancements designed for organizations navigating complex regulatory environments. Enterprise Security addresses GovRAMP and CJIS (Criminal Justice Information Services) security requirements based on the NIST SP 800-53 framework. For organizations handling privileged citizen, legal or corporate data, these built-in controls streamline audit preparation and fortify defenses.
With organizations placing a higher priority on data stewardship and corporate governance, enterprise IT leaders require a security architecture that protects data without slowing down operations. Laserfiche Enterprise Security extends Laserfiche Cloudâs highly resilient infrastructure with multi-region data replication, elevated security controls for privileged accounts, and built-in governance safeguards.
âMaintaining data integrity and compliance has always been at the heart of Laserficheâs operations,â said Michael Allen, CTO at Laserfiche. âWith Enterprise Security, Laserfiche provides enterprise IT users, especially those in government, law enforcement and highly regulated industries, with the complementary controls designed to meet stringent information security standards and protect their most sensitive assets.â
High-Security Controls and Regulatory Alignment
Laserfiche Enterprise Security introduces multi-region disaster recovery, enhanced oversight capabilities, and government-ready cloud security controls tailored for mission-critical data and sensitive operations.
Key capabilities included with Enterprise Security:
GovRAMP and CJIS Readiness: Deploys advanced operational controls designed to meet strict government and criminal justice compliance mandates for sensitive data handling.
Multi-region disaster recovery: Safeguards critical operations against large-scale infrastructure failures with near real-time, account-level repository data replication and multi-region failover.
Advanced audit tracking and analytics: Provides complete visibility into user login activity, system changes, and security events
Proactive threat augmentation: Bolsters existing security measures by adding specialized protections against unauthorized AI bot scraping and distributed denial of service (DDoS) attacks.
Laserfiche is listed on the GovRAMP Progressing Product List, with the Enterprise Security suite delivering the architectural controls required to support these standards.
Tailored for Mission-Critical Operations
Enterprise Security is built for organizations that safeguard heavily regulated and sensitive data, where seamless recovery and strict information control are vital to everyday operations:
Government agencies and law enforcement: Safely manage records and criminal justice information while strictly adhering to CJIS and GovRAMP standards.
Large enterprises and financial services: Protect proprietary corporate data and client financials with strong cryptographic modules and advanced visibility into user activity.
âHighly regulated sectors, from law enforcement to state and local governments, face a unique challenge: They must modernize content management while upholding non-negotiable security standards,â said Andrea Malick, principal advisory director at Info-Tech Research Group. âSolutions that offer built-in compliance frameworks like CJIS and GovRAMP give enterprise IT buyers the confidence to migrate sensitive workloads to the cloud without compromising control.â
Pricing and Availability
Enterprise Security is available starting today as a supplemental SKU for qualifying Laserfiche Cloud deployments.
Laserfiche is also introducing Business+, a new comprehensive subscription tier designed for organizations that want high-level security capabilities built directly into their standard platform deployment.
Laserfiche Cloud supports CJIS-ready controls that help organizations securely manage Criminal Justice Information (CJI). Enterprise Security provides enhanced auditing, monitoring, encryption and administrative controls that address CJIS and other security requirements.
This report details the controls for Laserfiche Cloud related to the criteria for the security, availability and confidentiality principles set forth in TSP section 100, 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy (AICPA, Trust Services Criteria). To view a copy of this report, please contact us.
ISO/IEC 27001:2022
Laserfiche has obtained the ISO/IEC 27001:2022 certification for its information security management system (ISMS) within the scope defined by its Statement of Applicability, covering its suite of SaaS and self-hosted enterprise content management and process automation applications.
HIPAA
Laserficheâs SOC Type 2 Plus covers the security requirements set forth in the Health Insurance Portability and Accountability Act of 1996 (HIPAA), provided within Title 45 Code of Federal Regulations Sections 164.308 â 312 (45 CFR Sections 164.308-312) (the Security Requirements).
Web Content Accessibility Guidelines 2.2 AA
Laserfiche has published VPATs and ACRs available for all Laserfiche Cloud and self-hosted products. Alignment to the WCAG 2.2 Level AA standard is the basis of our approach to compliance with Section 508 and EN 301 549 requirements. See accessibility details…
DoD 5015.2
DoD 5015.2 details the Department of Defenseâs baseline requirements for Records Management Applications (RMA), that facilitate adequate and appropriate basis for addressing the basic challenges of managing records in the automated environment that increasingly characterizes the creation and use of records. Laserfiche Cloud records management controls are based on our self-hosted Department of Defense 5015.2 version 3-certified electronic records management capabilities.
SEC Rule 17a-4
Laserfiche features support non-alterable record archival requirements such as WORM (write once, read many) used to address SEC Rule 17a-4 for broker dealers. Beyond financial services, Laserficheâs controls can also be applied to support records management practices for electronically stored information (ESI) requiring prevention of any unauthorized alternations or deletions of digital records.
