What’s New in September: AI-Assisted Form Fill and Expanded Agent Capabilities

This month, we’re introducing new features and product enhancements that help you complete forms faster, do more with Laserfiche AI Agents, and get more visibility into AI usage. Explore these updates and more from our latest Cloud release.

AI-Assisted Form Fill

Filling out a form often means uploading a document and then reentering information from that document into the form. AI-assisted form fill uses Laserfiche AI to automatically populate relevant fields with information from the uploaded document, making form completion faster and easier.

How to Set It Up: When building a form, designers can enable this feature with a single setting on a file upload field.

Just select the file upload field of your choice and check the box next to “Extract and fill fields with AI” to tell Laserfiche AI which documents to analyze. Only files uploaded to a field with this setting enabled will trigger AI population.
Shows the new "Extract and fill fields with AI" setting in the Laserfiche form designer.

With this setting enabled, Laserfiche AI handles both data extraction and field matching, so designers don’t need to configure any other form fields or define and maintain additional extraction rules or field-mapping logic.

How It Works: When someone uploads a file to an enabled field, Laserfiche AI reads the document, identifies the relevant data, and determines on its own which form fields the information belongs in. It then populates those fields automatically.

AI-assisted form fill never clears a field or overwrites information the submitter has already entered. If Laserfiche AI cannot find or confidently identify the information a field requires, that field remains blank.

The person completing the form can review the populated information, make corrections if needed, and complete any remaining fields before submitting the form.

AI-assisted form fill consumes AI units. Learn more about how usage is measured here.

By letting uploaded documents do more of the work, organizations can create a smoother submission experience and collect structured form data and supporting documents in one connected Laserfiche process.

Do More with Directed Agents

Laserfiche AI Agents can now take on more document management work with less back-and-forth.

Automate Complex Tasks with Fewer Interruptions: Complete complex tasks more efficiently. Now, for multi-step tasks, Agents will present their full plan upfront, giving you the option to review and confirm the proposed actions in one go instead of confirming each step one by one.

Create and Delete Collections: Agents can now create new personal Collections or delete existing ones on your behalf. Ask your Laserfiche AI Agent to find related documents, create and name a Collection, and add the documents to your new Collection in a single operation.

More Visibility into AI Usage

Admins can now get a clearer picture of how their account is using Laserfiche AI. The Plan page now includes a breakdown of AI units consumed by each feature, making it easier to understand which features are driving usage.

By providing more granular visibility into Laserfiche AI usage, this update helps admins more easily monitor where AI units are being used, spot inefficiencies that may be inflating usage, and manage AI resources more effectively.
Breakdown of Laserfiche AI units consumed by feature.
Usage by service information is available for operations performed beginning on or after July 24, 2026.

Updated Software Development Kit

A new version of the Laserfiche Software Development Kit (SDK) is now available, providing a more current and secure foundation for building custom applications that interact with Laserfiche. The latest version, SDK 12, is now distributed through NuGet, making it easier for developers to install and deploy the components they need. SDK 12 also delivers upgraded versions of the Repository Access library and other supporting integration libraries, along with modernized interfaces and enhanced security. Additionally, documentation is newly available in the Laserfiche Developer Center.

Organizations using earlier SDK versions to connect to Laserfiche Cloud should begin planning to migrate to this latest SDK version, or to the Laserfiche API, as connections through earlier SDK versions will be discontinued in the future.

Additional Updates  

Configure Audit Data Retention: You can now configure and enforce how long audit data is retained in Audit Trail for your account. This update gives administrators the control they need to meet compliance requirements and manage data growth.

Web Request Allotment Visibility: You can now view the number of web requests per day available for your account on the Plan page in Account Administration. Accounts that need an increased allotment have the option to purchase additional capacity as an add-on.

New Laserfiche AI Innovations! – December

New Laserfiche AI Innovations! – November

New Laserfiche AI Innovations! – October

Why Government Needs Content Intelligence in the Age of Agentic AI

Person on video call on laptop with blue background

Government agencies have no shortage of information. Years of digital transformation have created vast repositories of content that employees rely on every day. The challenge now is turning that information into insight that helps employees make better decisions and serve their communities more effectively.

