Laserfiche Launches Advanced Enterprise Security to Deliver Multi-Region Disaster Recovery and GovRAMP-Ready Compliance for Highly Regulated Industries

New security suite extends Laserfiche’s proven security controls and adds near real-time data replication for governments, law enforcement and security-conscious enterprises.

LONG BEACH, CALIFORNIA, Aug. 6, 2026 — Laserfiche — the leading SaaS provider of intelligent content management — today announced the launch of Enterprise Security, an advanced suite of security enhancements designed for organizations navigating complex regulatory environments. Enterprise Security addresses GovRAMP and CJIS (Criminal Justice Information Services) security requirements based on the NIST SP 800-53 framework. For organizations handling privileged citizen, legal or corporate data, these built-in controls streamline audit preparation and fortify defenses.

With organizations placing a higher priority on data stewardship and corporate governance, enterprise IT leaders require a security architecture that protects data without slowing down operations. Laserfiche Enterprise Security extends Laserfiche Cloud’s highly resilient infrastructure with multi-region data replication, elevated security controls for privileged accounts, and built-in governance safeguards.

“Maintaining data integrity and compliance has always been at the heart of Laserfiche’s operations,” said Michael Allen, CTO at Laserfiche. “With Enterprise Security, Laserfiche provides enterprise IT users, especially those in government, law enforcement and highly regulated industries, with the complementary controls designed to meet stringent information security standards and protect their most sensitive assets.”

High-Security Controls and Regulatory Alignment

Laserfiche Enterprise Security introduces multi-region disaster recovery, enhanced oversight capabilities, and government-ready cloud security controls tailored for mission-critical data and sensitive operations.

Key capabilities included with Enterprise Security:
  • GovRAMP and CJIS Readiness: Deploys advanced operational controls designed to meet strict government and criminal justice compliance mandates for sensitive data handling.
  • Multi-region disaster recovery: Safeguards critical operations against large-scale infrastructure failures with near real-time, account-level repository data replication and multi-region failover.
  • Advanced audit tracking and analytics: Provides complete visibility into user login activity, system changes, and security events
  • Proactive threat augmentation: Bolsters existing security measures by adding specialized protections against unauthorized AI bot scraping and distributed denial of service (DDoS) attacks.

Laserfiche is listed on the GovRAMP Progressing Product List, with the Enterprise Security suite delivering the architectural controls required to support these standards.

Tailored for Mission-Critical Operations

Enterprise Security is built for organizations that safeguard heavily regulated and sensitive data, where seamless recovery and strict information control are vital to everyday operations:
  • Government agencies and law enforcement: Safely manage records and criminal justice information while strictly adhering to CJIS and GovRAMP standards.
  • Large enterprises and financial services: Protect proprietary corporate data and client financials with strong cryptographic modules and advanced visibility into user activity.

“Highly regulated sectors, from law enforcement to state and local governments, face a unique challenge: They must modernize content management while upholding non-negotiable security standards,” said Andrea Malick, principal advisory director at Info-Tech Research Group. “Solutions that offer built-in compliance frameworks like CJIS and GovRAMP give enterprise IT buyers the confidence to migrate sensitive workloads to the cloud without compromising control.”

Pricing and Availability

Enterprise Security is available starting today as a supplemental SKU for qualifying Laserfiche Cloud deployments.

Laserfiche is also introducing Business+, a new comprehensive subscription tier designed for organizations that want high-level security capabilities built directly into their standard platform deployment.

For More Information

Laserfiche Security and Compliance

Security Certifications and Compliance Frameworks

GovRAMP

Pending

Laserfiche will achieve GovRAMP Verified status, demonstrating its implementation of security controls aligned with GovRAMP and NIST SP 800-53. 

Contact us for more information.

CJIS Ready

Laserfiche Cloud supports CJIS-ready controls that help organizations securely manage Criminal Justice Information (CJI). Enterprise Security provides enhanced auditing, monitoring, encryption and administrative controls that address CJIS and other security requirements.

