Prepare the UGREEN
In UGOS Pro, enable the SSH service and SFTP, and create a dedicated user and a folder such as /volume1/paperoffice.
UGREEN NAS · AI-DMS with BYOS
PaperOffice AI stores your documents encrypted on the UGREEN. OCR, AI and search run at PaperOffice.
Even without port forwarding: the NAS opens the tunnel itself via reverse SSH. Guide for UGOS Pro below.
Trusted by leading companies worldwide
How it works
PaperOffice reaches your UGREEN via SFTP or through a reverse SSH tunnel that the NAS opens itself. The full guide for UGOS Pro is further down.
In UGOS Pro, enable the SSH service and SFTP, and create a dedicated user and a folder such as /volume1/paperoffice.
In the web app, choose BYOS storage and reverse SSH or SFTP under Storage Mounts, and enter the NAS user, folder and password.
Paste the block from the app on the NAS via SSH. The tunnel runs as a container in Docker and restarts on its own after every reboot.
Capabilities
From a single scan folder to an encrypted storage location: per mount, you decide which role the NAS takes on.
There is no PaperOffice app for the NAS. It connects like any server, via SFTP, WebDAV or reverse SSH. OCR, AI and search run at PaperOffice.
Files stay unchanged on the NAS, subfolders are included, and renames and moves are tracked. For processing, PaperOffice keeps an encrypted working copy.
New files from exactly one folder land in the target workspace. The source file is then kept, moved or deleted.
Via SFTP or reverse SSH, a workspace stores new documents as encrypted .pod archives with AES-256 on your NAS, using a password you set.
A BYOS mount can be mirrored to a second SFTP NAS, with every file operation replicated. If the first one fails, PaperOffice keeps reading from the mirror.
The NAS opens an outbound tunnel over port 443 itself, as a Docker container or, on Synology, via Task Scheduler. No fixed IP, DynDNS or port forwarding needed. The tunnel works as a source and as BYOS storage.
The index skips folders such as @eaDir, #recycle and #snapshot on Synology or @Recycle on QNAP, plus recycle bins, dot folders, lock and temp files.
Few parallel connections per mount and gentle retries on errors, so protection such as fail2ban on the NAS does not trigger.
curl -X POST \ "https://api.paperoffice.ai/latest/storage_mounts/add" \ -H "Authorization: Bearer po_ut_YOUR_API_KEY" \ -H "Content-Type: application/json" \ -d '{"name":"UGREEN Archiv","connector_type":"reverse_ssh","mount_purpose":"byos","local_ssh_user":"paperoffice","local_path":"/volume1/paperoffice","encryption_key":"YOUR_ENCRYPTION_PASSWORD"}' curl -X POST \ "https://api.paperoffice.ai/latest/documents/workspaces-create" \ -H "Authorization: Bearer po_ut_YOUR_API_KEY" \ -H "Content-Type: application/json" \ -d '{"name":"UGREEN Archiv","type":"ablage","storage_mode":"byos","storage_mount_id":2381}' For developers
Reverse SSH mounts and BYOS workspaces can also be created automatically. The API returns the setup commands for the NAS.
Besides passwords, the API also accepts SSH keys. The app form only knows passwords.
Add, list, switch on and off or remove mirrors.
16 MCP tools for storage mounts, from creating them through the connection test to mirrors.
Security and data sovereignty
In index mode, the originals stay on your NAS and PaperOffice keeps an encrypted working copy. With BYOS, the workspace's documents are stored encrypted on the NAS. OCR, AI and search run at PaperOffice in its own data center in the EU, which also holds full text, index, metadata and AI results.
Frequently asked questions
No. No PaperOffice app runs on the UGREEN. The NAS serves as encrypted storage or as a source. OCR, AI and search run at PaperOffice in its own data center in the EU.
No. With reverse SSH, the UGREEN opens an outbound tunnel over port 443 to PaperOffice itself. You only need port forwarding with DynDNS for the direct SFTP connection.
Models with UGOS Pro and Docker, such as the DXP series. The SSH service is enough for the direct SFTP connection; the tunnel without port forwarding requires Docker.
UGREENlink is remote access for UGREEN apps, not SFTP access. Without port forwarding, use the reverse SSH tunnel.
With BYOS, the documents of the workspace are stored on the NAS as .pod archives with AES-256. Full text, index, metadata and AI results are stored at PaperOffice in its own data center in the EU.
The availability check reports the outage by email. Without a mirror, PaperOffice locks the BYOS workspace until the NAS is reachable again. The tunnel container then reconnects on its own.