Across the public sector, valuable knowledge remains buried and scattered inside millions of documents. Expert estimates suggest more than 85% of data is “unstructured”, living within emails, physical files and chats. Employees know the answers they need are there but finding them often requires painstakingly digging through records one document at a time. Even agencies with mature content management practices continue to face the same issue. They have information but need a faster way to turn it into action.

Agentic AI has the potential to make that happen.

Initially, AI tools helped employees find information or summarize documents. Agentic AI goes much further. It can understand what information means, recommend the next step and carry out approved work on a user’s behalf. Instead of spending hours reviewing documents or completing routine administrative tasks, employees can focus on serving constituents.

From Managing Content to Unlocking Intelligence

Unlocking the full potential of agentic AI in government begins with trusted content. Too often, valuable knowledge remains locked inside documents that were written for people, not systems. Before AI can act on that information, it first has to understand what the documents contain.

Modern content management systems organize information in ways AI can understand. That makes content intelligence possible by giving AI the structure and context it needs to surface insights that employees can use to make faster, better-informed choices.

The opportunities span nearly every government department. For example, agencies can use Agents to:
  • Analyze Freedom of Information (FOIA) Act requests and generate reports in minutes
  • Locate documents containing personally identifiable information (PII) for review
  • Identify employee certifications that are about to expire
  • Monitor vendor contract expiration and renewal

The work varies, but the benefit is consistent. Employees spend less time searching for information and more time using it.

Success in every scenario depends on the same foundation. AI can only produce meaningful insights when it works with well-managed content. That foundation also reinforces the trust that government agencies work hard to earn every day.

Trust Begins with Governance

Maintaining trust requires clear governance. Government agencies are expected to protect sensitive information. They’re also accountable for every decision they make. As AI becomes part of daily work, those expectations extend to the technology itself.

AI Agents should work within the same permissions as the employee it supports, accessing only the information that employee is authorized to see. Every action is recorded, creating a clear audit trail, while employees remain responsible for making and approving important decisions.

These guardrails make AI easier to trust because they make its role easier to understand. People remain at the center of decision-making while AI handles repetitive administrative work such as analyzing documents, identifying records that require attention and monitoring routine deadlines. Human judgment stays in control, and AI helps employees work more efficiently.

With clear governance in place, AI becomes another trusted workplace tool instead of a black box. Employees understand how AI fits within established processes and policies, and where human oversight remains essential. That confidence makes adoption easier across the organization.

Making AI Accessible Across the Workforce

With clear governance in place, employees are far more likely to make AI part of their daily work. Natural language helps accelerate adoption by removing much of the technical complexity that once limited automation. Until recently, employees needed to build workflows or configure complex rules before tasks could be autonomously executed. Today, they can simply describe what they need.

People can ask questions about documents, request summaries or have AI Agents organize information before confirming the requested action. The interaction feels conversational, while the underlying governance remains unchanged.

As more employees begin using AI in their daily work, routine tasks require less of their attention. That leaves more time for judgment, problem-solving and public service.

Helping Governments Deliver Better Service with Agentic AI

Agentic AI helps people make better use of the knowledge already at their fingertips. Agencies that realize that value will build on the investments they’ve already made in content management and governance. Together, they provide the trusted foundation that intelligent systems depend on to operate responsibly and earn the confidence of employees and citizens alike.

Government has always depended on informed people exercising sound judgment. Agentic AI helps employees utilize their expertise more efficiently and put the vital information to work more quickly. When built on trusted content and clear governance, it becomes another tool that helps government teams serve their communities more effectively.

Watch our webinar to learn how AI Agents can help elevate your public service and empower your teams.
Watch the webinar

What’s New in August: Connect Dynamic Fields with External Data, Expanded Audit Trail and More

Dynamic Fields Now Support External Lookups

Dynamic fields are a useful tool for making your repository metadata cleaner, more consistent, and easier to manage, strengthening data integrity across Laserfiche. This month, we’ve introduced new updates that expand the capabilities of dynamic fields to make them even more powerful.