Laserfiche security controls are aligned with NIST 800-53.
AI Security and Governance
Laserfiche AI services are provided using AI models and services from OpenAI. For information on AI services in regions where OpenAI is not available, please contact us.
Laserfiche AI addresses privacy and security standards of our current data center locations supporting GDPR (EU), CCPA/CPRA (USA), and PIPEDA (Canada) for low to moderate risk data. Our AI features are architected to support regional and industry-specific compliance needs, providing the same level of data sovereignty and protection you expect from Laserfiche Cloud.
For more information related to Laserfiche AI and data privacy, refer to the following:
You retain ownership of inputs you provide. While Laserfiche owns the intellectual property rights to the outputs generated by our AI tools, we grant you a broad license to use those outputs for any of your organizationâs internal business needs.
Laserfiche does not use your organizationâs data to train any internal or external AI models. Your data is used only as needed to deliver services and to meet our legal and regulatory obligations.
Laserfiche AI user prompts
Laserfiche designs its AI features with safety and security as core principles. We manage prompting risks through two layers of protection:
Prompt-less by design: Many Laserfiche AI features, such as Document Summarization, do not use user prompts, reducing risks associated with accidental or malicious prompting.
Enterprise-grade safeguards: For features that do accept user input, like Smart Fields and Smart Chat, we employ industry-standard protections against prompt injection. These include input filtering, validation, and other controls that keep prompts and responses within defined, limited boundaries.
Content confidentiality
Your confidential content is not accessible to other customers or unauthorized third parties. Laserfiche distinguishes between two types of data:
Your confidential content: Laserfiche does not sell your data. Documents, files, and inputs you upload to Laserfiche are your own content.
Usage and system data: Like most cloud providers, Laserfiche collects limited, high-level usage data (such as feature adoption and system performance metrics) to operate and improve the platform. This data is de-identified and does not include the contents of your documents or AI prompts.
Data retention
OpenAI may store the prompts you enter or the responses you receive temporarily for up to 30 days to provide services and identify abuse. After 30 days, API inputs and outputs are removed from their systems, unless they are legally required to retain them. For more details, please refer to the OpenAI Services Agreement.
Security Controls
Below are some of the security controls Laserfiche software includes. If you have questions about a particular security solution or control, please contact us directly.
Single sign-on
Laserfiche Cloud supports single sign-on with Active Directory Federation Services (AD FS) and SAML authentication with identity providers such as Okta and Azure Active Directory.
Repository audit log
The Laserfiche Cloud repository audit log includes details of user actions, including viewing, modifying, creating and deleting documents, and similar operations on metadata and other repository objects.
Fine-grained access control
Administrators can use access rights to limit and control access to individual documents and objects. For example, security tags restrict access to documents on a document-by-document basis.
Intrusion detection
Laserfiche Cloud utilizes host-based intrusion detection systems to reduce the risk of data theft by individuals or organizations attempting to gain unauthorized access.
Access rights
Administrators can configure access rights and privileges to limit actions that users can perform across the repository based upon role assignments or group memberships.
AI governance
Laserfiche AI data is encrypted at rest (AES-256) and in transit (TLS 1.2+). Laserfiche does not utilize any of your data to train internal or external AI models.
Password policies
Laserfiche Cloud supports industry-standard password controls, such as password minimum length, complexity and history.
Penetration testing
Laserfiche engages third-party vendors to conduct external penetration testing of the Laserfiche Cloud system.
Vulnerability scanning
Laserfiche performs a vulnerability scan of backend servers that run in the Laserfiche Cloud hosting environment.
Firewalls
Laserfiche Cloudâs firewall configuration settings are regularly reviewed based on industry standards.
Repository application auditing
Laserfiche Cloud supports auditing of both access and modification of objects in repositories.
Enterprise Security
Securely modernize your business-critical work with Laserfiche Cloud.
Laserfiche Enterprise Security enhances security, resilience and governance capabilities for organizations managing sensitive, highly regulated data in Laserfiche Cloud.1 It provides FIPS 140-3 encryption2, privileged-user activity visibility, configurable session controls and multi-region disaster recovery with near real-time account-level replication.
Available to Laserfiche Cloud Business customers as an optional Add On, included with Business+ and offered for eligible Municipal Cloud packages.
âLaserficheâs compliance tools in the cloud, and knowing that Laserfiche takes security very seriously have been important factors in our decision making.ârnâAndrew McElrath, strategic project manager at Mille Lacs Corporate Ventures
Featured Success Story
Mille Lacs Corporate Ventures Transitions Corporate Operations to Laserfiche Cloud
Mille Lacs Corporate Ventures (MLCV), created by the tribal government of the Mille Lacs Band of Ojibwe, manages the business affairs of the Band.