Contact us for more information.

SOC 2 Type 2 Plus

This report details the controls for Laserfiche Cloud related to the criteria for the security, availability and confidentiality principles set forth in TSP section 100, 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy (AICPA, Trust Services Criteria). To view a copy of this report, please contact us.

ISO/IEC 27001:2022

Laserfiche has obtained the ISO/IEC 27001:2022 certification for its information security management system (ISMS) within the scope defined by its Statement of Applicability, covering its suite of SaaS and self-hosted enterprise content management and process automation applications.

HIPAA

Laserfiche’s SOC Type 2 Plus covers the security requirements set forth in the Health Insurance Portability and Accountability Act of 1996 (HIPAA), provided within Title 45 Code of Federal Regulations Sections 164.308 – 312 (45 CFR Sections 164.308-312) (the Security Requirements).

Web Content Accessibility Guidelines 2.2 AA

Laserfiche has published VPATs and ACRs available for all Laserfiche Cloud and self-hosted products. Alignment to the WCAG 2.2 Level AA standard is the basis of our approach to compliance with Section 508 and EN 301 549 requirements. See accessibility details…

DoD 5015.2

DoD 5015.2 details the Department of Defense’s baseline requirements for Records Management Applications (RMA), that facilitate adequate and appropriate basis for addressing the basic challenges of managing records in the automated environment that increasingly characterizes the creation and use of records. Laserfiche Cloud records management controls are based on our self-hosted Department of Defense 5015.2 version 3-certified electronic records management capabilities.

SEC Rule 17a-4

Laserfiche features support non-alterable record archival requirements such as WORM (write once, read many) used to address SEC Rule 17a-4 for broker dealers. Beyond financial services, Laserfiche’s controls can also be applied to support records management practices for electronically stored information (ESI) requiring prevention of any unauthorized alternations or deletions of digital records.

HECVAT

Laserfiche has completed the Higher Education Community Vendor Assessment Toolkit (HECVAT) questionnaire. Contact us for more information.

NIST 800-53

Laserfiche security controls are aligned with NIST 800-53.

AI Security and Governance

Laserfiche AI services are provided using AI models and services from OpenAI. For information on AI services in regions where OpenAI is not available, please contact us.

Laserfiche AI
Our AI FAQs
Laserfiche AI security visualization

Regional data privacy requirements

Laserfiche AI addresses privacy and security standards of our current data center locations supporting GDPR (EU), CCPA/CPRA (USA), and PIPEDA (Canada) for low to moderate risk data. Our AI features are architected to support regional and industry-specific compliance needs, providing the same level of data sovereignty and protection you expect from Laserfiche Cloud.

For more information related to Laserfiche AI and data privacy, refer to the following:

You own your data
  • You retain ownership of inputs you provide. While Laserfiche owns the intellectual property rights to the outputs generated by our AI tools, we grant you a broad license to use those outputs for any of your organization’s internal business needs.
  • Laserfiche does not use your organization’s data to train any internal or external AI models. Your data is used only as needed to deliver services and to meet our legal and regulatory obligations.

Laserfiche AI user prompts

Laserfiche designs its AI features with safety and security as core principles. We manage prompting risks through two layers of protection:
  • Prompt-less by design: Many Laserfiche AI features, such as Document Summarization, do not use user prompts, reducing risks associated with accidental or malicious prompting.
  • Enterprise-grade safeguards: For features that do accept user input, like Smart Fields and Smart Chat, we employ industry-standard protections against prompt injection. These include input filtering, validation, and other controls that keep prompts and responses within defined, limited boundaries.

