Can this run in the cloud instead of a machine in our office?
Yes. We deploy a single-tenant system in a dedicated account owned by your business — on AWS, Microsoft Azure, or Google Cloud — inside private networking with encrypted storage and backups, MFA/SSO, least-privilege access, audit logging, and private VPN access. We usually recommend the cloud behind the tools you already use: Azure for Microsoft 365 organizations, Google Cloud for Google Workspace, AWS otherwise. When a U.S. government cloud is required, Azure Government and AWS GovCloud are available. A cloud provides strong infrastructure controls, but no cloud alone makes the application or your business “compliant” — the architecture, configuration, and operating procedures matter, and we document them during the audit.
Which hosting model do you recommend?
For most single-location offices, the appliance is simpler and keeps the working archive inside the building, with encrypted backup offsite. For multiple locations or a remote-first team, a client-owned private cloud is usually the better fit. We do not recommend a shared multi-tenant archive for sensitive client records.
Which AI subscription do we need?
None from us. The archive is designed to work with the business AI subscription your firm chooses — Claude, ChatGPT, Microsoft Copilot, Google Gemini, or another approved tool. During setup we review the plan’s document limits and available privacy, retention, and training controls. Confidential records should not be placed in a personal or free AI account unless your firm’s policies and client obligations permit it.
Does AI get direct access to our whole archive?
Not by default. The starting model is a selected, permission-checked export for a defined task. A direct connector or integration can be evaluated later only after the use case, permissions, audit trail, vendor terms, and retention rules are approved.
Are you selling us Paperless-ngx?
No. Paperless-ngx is open-source software. Aladdin sells the records audit, system design, installation, security configuration, document conversion, training, and ongoing management around it. Your documents remain exportable in standard formats — no proprietary lock-in.
Is Paperless-ngx “HIPAA compliant” or “FTC compliant”?
No software product is compliant by itself. Compliance belongs to the whole system and organization: hosting, encryption, access control, audit logs, policies, training, and incident procedures. We assess regulated records during the audit, configure the deployment to support the applicable safeguards, and make the remaining responsibilities explicit before launch. Tax practices can add a written information security plan.
Can our team access files from home?
Yes — through private, authenticated remote access, not a public login page. Permissions still control which users can see which documents.
Do we have to scan everything at once?
No. Day-forward filing starts at launch. Backfiles are converted in priority order and quoted per banker’s box, so the project can be phased by quarter or department.
Who does the scanning?
New documents are scanned by your own staff at intake — training is included in the launch. For the backfile, Aladdin provides a contract scanning technician who works on-site at your office in the Chicago area, background-checked and under a signed confidentiality agreement; your documents never leave your premises. Backfile conversion is priced per banker’s box. If your firm prefers, your staff can convert backfiles instead, with our training and quality checks.
We’re not in the Chicago area — can we still do this?
Yes. The offering is open to small businesses anywhere: the archive, setup, training, and AI workflows are delivered remotely, and a client-owned private cloud or your own server is usually the best fit. The only location-bound piece is hands-on backfile scanning — our contract technicians cover the Chicago area. Elsewhere, your staff scans with our training and quality checks, or we scope a conversion plan in your audit.
What happens if we stop the monthly care plan?
The system and documents are yours. You keep the archive, administrator credentials, documentation, and exportable files. Without care, your firm becomes responsible for updates, backups, monitoring, and support.