At Laserfiche, we have embraced a culture of privacy, which includes embedding privacy-by-design in our engineering efforts, and have implemented controls and policies throughout our organization. Laserfiche is a B2B company based in California. The State of California has passed strict, broad privacy regulation through the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) while the General Data Protection Regulation (GDPR) leads the European Unionâs privacy efforts. Many other countries, states and territories have implemented privacy regulations as well. Laserfiche endeavors to continually adapt and adhere to ever-evolving regulations that apply to its business.
Operational privacy
Operationally, we strive to keep our stakeholdersâ data secure and retain only information we collect from you where we have an ongoing legitimate business need to do so, like providing you with a service you have requested, or to comply with applicable legal, tax or accounting requirements.
Privacy training
At Laserfiche, all employees are required to complete annual privacy training which covers applicable privacy regulations and data handling best practices.
Laserfiche documentation
In addition to what we communicate in our Privacy Notice, our Cloud Subscription Agreement with accompanying Data Processing Addendum specific to the Laserfiche Cloud platform addresses data privacy regulations including GDPR, CCPA and PIPEDA.
We collect information that you provide directly to us only for legitimate business purposes. For example, when you manage your user profile, participate in interactive features (such as the Contact Us page), request newsletters or other marketing communications, request customer support, enter login information, or otherwise communicate with us. To learn more visit the âInformation We Collectâ section of the Privacy Notice.
Whether you have product questions, support needs or want to partner with us, we’re here to help you on your digital transformation journey. Fill out the form and a Laserfiche team member will be in touch as soon as possible.
Focus On Results, Not Busywork
Laserfiche AI Agents put your content to work, so you can get back to what you do best.Â
Transform ideas into autonomous execution and get more done, faster. With simple natural language prompts, AI Agents streamline administrative work and help teams improve efficiency, consistency and operational speed.
Turn chat into action.
Type your request in Smart Chat, and Agents will deliver a ready-to-review action plan. You approve the work; they handle the execution.
Use Agents to automatically carry out a wide range of bulk actions:
Bring order to scattered content
Move, rename and organize large volumes of files
Apply tags and update content templates with ease
Group relevant documents into personal Collections
Break down complex projects into clear actionable steps
Permission-aware intelligence
Agents respect your enterprise governance policies acting with the same permissions as their users.
Context-aware decisions
Agents understand your request and use context to handle judgement-heavy tasks.
Transparent audit trails
Agent actions are fully tracked and audited, providing a clear record of all activities performed.
Complete human oversight
Review, refine and approve an Agentâs actions before a single change is made.
Expand team capacity across every department
Laserfiche AI Agents boost productivity for the entire team, tackling complex tasks across all levels of the organization.Â
Learn how forward-thinking leaders are deploying AI Agents across their organizations to securely scale daily operations and drive lasting digital transformation.
Whether you have product questions, support needs or want to partner with us, we’re here to help you on your digital transformation journey. Fill out the form and a Laserfiche team member will be in touch as soon as possible.
In the fast-paced, often chaotic world of healthcare, every second counts. For a multi-state healthcare organization with 50 locations, the challenge wasn’t just delivering quality patient care; it was also managing the complex web of administrative tasks that often pulled their staff away from what mattered most â patients.
âOur corporate mission statement is to deliver quality, effective nursing care to our seniors, pediatrics and young adults,â said Jeff Nichols, chief technology officer at The Alden Network. âBut our mission from an IT perspective is to deliver a great experience to our clients, who are also our fellow employees.â
One factor getting in the way of that mission was the organizationâs reliance on manual processes. Documents were being faxed, emailed, or physically carried from one department to another. This led to delays and prevented staff from spending all their time and skills on patient care.
To address the issue, Alden turned to Laserfiche. Now, instead of faxes and emails, the organization has over 100 automated Laserfiche Forms processes in place, with even more on the way. The solution has improved efficiency by 70% to 80%, allowing staff to refocus their time and talent to patients.
The Problem: Monotonous Tasks and Wasted Time
Before Laserfiche, core business processes â like those in human resources or accounts payable â were not only manually driven but also largely inconsistent across Aldenâs 50 locations. When the Alden IT team began looking for an electronic document management system, they saw in Laserfiche a larger opportunity for consistent data orchestration.
âWe thought that document storage was going to be 90% of how we used Laserfiche,â Nichols said. âBut we are now using Laserfiche Forms and workflow automation in a significant way. Laserfiche Forms helps us get the tasks into the hands of our users, and workflow does all the backend processing of the data.â
In the accounts payable (AP) department, for instance, employees were using triplicate carbon copy forms for purchase orders (POs). âCorrespondence [was] going back and forth in email, or some buildings were even just sending a stack of paper in a tote via courier to the AP department,â said Ralph Reinhofer, IT project manager at Alden Network. AP processors had to manually match invoices to receipts, a cumbersome process that could easily lead to delays.
