Skip to content

Auditor asks: who printed what, can we prove it?

Sectors with audit requirements (healthcare, legal, finance, government) must show who printed, scanned or copied. PaperCut, vendor accounting (HP Access Control, Canon uniFLOW, Ricoh Streamline NX) and Universal Print report that. Retention depends on the legal frame.

Try this first

  1. 1Enable logging at the MFP level. Vendor accounting has it on by default, PaperCut is a setting, Universal Print sits in the reports tab.
  2. 2Set retention based on sector requirements. For GDPR purpose-specific-not-longer-than-needed: 90 days or 1 year are common in SMB.
  3. 3Restrict access: not everyone may see print logs. Limit to IT admin and possibly an internal controller.
  4. 4Document what is and isn't logged. Print content is typically not stored, only metadata (user, document name, pages, timestamp). Users must find this in a privacy statement.
  5. 5Test you can actually produce a report when asked. Not just that it's 'on', but that you can deliver a readable overview within 24 hours.

When to bring us in

For formally audited sectors (NEN 7510, ISO 27001, BIO) print logging is part of the ISMS. We set it up and document it so you can show it to the auditor.

See also

None of the above fits?

Describe your situation below. We pass your input plus the steps you already saw to our AI and return tailored next-step advice. If it's too risky to DIY, we'll say so.

Who are you?

For the AI question we need your email and company, so we can follow up if the AI gets stuck, and to prevent abuse.

Limited to 2 questions per hour and 5 per day, kept lean so the AI stays useful. For more, contacting us directly works better for you and us.

Or skip the DIY entirely

Our Managed IT clients do not look these things up. One point of contact, a fixed monthly price, resolved within working hours.