# PaperCut Software

PaperCut Software (papercut.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/papercut-software
- Documents last verified: 2026-09-29
- Transparency rating: 43/100 (how much it publishes, not how secure it is)
- Cite as: PaperCut Software, Third Party Index, https://thirdpartyindex.com/vendors/papercut-software (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.papercut.com/ | 2026-09-29 | 2026-09-27 |
| Privacy policy | https://www.papercut.com/terms-privacy/ | 2026-09-29 | 2026-09-27 |
| Terms | https://www.papercut.com/industry/legal/ | 2026-09-29 | 2026-09-27 |
| Security page | https://www.papercut.com/about/security-at-papercut/ | 2026-09-29 | 2026-09-27 |
| security.txt | https://www.papercut.com/.well-known/security.txt | 2026-09-29 | 2026-09-27 |
| Status page | https://status.papercut.com/ | 2026-09-29 | 2026-09-29 |
| Security advisories | https://www.papercut.com/kb/Main/security-bulletin-27-aug-2026-urgent-security-advisory/ | 2026-09-29 | 2026-09-27 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Listed as a subprocessor by (0)

No tracked vendor lists it.

## Security record

CISA's Known Exploited Vulnerabilities catalog lists 5 vulnerabilities in its software:

- CVE-2026-81578 (NG/MF), listed 2026-08-31: PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
- CVE-2026-82078 (NG/MF), listed 2026-08-31: PaperCut NG/MF Unsafe Reflection Vulnerability
- CVE-2023-27351 (NG/MF), listed 2026-04-20: PaperCut NG/MF Improper Authentication Vulnerability (known ransomware use)
- CVE-2023-2533 (NG/MF), listed 2025-07-28: PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability
- CVE-2023-27350 (MF/NG), listed 2023-04-21: PaperCut MF/NG Improper Access Control Vulnerability (known ransomware use)

## Service status

Incidents it reported on its own status page.

- Last 90 days: 5 reported incidents (1 major or critical, 4 minor, 0 with no impact stated)
- Typical time to resolve: 4 h 7 min
- 2026-09-04: PaperCut Hive/Pocket - some users may experience delays with data showing in reporting, job logs and activity logs (minor)
- 2026-09-02: PaperCut Pocket/Hive - intermittent issues affecting sign-in to the User Portal (minor)
- 2026-09-01: PaperCut Hive - some devices may show server or connection errors. (minor)
- 2026-08-25: PaperCut Document Processing Cloud services - some users may experience delayed scan jobs using PaperCut MF or PaperCut Hive (minor)
- 2026-08-24: PaperCut Partner Portal and GES (licensing service) - some users unable to access the Partner Portal, or apply licenses in PaperCut NG/MF (major)
- 2026-06-10: PaperCut Pocket/Hive - some users intermittently unable to release print jobs. (minor)
- 2026-04-13: PaperCut Hive - Some users are intermittently unable to release print jobs or experience intermittent loading in the Hive admin portal (minor)
- 2026-04-02: PaperCut Hive & PaperCut MF - Some users experiencing failures Scanning to Google Drive (major)

## Security contact

From its security.txt (https://www.papercut.com/.well-known/security.txt):

- Contact: mailto:security@papercut.com
- Encryption key: https://www.papercut.com/.well-known/openpgpkey/hu/t5s8ztdbon8yzntexy6oz5y48etqsnbb.txt
- Acknowledgments: https://www.papercut.com/contact/security
- Security jobs: https://www.papercut.com/about/life-at-papercut/

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api