Previously, dynamic fields were limited to data sourced from static lookup tables. Now, you can configure dynamic fields using data query and web request rules, allowing you to pull live values from external applications directly into your metadata in real-time.

This update allows dynamic fields to display field value options that are based on live business data, reflecting the most current information instantly, no matter where it is stored.

In addition, dynamic field configuration is now available within the template designer, providing a more intuitive place to create and manage these connections.

Together, these updates offer new ways for teams to keep their repository metadata accurate, current and synchronized across their line-of-business systems.

Improve AI Data Capture with Dynamic Fields

Smart Fields can now use list options supplied by dynamic fields to guide metadata extraction. By checking extracted values against the currently available options, Smart Fields can produce more consistent metadata that aligns with an organization’s approved data. Organizations can continue managing these options in their existing source, without duplicating this information in each Smart Fields prompt.

Expanded Audit Trail Events

Laserfiche Cloud Audit Trail is expanding to provide broader visibility into security-sensitive and administrative activity across your cloud environment. Administrators can now better review privileged actions, identity-related changes and account administration activity from a centralized place.

This expansion includes team and project activities along with account-level security and user events. This allows organizations to extend audit visibility beyond the repository into process automation and account-level operations. With a clearer record of what happened and when, it’s now easier to monitor critical account activity and troubleshoot issues for faster investigation and clearer oversight.

 

Other updates:  

Laserfiche Forms Mobile App Update: You can now sign into the Forms mobile app on your iOS or Android device using fingerprint or facial recognition. Biometric authentication now supports Single Sign-On (SSO) for Laserfiche Cloud, including SAML and AD FS authentication. This update also supports a deep linking feature that allows you to open the app directly to a specific form, making it easier to access the right form faster.

Repository API update: The Repository API now supports new capabilities for interacting with documents and metadata, including the ability to manage access rights, document annotations, records management and users’ Recent Documents, Starred documents and personal Collections. See the full changelog for more details.

Idle Session Termination: Administrators can now enable idle session timeout to automatically sign users out after a selected period of inactivity. This gives organizations greater control over session security and helps protect information when a signed-in device is left unattended.

New Toolkit for Developers: Explore the new LF Form Builder, which includes a toolkit of resources and examples to help you modernize how you build, test, and maintain Laserfiche Forms customizations. Learn more about the resource here.

Laserfiche Launches Advanced Enterprise Security to Deliver Multi-Region Disaster Recovery and GovRAMP-Ready Compliance for Highly Regulated Industries

New security suite extends Laserfiche’s proven security controls and adds near real-time data replication for governments, law enforcement and security-conscious enterprises.

LONG BEACH, CALIFORNIA, Aug. 6, 2026 — Laserfiche — the leading SaaS provider of intelligent content management — today announced the launch of Enterprise Security, an advanced suite of security enhancements designed for organizations navigating complex regulatory environments. Enterprise Security addresses GovRAMP and CJIS (Criminal Justice Information Services) security requirements based on the NIST SP 800-53 framework. For organizations handling privileged citizen, legal or corporate data, these built-in controls streamline audit preparation and fortify defenses.

With organizations placing a higher priority on data stewardship and corporate governance, enterprise IT leaders require a security architecture that protects data without slowing down operations. Laserfiche Enterprise Security extends Laserfiche Cloud’s highly resilient infrastructure with multi-region data replication, elevated security controls for privileged accounts, and built-in governance safeguards.

“Maintaining data integrity and compliance has always been at the heart of Laserfiche’s operations,” said Michael Allen, CTO at Laserfiche. “With Enterprise Security, Laserfiche provides enterprise IT users, especially those in government, law enforcement and highly regulated industries, with the complementary controls designed to meet stringent information security standards and protect their most sensitive assets.”