Another company-wide activity â the onboarding process for new hires â was also full of manual, disconnected tasks. âThere were times IT would find out that when someone started, they didnât get a notebook, or door access, or whatever they needed,â Nichols explained. These manual tasks were not just frustrating; they also detracted from the core mission of providing excellent care.
The Solution: Streamlining with Forms and Workflow
âOne of the main goals with Laserfiche was removing monotonous, repetitive tasks from our employees, so they can spend more time focusing on the patient, or things related to patient care, rather than moving data from one place to another,â said Reinhofer.
Laserfiche Forms and workflow were the key to solving some of Alden Networkâs biggest challenges. Working with Laserfiche solution provider Proven IT, Alden used Laserfiche as a solution to automate AP processes and streamline HR administration. This initiative allowed Alden to digitize and standardize operations across all 50 locations.
Now, instead of relying on couriers or faxes to send information between locations, the organization manages a wide range of tasks digitally. These include:
Purchase order approvals: A digitized PO process replaced the old triplicate carbon copies, allowing locations to upload delivery receipts and confirm orders digitally. This resulted in significant time savings, plus more on-time payments and a better experience for vendors.
Onboarding and offboarding: The new onboarding process ensures that new hires have everything they need on their first day, from temporary passwords to door access. This process was a critical improvement, Nichols noted, not only for new hires, but also promotions and intracompany transfers.
Customer care surveys: The organization’s customer care surveys are now streamlined through Laserfiche, providing a more efficient way to collect patient feedback.
HR and payroll tasks: Rate changes, uniform orders, and other HR-related tasks are all handled through standardized forms, supporting consistency and accuracy. A Laserfiche integration with Aldenâs HRIS pulls milestones like new hire dates and anniversary dates to further streamline these processes.
Expense reimbursement: Requests submitted by employees are automatically routed to the appropriate personnel. These requests are resolved swiftly, with receipts and other documentation archived as needed.
âName any internal business process at Alden, and thereâs probably a Laserfiche form for it,â Reinhofer said. âAnd weâve now given everyone a single way to do everything, so thereâs a lot of consistency now.â
The consistency is not only more efficient, but it also helps with employee retention and recruitment. When a new employee needs to learn a process, âthere are four other buildings doing it the same way and thereâs certainly enough people they can lean on to ask, âHow does this work?ââ Nichols explained. âAnd it’s always the same answer.â
The Results: A Shift in Focus
Since implementing Laserfiche, Alden has seen dramatic improvements in efficiency and productivity. The team has automated over 100 Laserfiche Forms processes with more on the way. Many of these automated processes now run 70% to 80% more efficiently than the manual workflows they replaced. Work that required a full week of manual effort can now be completed in an hour, allowing the IT team to manage workloads that were previously difficult to scale. âWe created a monster, because we let the staff think outside of the box,â Nichols said. âAnything that theyâve asked for, weâve made it into a process. We donât fault them, because we started this â and itâs effective.â
Alden also relies on Laserfiche to support evolving Centers for Medicare & Medicaid Services CMS administrative requirements. The platformâs flexibility allows the team to respond quickly to regulatory changes while maintaining consistent documentation and tracking across the organization.
The most significant benefit has been empowering staff to focus on their core duties. By automating repetitive administrative tasks, the organization has freed up employee time. âWe know people have other things to do,â Nichols said. âThey have better uses of their time than these manual tasks you can deploy a robot to do. Thatâs essentially what Laserfiche has done for us.â
Ultimately, the goal has been to get back to the heart of the organizationâs mission. âWe want our clinicians to do clinical work,â Nichols explained. âThe IT department doesnât know how to take care of your mom or dad or grandparent. We want the clinicians to do that. We donât want processes to take our healthcare providers away from what they do best.â
The ASCII Group continues to evolve with the needs of todayâs MSPs. ASCII Edge 2026 is where collaboration, peer insight, and emerging technology convergeâequipping MSPs to scale smarter and navigate the new era of AI with confidence. This yearâs series delivers real-world strategies, expert guidance, and member-driven dialogue focused on strengthening operations, driving innovation, and growing together as a community.
These in-depth, two-day events feature strategies on selling profitable managed services, turning compliance obligations into recurring revenue, adding automation to improve efficiency, navigating legal issues for MSPs, and much more.
PRINTING United Expo is where you step away from the day-to-day and see whatâs possible. Across commercial, apparel, packaging, wide format, and more, it brings the entire print industry into one place. Youâll find better ways to work, new ideas to explore, and a clearer sense of what you want to do next.