BYOS does not take over existing files on its own. For that, use an index connector, which leaves the originals on the NAS, or the Data Importer from the Starter plan.
The .pod archives are encrypted with AES-256 and your password. PaperOffice keeps this password encrypted in order to open the files for processing and retrieval. Keep it safe: without the password, the files cannot be read.
Guide
From the SSH service in UGOS Pro to the first encrypted document on the NAS.
PaperOffice reaches your UGREEN NAS either directly via SFTP or through a reverse SSH tunnel that the NAS opens itself. The tunnel needs no port forwarding, no fixed IP and no DynDNS.
| Direct via SFTP | Reverse SSH | |
|---|---|---|
| Port forwarding on the router | required | not required |
| Public address | fixed IP or DynDNS | not required, outbound over port 443 |
| On the NAS | SSH and SFTP service | SSH service and Docker |
| Use | Source and BYOS storage | Source and BYOS storage |
Control Panel › Terminal › SSH.paperoffice, with read and write access for this user.Use a dedicated user for PaperOffice only. That way, the NAS log shows exactly what PaperOffice does, and you can revoke access at any time.
Storage Mounts, choose Use as BYOS-Storage and the protocol Reverse SSH./volume1/paperoffice, and set an encryption password with at least 16 characters.NAS with Docker variant and copy the block.Test Connection. If successful, PaperOffice creates the file .po_byos_manifest.json in the folder.The block contains the private key of this tunnel. It is only shown in your app, is valid for this one mount only and can be revoked at any time together with the mount.
SFTP: host, port, user, password and base path /volume1/paperoffice.Test Connection and choose the purpose: import source for a connector or BYOS storage for a workspace.Local network addresses such as nas.local or 192.168.x.x do not work for the direct connection. That is what the reverse SSH tunnel is for.
Workspaces, create a new workspace and choose the storage mode BYOS and the mount..pod archives with AES-256 in the folder on the UGREEN NAS. Full text, index, metadata and AI results are stored at PaperOffice in its own data center in the EU.| Message in the app | Cause | Fix |
|---|---|---|
| Tunnel from the NAS not active | The tunnel container is not running or cannot reach PaperOffice. | Check in Docker that the container is running, and allow outbound connections over port 443. |
| Gateway rejected the tunnel key | The key in the container does not belong to this mount. | Create the mount again and paste the new block on the NAS. |
| Folder on the NAS not writable | The NAS user may not write to the folder, or the SSH service refuses the sign-in. | Grant write access to the folder, enable SSH and SFTP, enable home folders. |
| Folder already contains encrypted PaperOffice files | The folder contains the manifest of another BYOS mount. | Choose an empty folder or reconnect with the original password. |
The availability check reports outages by email. Without a mirror, the BYOS workspace is locked until the tunnel is back, so that no document is lost. The container reconnects on its own.
Measurable customer success
"Enterprise document management for all our mining operations. World class."
"FDA-regulated pharmaceutical labels require seamless documentation. PaperOffice has reduced our approval process from days to hours."
"Technical documentation and order processing now run fully automatically."
"Digitization has revolutionized our administration. Citizen inquiries are now processed in minutes instead of days."
"Patient records, medical reports, and referrals are automatically captured and classified. Our practice team finally has time for their patients."
"8,000 employees and thousands of guest documents every day. PaperOffice has completely digitized our back-office processes."
"Loan applications and compliance documents are now processed in minutes instead of hours. The regulatory review is fully automated."
"Construction project documentation and compliance are now digital and traceable."
"Check-in forms, invoices, and guest communications are fully digital. Our concierge team now focuses on providing excellent service."
"Gas station billing, supplier documents, and compliance records from over 250 stations are automatically processed and archived."
"GMP-relevant documentation for pharmaceutical functional labels now runs automatically. Audit trails are seamless and instantly accessible."
"Blueprints, permits, and customer files for our wooden houses are now managed centrally. After six generations, we are finally paperless."
"Supplier contracts, certificates, and customs papers for hundreds of roasteries worldwide are automatically captured and assigned to the correct product."
"Temperature logs, CMR waybills, and food certificates are automatically scanned and assigned to the order. Misallocations are a thing of the past."
"Heavy transport permits, route plans, and project documentation are now instantly accessible digitally. No more searching through folders."
"Customs documents, warehouse receipts, and shipping orders for our Eastern European network are automatically classified. Four generations of logistics, finally digital."
"Printing specifications, customer approvals, and material certificates are now accessible centrally. The production error rate has dropped to near zero."
"Sustainability certificates, supplier contracts, and customer specifications are processed automatically. Swiss precision, now also digital."