High-Security Controls and Regulatory Alignment

Laserfiche Enterprise Security introduces multi-region disaster recovery, enhanced oversight capabilities, and government-ready cloud security controls tailored for mission-critical data and sensitive operations.

Key capabilities included with Enterprise Security:
  • GovRAMP and CJIS Readiness: Deploys advanced operational controls designed to meet strict government and criminal justice compliance mandates for sensitive data handling.
  • Multi-region disaster recovery: Safeguards critical operations against large-scale infrastructure failures with near real-time, account-level repository data replication and multi-region failover.
  • Advanced audit tracking and analytics: Provides complete visibility into user login activity, system changes, and security events
  • Proactive threat augmentation: Bolsters existing security measures by adding specialized protections against unauthorized AI bot scraping and distributed denial of service (DDoS) attacks.

Laserfiche is listed on the GovRAMP Progressing Product List, with the Enterprise Security suite delivering the architectural controls required to support these standards.

Tailored for Mission-Critical Operations

Enterprise Security is built for organizations that safeguard heavily regulated and sensitive data, where seamless recovery and strict information control are vital to everyday operations:
  • Government agencies and law enforcement: Safely manage records and criminal justice information while strictly adhering to CJIS and GovRAMP standards.
  • Large enterprises and financial services: Protect proprietary corporate data and client financials with strong cryptographic modules and advanced visibility into user activity.

“Highly regulated sectors, from law enforcement to state and local governments, face a unique challenge: They must modernize content management while upholding non-negotiable security standards,” said Andrea Malick, principal advisory director at Info-Tech Research Group. “Solutions that offer built-in compliance frameworks like CJIS and GovRAMP give enterprise IT buyers the confidence to migrate sensitive workloads to the cloud without compromising control.”

Pricing and Availability

Enterprise Security is available starting today as a supplemental SKU for qualifying Laserfiche Cloud deployments.

Laserfiche is also introducing Business+, a new comprehensive subscription tier designed for organizations that want high-level security capabilities built directly into their standard platform deployment.

For More Information

Introducing: Enterprise Security Add On and New Business+ Tier

Enterprise Security

We’re excited to introduce Laserfiche Enterprise Security, a suite of advanced compliance and data protection tools built directly into Laserfiche Cloud as an add-on for qualifying customers. The new add-on is designed to help organizations reduce risk, improve operational resilience and confidently manage their most essential information.

Laserfiche Cloud has always been built on a secure foundation, and Enterprise Security extends that for organizations who may have elevated security and compliance requirements.

For agencies handling Criminal Justice Information and state, local and tribal governments, along with other regulated public entities, Enterprise Security removes a major barrier to cloud adoption with a NIST 800-53–backed, CJIS-ready, GovRAMP-aligned environment.

Key Features:

Enhanced Disaster Recovery
Enterprise Security introduces cross-regional disaster recovery with four-hour snapshots, helping organizations recover faster from regional outages while maintaining data residency requirements. This reduces downtime, improves business continuity and gives IT teams greater confidence that critical services can keep running when they’re needed most.

CJIS and GovRAMP  
Enterprise Security includes CJIS-ready operational controls and an environment built to GovRAMP standards. These frameworks align with U.S. NIST standards and are designed to help agencies modernize operations with Laserfiche Cloud while supporting key security controls that may be required for compliance. 

See all that’s included with Enterprise Security on our Trust & Compliance Page, and register for our upcoming webinar to learn more.
VISIT TRUST & COMPLIANCE
REGISTER FOR WEBINAR

NEW Business+ Tier

We have added a new enterprise tier that includes Enterprise Security along with expanded storage, additional API capacity, increased AI usage, more workflow resources and a dedicated sandbox environment for testing and validating changes before deployment. It’s built for organizations that need enterprise-scale performance, flexibility and security as they continue to grow. 

Business+ includes Enterprise Security and:
  • Expanded cloud storage
  • Increased API capacity
  • More AI usage
  • Additional workflow resources
  • A dedicated sandbox environment for testing and validating changes before deployment

Learn more about what’s included on our pricing page.
VISIT PRICING

Laserfiche Security and Compliance

Security Certifications and Compliance Frameworks

GovRAMP

Pending

Laserfiche will achieve GovRAMP Verified status, demonstrating its implementation of security controls aligned with GovRAMP and NIST SP 800-53. 

Contact us for more information.

CJIS Ready

Laserfiche Cloud supports CJIS-ready controls that help organizations securely manage Criminal Justice Information (CJI). Enterprise Security provides enhanced auditing, monitoring, encryption and administrative controls that address CJIS and other security requirements.

Contact us for more information.

SOC 2 Type 2 Plus

This report details the controls for Laserfiche Cloud related to the criteria for the security, availability and confidentiality principles set forth in TSP section 100, 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy (AICPA, Trust Services Criteria). To view a copy of this report, please contact us.

ISO/IEC 27001:2022

Laserfiche has obtained the ISO/IEC 27001:2022 certification for its information security management system (ISMS) within the scope defined by its Statement of Applicability, covering its suite of SaaS and self-hosted enterprise content management and process automation applications.

HIPAA

Laserfiche’s SOC Type 2 Plus covers the security requirements set forth in the Health Insurance Portability and Accountability Act of 1996 (HIPAA), provided within Title 45 Code of Federal Regulations Sections 164.308 – 312 (45 CFR Sections 164.308-312) (the Security Requirements).

Web Content Accessibility Guidelines 2.2 AA

Laserfiche has published VPATs and ACRs available for all Laserfiche Cloud and self-hosted products. Alignment to the WCAG 2.2 Level AA standard is the basis of our approach to compliance with Section 508 and EN 301 549 requirements. See accessibility details…

DoD 5015.2

DoD 5015.2 details the Department of Defense’s baseline requirements for Records Management Applications (RMA), that facilitate adequate and appropriate basis for addressing the basic challenges of managing records in the automated environment that increasingly characterizes the creation and use of records. Laserfiche Cloud records management controls are based on our self-hosted Department of Defense 5015.2 version 3-certified electronic records management capabilities.

SEC Rule 17a-4

Laserfiche features support non-alterable record archival requirements such as WORM (write once, read many) used to address SEC Rule 17a-4 for broker dealers. Beyond financial services, Laserfiche’s controls can also be applied to support records management practices for electronically stored information (ESI) requiring prevention of any unauthorized alternations or deletions of digital records.

HECVAT

Laserfiche has completed the Higher Education Community Vendor Assessment Toolkit (HECVAT) questionnaire. Contact us for more information.

NIST 800-53

Laserfiche security controls are aligned with NIST 800-53.

AI Security and Governance

Laserfiche AI services are provided using AI models and services from OpenAI. For information on AI services in regions where OpenAI is not available, please contact us.

Laserfiche AI
Our AI FAQs
Laserfiche AI security visualization

Regional data privacy requirements

Laserfiche AI addresses privacy and security standards of our current data center locations supporting GDPR (EU), CCPA/CPRA (USA), and PIPEDA (Canada) for low to moderate risk data. Our AI features are architected to support regional and industry-specific compliance needs, providing the same level of data sovereignty and protection you expect from Laserfiche Cloud.

For more information related to Laserfiche AI and data privacy, refer to the following:

You own your data
  • You retain ownership of inputs you provide. While Laserfiche owns the intellectual property rights to the outputs generated by our AI tools, we grant you a broad license to use those outputs for any of your organization’s internal business needs.
  • Laserfiche does not use your organization’s data to train any internal or external AI models. Your data is used only as needed to deliver services and to meet our legal and regulatory obligations.

Laserfiche AI user prompts

Laserfiche designs its AI features with safety and security as core principles. We manage prompting risks through two layers of protection:
  • Prompt-less by design: Many Laserfiche AI features, such as Document Summarization, do not use user prompts, reducing risks associated with accidental or malicious prompting.
  • Enterprise-grade safeguards: For features that do accept user input, like Smart Fields and Smart Chat, we employ industry-standard protections against prompt injection. These include input filtering, validation, and other controls that keep prompts and responses within defined, limited boundaries.

Content confidentiality

Your confidential content is not accessible to other customers or unauthorized third parties. Laserfiche distinguishes between two types of data:
  • Your confidential content: Laserfiche does not sell your data. Documents, files, and inputs you upload to Laserfiche are your own content.
  • Usage and system data: Like most cloud providers, Laserfiche collects limited, high-level usage data (such as feature adoption and system performance metrics) to operate and improve the platform. This data is de-identified and does not include the contents of your documents or AI prompts.

Data retention
  • OpenAI may store the prompts you enter or the responses you receive temporarily for up to 30 days to provide services and identify abuse. After 30 days, API inputs and outputs are removed from their systems, unless they are legally required to retain them. For more details, please refer to the OpenAI Services Agreement.

Security Controls

Below are some of the security controls Laserfiche software includes. If you have questions about a particular security solution or control, please contact us directly.

Single sign-on

Laserfiche Cloud supports single sign-on with Active Directory Federation Services (AD FS) and SAML authentication with identity providers such as Okta and Azure Active Directory.

Repository audit log

The Laserfiche Cloud repository audit log includes details of user actions, including viewing, modifying, creating and deleting documents, and similar operations on metadata and other repository objects.

Fine-grained access control

Administrators can use access rights to limit and control access to individual documents and objects. For example, security tags restrict access to documents on a document-by-document basis.

Intrusion detection

Laserfiche Cloud utilizes host-based intrusion detection systems to reduce the risk of data theft by individuals or organizations attempting to gain unauthorized access.

Access rights

Administrators can configure access rights and privileges to limit actions that users can perform across the repository based upon role assignments or group memberships.

AI governance

Laserfiche AI data is encrypted at rest (AES-256) and in transit (TLS 1.2+). Laserfiche does not utilize any of your data to train internal or external AI models.

Password policies

Laserfiche Cloud supports industry-standard password controls, such as password minimum length, complexity and history.

Penetration testing

Laserfiche engages third-party vendors to conduct external penetration testing of the Laserfiche Cloud system.

Vulnerability scanning

Laserfiche performs a vulnerability scan of backend servers that run in the Laserfiche Cloud hosting environment.

Firewalls

Laserfiche Cloud’s firewall configuration settings are regularly reviewed based on industry standards.

Repository application auditing

Laserfiche Cloud supports auditing of both access and modification of objects in repositories.

Enterprise Security

Securely modernize your business-critical work with Laserfiche Cloud.

Laserfiche Enterprise Security enhances security, resilience and governance capabilities for organizations managing sensitive, highly regulated data in Laserfiche Cloud.1 It provides FIPS 140-3 encryption2, privileged-user activity visibility, configurable session controls and multi-region disaster recovery with near real-time account-level replication. 

Available to Laserfiche Cloud Business customers as an optional Add On, included with Business+ and offered for eligible Municipal Cloud packages.
Contact Us

Features 
  • Multi-region disaster recovery with near real-time repository replication  
  • Four-hour repository snapshots 
  • Enhanced user and privileged account monitoring  
  • Configurable security policies including inactivity session time out controls  
  • GovRAMP Verified and CJIS-ready 
Laserfiche Cloud Security Features Professional Tier Business TierBusiness+ Tier
AES‑256 Data Encryption  ✓ ✓ ✓ 
Role‑Based Access Controls ✓ ✓ ✓ 
Single Sign‑On (SSO/SAML/AD FS) ✓ ✓ ✓ 
DDoS Protection ✓ ✓ ✓ 
Unauthorized AI Bot Prevention ✓ ✓ ✓ 
Administrative and Repository Auditing✓ ✓ ✓ 
Configurable Inactivity Timeouts✓✓ ✓ 
Advanced Audit Trail   Add On✓ ✓ 
FIPS 140-3 Cryptographic Modules  ✓ 3✓ 
Four-Hour Repository Snapshots  ✓ ✓ 
Multi-Region Disaster Recovery Support  ✓ ✓ 
GovRAMP (Pending)  ✓ ✓ 
  1. To ensure alignment with regulatory and operational needs, organizations should evaluate their use cases against the acceptable use restrictions in our Cloud Subscription Agreement before making a purchase.  ↩︎
  2. Note: Enhanced encryption uses FIPS-compliant cryptographic algorithms (FIPS 140-3) that utilize up-to-date crypto routines approved by NIST and compiled to help prevent sophisticated attacks on underlying cryptographic algorithms. Enhanced encryption is available for the Laserfiche Cloud U.S. Region.  ↩︎
  3. Items with an orange check-mark (“FIPS 140-3 Cryptographic Modules” and below) are available with the Enterprise Security Add On for Laserfiche Cloud Business customers, included with Business+ and offered for eligible Municipal Cloud packages. ↩︎
“Laserfiche’s compliance tools in the cloud, and knowing that Laserfiche takes security very seriously have been important factors in our decision making.”rn—Andrew McElrath, strategic project manager at Mille Lacs Corporate Ventures
Featured Success Story

Mille Lacs Corporate Ventures Transitions Corporate Operations to Laserfiche Cloud

Mille Lacs Corporate Ventures (MLCV), created by the tribal government of the Mille Lacs Band of Ojibwe, manages the business affairs of the Band.

Read the Case Study

Laserfiche is committed to privacy.

Our commitment

At Laserfiche, we have embraced a culture of privacy, which includes embedding privacy-by-design in our engineering efforts, and have implemented controls and policies throughout our organization. Laserfiche is a B2B company based in California. The State of California has passed strict, broad privacy regulation through the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) while the General Data Protection Regulation (GDPR) leads the European Union’s privacy efforts. Many other countries, states and territories have implemented privacy regulations as well. Laserfiche endeavors to continually adapt and adhere to ever-evolving regulations that apply to its business.

Operational privacy

Operationally, we strive to keep our stakeholders’ data secure and retain only information we collect from you where we have an ongoing legitimate business need to do so, like providing you with a service you have requested, or to comply with applicable legal, tax or accounting requirements.

Privacy training

At Laserfiche, all employees are required to complete annual privacy training which covers applicable privacy regulations and data handling best practices.

Laserfiche documentation

In addition to what we communicate in our Privacy Notice, our Cloud Subscription Agreement with accompanying Data Processing Addendum specific to the Laserfiche Cloud platform addresses data privacy regulations including GDPR, CCPA and PIPEDA.

International transfers

For personal data transferred from the United Kingdom, the European Union and Switzerland, we provide appropriate safeguards per the Data Privacy Framework. To learn more, visit the “International Transfers” section of the Privacy Notice.

Information we collect

We collect information that you provide directly to us only for legitimate business purposes. For example, when you manage your user profile, participate in interactive features (such as the Contact Us page), request newsletters or other marketing communications, request customer support, enter login information, or otherwise communicate with us. To learn more visit the “Information We Collect” section of the Privacy Notice.

You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing emails we send you. To learn more, visit the “How Laserfiche Uses and Shares the Information We Collect” section of the Privacy Notice.

To read our complete Privacy Notice, visit our Privacy Notice page.

Contact Us for Your ECM Needs

Whether you have product questions, support needs or want to partner with us, we’re here to help you on your digital transformation journey. Fill out the form and a Laserfiche team member will be in touch as soon as possible.

From Complexity to Clarity: AI-Powered Information Management

Alex presenting with AI button callouts

In the modern enterprise, information is often compared to oil—a raw resource that is valuable only when refined. However, for many organizations, that “oil” has become a “swamp.” We are drowning in Ghost Content: the vast quantities of documents, emails, and data points that are stored daily, tucked away, and promptly forgotten. This hidden hoard isn’t just a storage cost; it’s a locked chest of insights and a potential compliance liability. 

In a recent thought leadership webinar, experts from Info-Tech Research Group and Laserfiche sat down to discuss how artificial intelligence is finally providing the key to unlocking your data, moving organizations from digital clutter to operational clarity. 