Content confidentiality

Your confidential content is not accessible to other customers or unauthorized third parties. Laserfiche distinguishes between two types of data:
  • Your confidential content: Laserfiche does not sell your data. Documents, files, and inputs you upload to Laserfiche are your own content.
  • Usage and system data: Like most cloud providers, Laserfiche collects limited, high-level usage data (such as feature adoption and system performance metrics) to operate and improve the platform. This data is de-identified and does not include the contents of your documents or AI prompts.

Data retention
  • OpenAI may store the prompts you enter or the responses you receive temporarily for up to 30 days to provide services and identify abuse. After 30 days, API inputs and outputs are removed from their systems, unless they are legally required to retain them. For more details, please refer to the OpenAI Services Agreement.

Security Controls

Below are some of the security controls Laserfiche software includes. If you have questions about a particular security solution or control, please contact us directly.

Single sign-on

Laserfiche Cloud supports single sign-on with Active Directory Federation Services (AD FS) and SAML authentication with identity providers such as Okta and Azure Active Directory.

Repository audit log

The Laserfiche Cloud repository audit log includes details of user actions, including viewing, modifying, creating and deleting documents, and similar operations on metadata and other repository objects.

Fine-grained access control

Administrators can use access rights to limit and control access to individual documents and objects. For example, security tags restrict access to documents on a document-by-document basis.

Intrusion detection

Laserfiche Cloud utilizes host-based intrusion detection systems to reduce the risk of data theft by individuals or organizations attempting to gain unauthorized access.

Access rights

Administrators can configure access rights and privileges to limit actions that users can perform across the repository based upon role assignments or group memberships.

AI governance

Laserfiche AI data is encrypted at rest (AES-256) and in transit (TLS 1.2+). Laserfiche does not utilize any of your data to train internal or external AI models.

Password policies

Laserfiche Cloud supports industry-standard password controls, such as password minimum length, complexity and history.

Penetration testing

Laserfiche engages third-party vendors to conduct external penetration testing of the Laserfiche Cloud system.

Vulnerability scanning

Laserfiche performs a vulnerability scan of backend servers that run in the Laserfiche Cloud hosting environment.

Firewalls

Laserfiche Cloud’s firewall configuration settings are regularly reviewed based on industry standards.

Repository application auditing

Laserfiche Cloud supports auditing of both access and modification of objects in repositories.

Enterprise Security

Securely modernize your business-critical work with Laserfiche Cloud.

Laserfiche Enterprise Security enhances security, resilience and governance capabilities for organizations managing sensitive, highly regulated data in Laserfiche Cloud.1 It provides FIPS 140-3 encryption2, privileged-user activity visibility, configurable session controls and multi-region disaster recovery with near real-time account-level replication. 

Available to Laserfiche Cloud Business customers as an optional Add On, included with Business+ and offered for eligible Municipal Cloud packages.
Contact Us

Features 
  • Multi-region disaster recovery with near real-time repository replication  
  • Four-hour repository snapshots 
  • Enhanced user and privileged account monitoring  
  • Configurable security policies including inactivity session time out controls  
  • GovRAMP Verified and CJIS-ready 
Laserfiche Cloud Security Features Professional Tier Business TierBusiness+ Tier
AES‑256 Data Encryption  ✓ ✓ ✓ 
Role‑Based Access Controls ✓ ✓ ✓ 
Single Sign‑On (SSO/SAML/AD FS) ✓ ✓ ✓ 
DDoS Protection ✓ ✓ ✓ 
Unauthorized AI Bot Prevention ✓ ✓ ✓ 
Administrative and Repository Auditing✓ ✓ ✓ 
Configurable Inactivity Timeouts✓✓ ✓ 
Advanced Audit Trail   Add On✓ ✓ 
FIPS 140-3 Cryptographic Modules  ✓ 3✓ 
Four-Hour Repository Snapshots  ✓ ✓ 
Multi-Region Disaster Recovery Support  ✓ ✓ 
GovRAMP (Pending)  ✓ ✓ 
  1. To ensure alignment with regulatory and operational needs, organizations should evaluate their use cases against the acceptable use restrictions in our Cloud Subscription Agreement before making a purchase.  ↩︎
  2. Note: Enhanced encryption uses FIPS-compliant cryptographic algorithms (FIPS 140-3) that utilize up-to-date crypto routines approved by NIST and compiled to help prevent sophisticated attacks on underlying cryptographic algorithms. Enhanced encryption is available for the Laserfiche Cloud U.S. Region.  ↩︎
  3. Items with an orange check-mark (“FIPS 140-3 Cryptographic Modules” and below) are available with the Enterprise Security Add On for Laserfiche Cloud Business customers, included with Business+ and offered for eligible Municipal Cloud packages. ↩︎
“Laserfiche’s compliance tools in the cloud, and knowing that Laserfiche takes security very seriously have been important factors in our decision making.”rn—Andrew McElrath, strategic project manager at Mille Lacs Corporate Ventures
Featured Success Story

Mille Lacs Corporate Ventures Transitions Corporate Operations to Laserfiche Cloud

Mille Lacs Corporate Ventures (MLCV), created by the tribal government of the Mille Lacs Band of Ojibwe, manages the business affairs of the Band.

Read the Case Study

Laserfiche is committed to privacy.

Our commitment

At Laserfiche, we have embraced a culture of privacy, which includes embedding privacy-by-design in our engineering efforts, and have implemented controls and policies throughout our organization. Laserfiche is a B2B company based in California. The State of California has passed strict, broad privacy regulation through the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) while the General Data Protection Regulation (GDPR) leads the European Union’s privacy efforts. Many other countries, states and territories have implemented privacy regulations as well. Laserfiche endeavors to continually adapt and adhere to ever-evolving regulations that apply to its business.

Operational privacy

Operationally, we strive to keep our stakeholders’ data secure and retain only information we collect from you where we have an ongoing legitimate business need to do so, like providing you with a service you have requested, or to comply with applicable legal, tax or accounting requirements.

Privacy training

At Laserfiche, all employees are required to complete annual privacy training which covers applicable privacy regulations and data handling best practices.

Laserfiche documentation

In addition to what we communicate in our Privacy Notice, our Cloud Subscription Agreement with accompanying Data Processing Addendum specific to the Laserfiche Cloud platform addresses data privacy regulations including GDPR, CCPA and PIPEDA.

International transfers

For personal data transferred from the United Kingdom, the European Union and Switzerland, we provide appropriate safeguards per the Data Privacy Framework. To learn more, visit the “International Transfers” section of the Privacy Notice.

Information we collect

We collect information that you provide directly to us only for legitimate business purposes. For example, when you manage your user profile, participate in interactive features (such as the Contact Us page), request newsletters or other marketing communications, request customer support, enter login information, or otherwise communicate with us. To learn more visit the “Information We Collect” section of the Privacy Notice.

You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing emails we send you. To learn more, visit the “How Laserfiche Uses and Shares the Information We Collect” section of the Privacy Notice.

To read our complete Privacy Notice, visit our Privacy Notice page.

Contact Us for Your ECM Needs

Whether you have product questions, support needs or want to partner with us, we’re here to help you on your digital transformation journey. Fill out the form and a Laserfiche team member will be in touch as soon as possible.

Focus On Results, ​Not Busywork

Laserfiche AI Agents put your content to work, so you can get back to what you do best. 

Get a Demo

Reclaim your time. Fast-track tedious tasks. 

Transform ideas into autonomous execution and get more done, faster. With simple natural language prompts, AI Agents streamline administrative work and help teams improve efficiency, consistency and operational speed.

Laserfiche AI agent workflow example diagram

Turn chat into action.

Type your request in Smart Chat, and Agents will deliver a ready-to-review action plan. You approve the work; they handle the execution.

Use Agents to automatically carry out a wide range of bulk actions:

  • Bring order to scattered content
  • Move, rename and organize large volumes of files
  • Apply tags and update content templates with ease
  • Group relevant documents into personal Collections
  • Break down complex projects into clear actionable steps

 

Permission-aware intelligence

Agents respect your enterprise governance policies acting with the same permissions as their users.

Context-aware decisions

Agents understand your request and use context to handle judgement-heavy tasks.

Transparent audit trails

Agent actions are fully tracked and audited, providing a clear record of all activities performed.

Complete human oversight

Review, refine and approve an Agent’s actions before a single change is made.

Expand team capacity across every department

Laserfiche AI Agents boost productivity for the entire team, tackling complex tasks across all levels of the organization. 

Our Difference

Why Laserfiche?

All your data, connected

Bring your files, integrations and daily workflows into a single source of truth, giving your teams the information they need instantly. 

Enterprise-grade security

Safeguard your data with encryption, precise user permissions and certified cloud infrastructure that helps keep your organization compliant and secure at every level.  

Built to evolve with you

Laserfiche constantly evolves with your business, seamlessly integrating the latest advancements—like AI Agents—so your organization stays ahead without disrupting your core operations. 

From analysts and customers

Gartner® named Laserfiche a Leader in the 2026 Gartner Magic Quadrant™ for Document Management.

Learn More

Laserfiche is a Customers’ Choice in the 2025 Gartner® Peer Insights™ ‘Voice of the Customer’: Document Management report.

Learn More
Emotional Footprint 2025 Award

Laserfiche named 2025 Emotional Footprint Champion by Info-Tech Research Group in the Enterprise Content Management – Enterprise category.

Learn More

Highly rated by customers, with a 4.7 average star rating and #1 in the Document Management category on G2.

Read the Reviews

Named a Leader in the Nucleus Research CSC Technology Value Matrix™.

Learn More
Executive Guide to Change Management: Leveraging Agentic AI and Process Automation to Drive Digital Transformation

Featured Resource

Get the Agentic AI Playbook

Learn how forward-thinking leaders are deploying AI Agents across their organizations to securely scale daily operations and drive lasting digital transformation.

Download

Additional Resources

AI Agents in Action: Real-World Examples in Laserfiche

In this session, we’ll walk through real-world automation scenarios that show you how AI Agents operate inside Laserfiche to reduce manual effort…

Webinars Learn More
Laserfiche AI Agents Overview

Join us for a first look at Laserfiche AI Agents, your virtual assistants that help you complete time-consuming tasks. Use Smart Chat in Agent mode…

Webinars Learn More
Governing with AI: Valuable Insights from the City of Acworth

Join Info-Tech Research Group and the City of Acworth, GA to see practical use cases of AI in city government. Listen live to discover how to…

Webinars Learn More
Laserfiche Named a Leader in the 2026 Gartner® Magic Quadrant™ for Document Management

Read the latest Gartner assessment of the document management market, with insights into Laserfiche’s recognition in the report.

Resource Learn More
Navigating the Agentic Era: Laserfiche 2026 Leadership Predictions

Navigating the agentic era, Laserfiche leadership predicts the new standard of content management: moving past experimental chatbots toward…

Blog Learn More
Empower 2026 Key Takeaways: Intelligent Document Processing with Laserfiche AI Agents 

The most useful AI experiences are the ones that fit naturally into the systems and workflows employees already use every day.

Blog Learn More

Contact Us for Your ECM Needs

Whether you have product questions, support needs or want to partner with us, we’re here to help you on your digital transformation journey. Fill out the form and a Laserfiche team member will be in touch as soon as possible.

Info-Tech Live 2026 Toronto

Join over 400 IT professionals to explore how exponential technologies are transforming organizations.

2026 ASCII EDGE The MSP Conference

The ASCII Group continues to evolve with the needs of today’s MSPs. ASCII Edge 2026 is where collaboration, peer insight, and emerging technology converge—equipping MSPs to scale smarter and navigate the new era of AI with confidence. This year’s series delivers real-world strategies, expert guidance, and member-driven dialogue focused on strengthening operations, driving innovation, and growing together as a community.