"Building permits, subcontractor contracts, and acceptance protocols for our commercial properties are now fully documented digitally."
"Purchase agreements, exposés, and customer files from over 30 years of market leadership are now digitally searchable. Every agent finds everything in seconds."
"Ocean freight documents, customs declarations, and bills of lading are automatically captured. Baltic Sea logistics has never been so efficient."
"Thousands of custom packaging orders per week, including design approvals, print data, and delivery documents. PaperOffice keeps it all together."
"Pathology lab documentation and device certifications are now fully automated. Seamless traceability for every specimen."
"Loan documents, security papers, and customer correspondence are processed in minutes instead of hours. The regulatory review is seamless."
"Technical specifications, quality certificates, and recycling protocols for our steel production are central and instantly accessible."
"Pharma and cosmetic label specifications with regulatory requirements are automatically checked and approved. No more manual checklists."
"KYC documents, investment reports, and regulatory filings are classified in seconds. As an MAS-regulated robo-advisor, seamless compliance is essential."
"Safety data sheets, transport permits, and ADR documents for chemical logistics are automatically assigned. Zero tolerance for errors."
"Certificates of authenticity, supplier records, and customer warranties for our pearl collections are automatically archived and instantly accessible."
"SME loan applications, security documents, and regulatory reports are automatically classified. Our advisors have more time for customer consulting."
"Customer files from over 135 years of banking history are being successively digitized. 5,000 employees now have instant access to all documents."
"Microcredit applications and compliance documents for millions of customers are now processed in minutes instead of days. A game changer for financial inclusion."
"Hundreds of thousands of delivery notes and return slips per day are processed automatically. Vietnam's leading e-commerce logistics provider, now paperless."
"CNC manufacturing protocols, material certificates, and customer specifications for oil, gas, and aerospace projects are now fully documented digitally."
"Vision 2030 requires complete digitization. PaperOffice processes government documents for Saudi Arabia's digital backbone."
"Material certificates, hardening protocols, and customer specifications are automatically assigned to the correct order. Australia's only Q&T manufacturer, now paperless."
"Weld seam protocols, structural calculations, and project plans are managed digitally. Our workshop teams have access in real time."
"Aerospace certificates, CNC programs, and customer tolerances are automatically classified. AS9100 evidence has never been this easy to produce."
"Merchant contracts, KYC documents, and transaction receipts for hundreds of thousands of SMEs are processed in seconds. Mexico's payment revolution, paperless."
"Harvest documentation, export certificates, and quality protocols for our high-altitude Malbecs are automatically archived. 120 years of winemaking tradition, now digital."
"Millions of user verifications and regulatory documents are processed fully automatically. Scaling without paper."
"Merchant onboarding documents and compliance records for Africa's leading payment provider are processed in minutes instead of days."
"Organic certificates, supplier audits, and product labels for thousands of natural products are automatically checked and archived."
"Regulatory documents from 33 African countries, partner contracts, and audit trails are managed fully automatically. An enterprise DMS for a $3 billion fintech."
"Prescriptions and medication management now run fully automatically. More time for our patients."
"Centuries-old documents are now digitally searchable. A milestone for our historical archives."
"Our caregivers finally have more time for residents instead of paperwork."
"500,000+ records digitized. Our deputies now find all information instantly."
"Patient records management is now a breeze. Everything automatically captured and archived."
"Inheritance and estate documentation is now efficient and error-free."
"Digital property management for all our residential complexes. Tenants and owners are thrilled."
"With PaperOffice, we have accelerated our invoice processing by 99%. The AI automatically recognizes all relevant data and assigns it correctly."
"PaperOffice has become indispensable to our daily work. Orders, quotes, and invoices are now automated."
"The documentation of our care services is now digital and automated. More time for our patients."
"Technical drawings, bills of materials, and quality protocols are instantly searchable. A search that used to take 30 minutes now takes 30 seconds."
"Client receipts, tax assessments, and annual financial statements are automatically sorted and assigned to the correct client. Receipt chaos is a thing of the past."
"Project documentation, SLAs, and customer communication for our IT consulting projects are automatically classified and archived."
Where would you like to try PaperOffice?
Your trial is ready
Where would you like to start?
The full workspace is optimized for the computer. The mobile version is for capturing, reviewing, and approving documents.
Register free Already a customer? Log in app.paperoffice.aiStart on the computer
A personal access link will be sent to the email address provided.
Open PaperOffice Mobile
Capture and work with documents directly on the smartphone.
Open mobile versionAI-DMS
Documents. