SOC 2 Type 2
This report details the controls for Laserfiche Cloud related to the criteria for the security, availability and confidentiality principles set forth in TSP section 100, 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy (AICPA, Trust Services Criteria).HIPAA Laserficheās SOC Type 2 Plus covers the security requirements set forth in the Health Insurance Portability and Accountability Act of 1996 (HIPAA), provided within Title 45 Code of Federal Regulations Sections 164.308 ā 312 (45 CFR Sections 164.308-312) (the Security Requirements).
Web Content Accessibility Guidelines 2.2 AA
Laserfiche has published VPATs and ACRs available for all Laserfiche Cloud and self-hosted products. Alignment to the WCAG 2.2 Level AA standard is the basis of our approach to compliance with Section 508 and EN 301 549 requirements.
ISO/IEC 27001:2022
Laserfiche meets the information security requirements of the ISO/IEC 27001 certification for the information security management system (ISMS) which is the standard for how companies should establish, implement, maintain and continually improve an information security management system.
SEC Rule 17a-4
Laserfiche Vault is a Laserfiche Cloud solution package of services and cloud-based features that supports stringent non-alterable record archival requirements such as WORM (write once, read many) compliance required by SEC Rule 17a-4 for broker dealers. Beyond financial services, Laserfiche Vaultās strict compliance mode can also be applied to support rigorous records management practices for electronically stored information (ESI) requiring prevention of any unauthorized alternations or deletions of digital records.
HECVAT
Laserfiche has completed the Higher Education Community Vendor Assessment Toolkit (HECVAT).
DoD 5015.2 Records Management Applications
DoD 5015.2 details the Department of Defenseās baseline requirements for Records Management Applications (RMA), that facilitate adequate and appropriate basis for addressing the basic challenges of managing records in the automated environment that increasingly characterizes the creation and use of records. Laserfiche Cloud records management controls are based on our self-hosted Department of Defense 5015.2 version 3-certified electronic records management capabilities.
å¦éäŗč§£ä¼äøå 容ē®”ēéę±ļ¼čÆ·čē³»ę们
ę č®ŗęØęÆęäŗ§åé®é¢ćęÆęéę±ļ¼čæęÆåøęäøę们åä½ļ¼ę们é½å°åØęØēę°ååč½¬åä¹č·Æäøå©ęØäøčä¹åć唫åč”Øę ¼ļ¼Laserfiche å¢éęåå°å°½åæ«äøęØčē³»ć