The New Information Landscape: Breaking Down Silos 

For decades, IT departments have drawn a thick line between “Data” (structured numbers in databases) and “Content” (unstructured documents like PDFs and emails). According to the Info-Tech experts, those lines are officially dead. 

AI doesn’t care about the format of your information. Whether it’s a row in a spreadsheet or a paragraph in a contract, modern AI agents see it all as Knowledge. To be “AI-ready,” organizations must stop managing these assets in silos. Integrating technology, architecture and governance teams is the first step toward a unified information strategy that is cost-effective and compliant. 

Nysa Zaran, data and analytics director of research at Info-Tech, emphasizes the importance of this shift, saying, “One of the moves that we need to begin to make as organizations is to think more broadly about our information as a whole, our knowledge, our data and our content, and start thinking about how we can manage that and leverage that together.” 

The Four Dimensions of AI 

To understand how to leverage this technology, Zaran breaks AI into four core capabilities that are reshaping the workplace: 
  1. Perception: The ability to interpret input, such as digitizing handwriting or transcribing speech. 
  1. Natural Language Processing (NLP): Democratizing access to data by allowing users to interact with systems using human-like speech. 
  1. Knowledge Representation: Providing context in complex environments and mapping how different pieces of information relate to one another. 
  1. Generative AI: The ability to co-create new content based on existing organizational knowledge. 

While some of these technologies have existed for years, their accessibility is what has changed. Tools that were once reserved for data scientists are now available at the fingertips of every office worker. 

Tackling the “Content Swamp” with Principles 

If you turn a powerful AI loose on a “content swamp”—a disorganized SharePoint or a messy file server—you won’t get insights; you’ll get amplified chaos. The experts suggest a principle-based approach to decide what information actually matters. Info-Tech proposes the “I-VALUE” framework. High-value information is: 
  • Irreplaceable 
  • Value-driving 
  • Authoritative 
  • Legally/Contractually relevant 
  • Unique 
  • Enabling to the organization 

By establishing these principles, leadership can share the responsibility of data ownership across the company, rather than leaving it solely on the shoulders of the IT department. 

Using AI to Prepare for AI 

One of the biggest misconceptions in digital transformation is the idea that “we aren’t ready for AI because our data is too messy.” The Info-Tech team flips this script: You can use AI to clean your house. 

This is where AI-powered information management comes in. Instead of manual audits that take years, organizations are now using AI for auto-classification, metadata prediction, and deduplication. You can use AI to identify personally identifiable information (PII) at scale or to flag expiring vendor contracts that were previously hidden in the depths of your archives. In this way, AI isn’t just the end goal—it’s the janitor that helps you get there. 

“Use your technology. It’s powerful,” said Andrea Malick, principal advisory director at Info-Tech. “Use it to its potential, and you’ll now be set up for emerging technology.” 

The Path Forward: Strategy Over Hype 

So, where should you start? The panel suggests a “strategic but practical” approach. You don’t need an “easy button”; you need a six-month roadmap. 
  • Identify High-Impact Use Cases: Don’t try to boil the ocean. Find one or two doable projects, like automating a construction foreman’s field notes or linking structured sales data with unstructured client emails to find new patterns. 
  • Focus on Literacy: Ensure your team understands what these tools are capable of and, more importantly, how to use them safely. 
  • Leverage Vendor Partners: Use platforms like Laserfiche that have already baked these AI capabilities into their ecosystem. From natural language extraction to AI agents that handle reasoning tasks, the tools to transform your “Ghost Content” into a competitive asset already exist. 

Reclaim Control of Your Information Ecosystem  

The shift from complex, fragmented data to clear, actionable intelligence isn’t just a technological upgrade; it’s a cultural one. By breaking down the barriers between data and content and using AI-powered information management to streamline governance, your organization can stop searching for information and start using it. 

To learn more about how to unlock your organizations unstructured data and hear directly from Research Directors of Info-Tech Research Group, watch the full webinar.  
Watch the Webinar