2026 ChannelPro LIVE: Parsippany

These in-depth, two-day events feature strategies on selling profitable managed services, turning compliance obligations into recurring revenue, adding automation to improve efficiency, navigating legal issues for MSPs, and much more.

Printing United Expo

PRINTING United Expo is where you step away from the day-to-day and see what’s possible. Across commercial, apparel, packaging, wide format, and more, it brings the entire print industry into one place. You’ll find better ways to work, new ideas to explore, and a clearer sense of what you want to do next.

America Digital AI, Tech & Business Congress

America Digital Mexico Congress Attendees: VPs and experts from global and local technology companies also attend and will be presenting their innovations and technological solutions, and sharing implementation experiences, challenges and opportunities. The Digital America Congress is the reference event in technology, innovation and business in the region, designed for professionals, business leaders and entrepreneurs who seek to stay at the forefront in a constantly evolving world. Attending the América Digital Congress is not only an investment in knowledge, but also an opportunity to be part of the change that is shaping the future of business in Latin America and the world. Don’t be left behind, be part of this transformative experience! Register now and secure your place at the most important event in the region.

Laserfiche Launches on AWS Marketplace, Bringing Intelligent Content Management to the Enterprise

Organizations can now seamlessly procure Laserfiche document management to support and scale information governance and workflow automation.

LONG BEACH, CALIFORNIA, June 2, 2026 — Laserfiche — the leading SaaS provider of intelligent content management — has partnered with AWS to make Laserfiche available through AWS Marketplace. This collaboration enables AWS customers to seamlessly procure Laserfiche’s document management platform to manage content, automate workflows and implement agentic AI capabilities.

“We’re excited about this evolution of our long-standing partnership with AWS,” said Thomas Phelps, Laserfiche senior vice president of corporate strategy and CIO. “AWS Marketplace provides a near-frictionless experience for Laserfiche direct customers who want to accept negotiated private offers, manage billing and payment history, and apply eligible purchases toward their AWS Enterprise Discount Program (EDP) commitments — all through their centralized AWS account.”

Laserfiche provides document lifecycle management, information governance and workflow automation tools on a platform that earned multiple Champion awards from Info-Tech Research Group. Laserfiche AI features include automatic metadata extraction, document summarization, chat and agentic capabilities.

“Within two weeks of requesting the ability to procure Laserfiche Cloud through AWS Marketplace, Laserfiche confirmed its availability on the marketplace,” said Bianca Lochner, Ph.D., City of Scottsdale CIO. “We appreciate Laserfiche’s swift execution and anticipation of our needs as our business partner.”

“We are thrilled to welcome Laserfiche to AWS Marketplace,” said Carol Potts, AWS General Manager of US ISV Sales. “Organizations in highly regulated industries can now adopt Laserfiche’s intelligent content management and agentic AI capabilities to quickly automate how they organize, govern, and act on critical information at scale. Enabling access to these innovations is how we help customers transform the way they work.”

To learn more, explore AWS Marketplace.

About Laserfiche 
Laserfiche is a leading enterprise platform for document management and content-centric workflow automation. Through scalable workflows, forms, no-code templates and AI-enabled capture, the Laserfiche® platform accelerates how business gets done.  

Laserfiche pioneered the paperless office with enterprise content management. Today, Laserfiche’s cloud-first development approach incorporates innovations in machine learning and AI to enable organizations globally to transform into digital businesses. Customers in every industry — including government, education, financial services, healthcare and manufacturing — use Laserfiche to boost productivity, scale their business and deliver digital-first customer experiences.  

Laserfiche employees are committed to the company’s vision of empowering customers and inspiring people to reimagine how technology can transform lives.  

Best Practices in Process Automation