Information security overview
Learn why Princh is the printing and payment industry leader in information security!
Designed with privacy and security at its core
Our solution ensures that your users can print, copy, scan, and pay simply and securely, while helping your organization be GDPR compliant and mitigate risks.
For users
For organizations
A unique approach to security
Locally managed decryption keys
As a consequence, neither Princh nor any third party can access the contents of documents submitted to Princh. This greatly reduces attack surfaces for malicious actors, making our solution much safer compared to traditional ones.
No file attachments
Our scanning solution allows you to comply with modern privacy and security requirements while offering a convenient and straightforward user experience.
Complete user privacy
Additionally, document titles are anonymized by default, meaning we only store the first five characters of the file name and its extension. Last, but not least, all processed documents are automatically deleted from the system after 24 hours.
Questions & Answers
It means our information security management system is certified to one of the world’s most rigorous standards. Which means that we meet global best practices for data security, risk management, and regulatory compliance.
Yes. With cloud based pull printing every attached printing location must be able to download and process the content of any submitted file. This creates a potentially very large, global attack surface for malicious actors. Princh can manage unique decryption keys even at individual printers which guarantees that only the printer selected by the user can decrypt the user’s document.
Yes. Princh is developed with privacy and security by design and default principles to ensure compliance with data protection regulations like the EU's GDPR, CCPA, and other similar regulations.
Princh uses state-of-the-art asymmetric encryption, which ensures that nobody, not even Princh, can access the contents of the users' documents.
Yes, you do. When offering a public printing service you are responsible as a data controller to guarantee the privacy and security of the user’s personal data. This is true, no matter what vendor or solution you chose for delivering the service. If you are using Princh or a comparable solution, you need to have a data processing agreement. You need a DPA for any printing service, not just Princh. If users can print at your organization, you become responsible for their processed data. Without a DPA that clearly outlines how this data is processed, you are putting your organization at risk for when a data breach happens.