Our Security Principles
Secure By Design
Products respect existing provider permissions, access tokens, and organisational controls.
Zero Trust Approach
We never assume trust. Every user, action, and integration is verified.
Encryption Everywhere
Portal, API and agent connections are encrypted in transit, and AnyScan supports encrypted SMTP on port 465. AnyDrive tokens stay on our servers.
No Extra Exposure
Outbound-only connections mean no inbound ports to manage or secure.
How We
Protect Customers
AnyPrint
Jobs held for secure release wait in private cloud storage until the user releases them (QR code + PIN). Cloud routing is encrypted in transit, and job history records every job.
AnyScan
Accepts encrypted SMTP (SMTPS on port 465) and delivers over outbound-only, encrypted connections. Rules restrict destinations, senders, and file types, and a scan feed records every delivery.
AnyDrive
Uses provider-issued tokens and respects file/folder permissions at all times. No elevation, no bypass, no service accounts.
Data handling, product by product
The short version of the Privacy Policy for each product: what passes through AnySoft, what we keep, and for how long. Customers remain responsible for setting their devices to send scans over encrypted SMTP and for the content they print, scan or store.
AnyPrint
- Passes through: documents held for secure release, sent to an offline printer or routed to another network, encrypted in transit.
- Stored: a document held for secure release stays in our cloud storage until it prints successfully, or until the user or an administrator deletes it. Job details such as document name, page count, printer and time are kept as print history.
- Jobs sent to an online printer without secure release go straight from the computer to the printer; only job details such as document name, page count and print settings reach AnySoft, never the document itself.
- Agents connect outbound only; no inbound firewall rules.
AnyScan
- Passes through: each scan, emailed by the MFP to AnyScan. Our mail service supports encrypted SMTP (SMTPS on port 465); set your devices to use it for encrypted transport.
- Delivered to SharePoint, OneDrive or Google Drive over encrypted connections, or to a Windows share through the Agent.
- Stored: held only as long as needed to deliver, including retries, then deleted.
- We do not open, read or analyse the document beyond delivery and your sender, destination and file-type rules.
AnyDrive
- Passes through: file requests between Windows Explorer and your provider, over outbound-only encrypted connections.
- Stored: the Microsoft or Google OAuth tokens issued when a user connects. They let AnyDrive act as that user, with that user's own permissions.
- AnyDrive's Microsoft and Google access tokens are kept on AnySoft's servers, are never sent to the browser, and are used only to provide AnyDrive.
- Your files stay in SharePoint, OneDrive and Google Drive, governed by the permissions set there.
Infrastructure Security
Our platform runs in secure, modern cloud infrastructure with built-in redundancy.
- Managed cloud hosting in Sydney, Australia
- Token-based authentication for integrations
- Role-based access controls in the admin portal
- Request logging and limits on repeated sign-in attempts
- Multi-tenant platform with per-client separation
- Activity feeds and job history for print and scan
Our Commitment
Security isn’t just a feature. It’s a foundation. Every decision we make, from architecture to user experience, puts security first.
- Transparency about how data flows through the platform
- Security by default in every product release
- Focus on trust between our platform and our customers
- Straight answers about what we offer today and what is on request
For enterprise buyers
What your security, legal and procurement teams can ask us for, and what we will say plainly is not there yet.
SOC 2 and ISO 27001: in progress
AnySoft is in the process of certifying for SOC 2 and ISO 27001. We are not certified yet. We can share our current security practices and a completed questionnaire on request, and will publish the reports when the audits are complete.
Data processing agreement
A DPA and our current sub-processor list are available on request. Email us and we will send both.
Security questionnaire
Send us your questionnaire and we will complete it. The Privacy Policy and Terms of Service are the reference documents behind the answers.
Vulnerability disclosure
Report a security issue to [email protected]. Our disclosure contact is also published at /.well-known/security.txt.
Support hours
Support is provided on New Zealand business days by email at [email protected] and by phone on +64 9 886 5969, and aims to respond within one Business Day. Partners get deployment support for their client rollouts.
Single sign-on
Sign in with Microsoft (Entra ID); enforce MFA through your Microsoft tenant. Once an administrator links your Entra tenant and maps users, users sign in to the portal and AnyPrint agents with Microsoft. SAML, Google sign-in and built-in MFA for AnySoft passwords are not available yet. AnyDrive and AnyScan use your users' own Microsoft and Google identities for provider access.
Audit log export
Real-time activity feeds are built into the portals, and AnyScan reporting is exportable. Ask us about audit log export for your tenant.
SOC 2 and ISO 27001 certification is in progress. Sign in with Microsoft (Entra ID) today, and enforce MFA through your Microsoft tenant. Ask us about audit log export for your tenant. We will tell you what is available today and what is on the roadmap.
Frequently Asked Questions
Straight answers on how AnySoft works, what it costs, and how it fits your setup.
Yes, in transit. Portal, API and agent connections are encrypted. AnyPrint jobs held for secure release or routed across networks travel to the cloud encrypted, while other jobs print directly over your local network. AnyScan supports encrypted SMTP (SMTPS on port 465), so set your devices to use it, and delivers to every destination over encrypted outbound connections. AnyDrive talks to Microsoft and Google over encrypted connections. AnyDrive's Microsoft and Google access tokens are kept on AnySoft's servers, are never sent to the browser, and are used only to provide AnyDrive. For details of how data is handled at rest, see the Privacy Policy or ask support.
Not yet. AnySoft is in the process of certifying for SOC 2 and ISO 27001. We can share our current security practices and a completed questionnaire on request, and will publish the reports when the audits are complete.
Yes, through Microsoft. Users can sign in with Microsoft (Entra ID) once an administrator links your Entra tenant and maps users, and you enforce MFA through your Microsoft tenant. SAML, Google sign-in and built-in MFA for AnySoft passwords are not available yet.
No. Every AnySoft product uses outbound-only connections from a lightweight agent, so there are no inbound firewall rules, no VPN and no print server or file server to maintain.
No. AnyDrive and AnyScan use provider-issued, user-based tokens and respect SharePoint, OneDrive and Google Drive permissions at all times. Every user, action and integration is verified; there is no elevation and no shared service account that sees everything.
AnyScan policy rules restrict destinations, senders and file types and every scan is logged in an exportable activity feed. AnyPrint holds jobs in the cloud until the user releases them at the printer with a QR code or PIN, so documents are never left on an output tray.
Customer data is hosted and processed in Australia, in DigitalOcean's Sydney region. Transactional email is sent through AnySoft's email delivery provider and payments are handled by its payment provider. For the sub-processor list, or to discuss residency requirements, email [email protected].
