Paperless-ngx Document Management System

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

## Your Private, Searchable Document Archive - Running in Minutes

Paperless-ngx is the open source document management system trusted by a large and active community. Drop a scan or PDF into the consume directory and Paperless OCRs it, extracts the text, tags and indexes it, then archives a searchable original. This AMI delivers the complete platform fully installed and configured so you have a production-ready document archive within minutes of launch - no Docker Compose files, no dependency troubleshooting, and no manual database setup.

The current release available is Paperless-ngx 2.20.

## Why This AMI Over a DIY Deployment

• Minutes, not hours: The entire stack - application, database, cache, OCR pipeline, and reverse proxy - is pre-configured and starts automatically. A typical self-install takes 1-2 hours of configuration; this AMI eliminates that effort entirely.
• Secure by default: Every instance generates its own unique PostgreSQL password, Django secret key, and Paperless administrator password on first boot. Credentials are stored in a root-only file. No shared or default credentials and no sample documents ship in the image.
• Dedicated, resizable storage: The document archive and database live on independent EBS volumes you can resize without rebuilding the instance, supporting long-term growth and backup strategies.
• Bare-metal performance: Paperless-ngx runs directly on the OS from the official release - not inside nested containers - giving you full utilization of your chosen instance type for OCR-intensive workloads.

## Application Stack

The granian webserver serves the bundled Angular frontend. A Celery worker and scheduler run the background task pipeline, and a consumer watches the input folder. PostgreSQL provides the database and Redis the task broker. The OCR pipeline is built on tesseract, Ghostscript, and OCRmyPDF. nginx terminates HTTP on port 80 and reverse-proxies the application.

## Security Posture

• Per-instance credential generation on first boot (no shared secrets across deployments)
• Credentials stored in a root-only file inaccessible to non-privileged users
• Instance address automatically added to Django trusted hosts
• No documents or sample data included in the image
• Dedicated storage volumes enable encryption at rest via EBS encryption
• Runs in your own VPC for full network isolation and data residency control

## Use Cases

• Data-residency compliance: Host a private document archive in your own VPC when regulations prohibit SaaS document storage.
• Paperless office: Digitize invoices, contracts, and correspondence with automated OCR, tagging, and full-text search.
• Team collaboration: Provide a shared, searchable repository accessible only within your network perimeter.

## Getting Started

1. Launch the AMI on your preferred instance type (t3.medium or larger recommended).

2. Retrieve the generated administrator credentials from the root-only file.

3. Browse to the instance address, sign in, and begin uploading or scanning documents.

4. Configure consume-folder automation, OCR languages, or TLS termination as needed.

## cloudimg Support - 24/7

cloudimg provides around-the-clock technical support by email and live chat. Our engineers assist with deployment, upgrades, OCR language configuration, consume-folder automation, object storage integration, TLS termination, and database administration. Critical issues receive a one-hour average response time.

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.