Papertrail Prioritizes File Retention and Access Rights

The rules that decide how long a record survives, who is allowed to open it, and the moment it can lawfully be destroyed are usually the last thing an organisation thinks about and the first thing an auditor asks for. This September, Papertrail, the Johannesburg based enterprise content management provider, is putting exactly that layer of its platform in the spotlight. With South African businesses now working through the back half of the financial year and pulling files together for audit and review, the company is presenting its Records Management module and its permission structures as the practical fix for something filing cabinets and shared network drives were never designed to handle.

Trading as Egis Software and based at 138 Athol Street in Highlands North, the company has spent twenty years writing document and workflow software for South African organisations. It bills its own offering as enterprise content management paired with custom development services, and this month the accent lands on governance rather than capture. Scanning a page is trivial. What makes a digital archive defensible is knowing that the scanned page carries a retention period, that only three named individuals can view it, and that nobody can quietly erase it ahead of its disposal date.

Retention and disposal set up as configuration, not as custom code

Inside the Records Management module, retention periods and disposal instructions are set through configuration instead of being programmed. An organisation that already holds an approved file plan is not forced to reconstruct it inside the software. That existing plan can be brought in as a CSV, so the classification work done earlier with a records manager or archivist arrives intact rather than being retyped and second guessed.

Declaring records and freezing records both sit within the module as well. Declaration pins a document as an official record rather than a working draft. Freezing blocks disposal for as long as a matter stays live, which is precisely the position an organisation lands in when a dispute, an investigation or an audit query lands on a file that would otherwise have hit the end of its retention window. Disposal signoff runs through the same path, so a decision to destroy is captured on the record instead of merely presumed.

Papertrail says it keeps electronic records in line with ICA and ISO standards, and that the module satisfies records management requirements laid down for government, matching the National Archives and Records Service framework. For public sector bodies, and for the private firms that supply them, that alignment is not an optional extra. It is what makes the work possible at all.

Access control that goes all the way down to the index

The other half of the September message is about who gets in. Papertrail says administrators hold absolute control over access to documentation, with permissions set at folder, document and index level. It is that final tier that carries more weight than it first appears. Controlling access at folder level is ordinary. Controlling it at index level means someone can be shown a record set while particular fields inside it remain sealed, which is how a large organisation lets an operations team work on a file without laying bare the sensitive detail attached to it.

Access can be issued, altered or revoked whenever needed, and the company calls the change instant. Every authorised user has their identity verified at the moment of log in. For organisations built through acquisition, or leaning on contractors and outside parties, being able to shut an account and see that closure bite immediately is what separates a controlled environment from a hopeful one.

Signing runs right alongside the permission model. Papertrail Sign carries ordinary, digital, biometric and advanced electronic signatures, and the company states that signature compliance meets both the ECT Act and POPI. Anything signed within the platform remains in the same repository, held under the same retention rules and the same permission structure, rather than slipping out as email attachments nobody can trace half a year on.

Capture, workflow and the record that comes out the other end

Sound governance rests on a complete archive, and the capture side of the platform is what fills it. Papertrail automates bulk and online capture, applies image enhancement together with full page or zonal optical character recognition, and handles form and barcode recognition with page separation done automatically or by hand. What results is fully text searchable scanned PDF images, so a record bound by a retention rule can be located on its content rather than on whoever happens to recall which folder swallowed it.

Routing runs on rules. The platform lets organisations build rule based workflows for tailored document handling and escalation, with documents sent automatically to users or to outside systems, laid out in a graphical workflow designer and run from an administration console. Papertrail frames the payoff as hundreds of working hours saved through process automation and task monitoring across every business unit, delivering a clear view of processes.

Continuity is handled as its own discipline. Papertrail sets out two replication and disaster recovery approaches. The first runs continuous two way replication between a master and a slave server, each hosting the application, giving the shortest achievable downtime and permitting disaster recovery testing without disturbing production, though it asks for two full licences and a heavier configuration. The second is a cold standby that copies the primary file store to a remote write once, read many repository, works with Amazon S3 and UNC path file stores, and needs only a server licence billed as a monthly rental. The company is clear that either route belongs beside a solid data backup strategy, never in its place.

How the records fit into the wider platform

None of this governance is a product on its own. It lives under the same platform as LeaseHub for tenant and lease documents, PeopleHub for the employee lifecycle from recruitment through onboarding, CreditorsHub for accounts payable, TravelHub for supplier invoice collection and data extraction in the travel trade, Papertrail Sign for signing, and the contract management offering with its workflow, approvals, renewals, addendums, controlled access and reporting. A lease, an employment file and a supplier invoice each carry their own retention obligations, and keeping them in one document management system means those obligations are enforced uniformly instead of department by department.

Integration works to the same principle. The Papertrail restful API lets any third party application connect to the platform, and the plugins span MS Office, MS Explorer and a desktop upload agent, with Microsoft Office and Outlook integration plus mobile access on iOS and Android. Records generated in a line of business system can be pulled under the same controls without making staff change the way they work.

The platform comes in Small Business, Standard and Enterprise editions, with cloud and on premise deployment and distributed operation modes on offer, so the same governance model suits an organisation of a few dozen users or one running high availability across multiple sites. Training and customised support come with it, including 24/7 help desk support for critical systems.

Among its clients Papertrail names IHS Property Management, Triton Fleet, CBI-Electric, iStore, Old Mutual, Fair Cape Dairies, the South African Reserve Bank, Tourvest Travel Services, PPC, Rosond, FirstRand Bank, FNB and Standard Bank, reaching across property management, fleet, electrical, retail, dairy, travel, manufacturing, mining services and banking. In those sectors retention schedules, access restrictions and audit readiness are daily operating requirements rather than once a year projects, and they are the settings the company's Document Management Software was designed to serve.

The wider change the company is answering is a familiar South African story. Organisations digitised at speed over recent years, often one module at a time, and finished with content scattered across scanners, mailboxes, network drives and cloud folders. Digitisation by itself created volume. What it never created was governance. Pulling that content under a single set of retention rules, a single permission structure and a single audit ready repository is the job still outstanding, and it is the job that Document Management as a discipline exists to carry out.

Anyone wanting the specifics on the Records Management module, the permission structure, the editions or the disaster recovery options will find them on the Papertrail website at https://www.papertrail.co.za/.

About Papertrail

Papertrail is a South African enterprise content management and document management software provider based at 138 Athol Street, Highlands North, Johannesburg, and trading as Egis Software. For two decades it has been writing document, workflow and records software for South African organisations, describing what it makes as smart software for smart businesses. Its platform spans bulk capture and optical character recognition, storage and retrieval, eForms, rule based workflow and routing, records management aligned to ICA and ISO standards, group email management, electronic and biometric signing under the ECT Act and POPI, business analytical reporting and a restful API for third party integration. Beyond the core platform it provides LeaseHub, PeopleHub, CreditorsHub, TravelHub, Papertrail Sign and contract management, available in Small Business, Standard and Enterprise editions on cloud or on premise deployments, with training and 24/7 help desk support for critical systems.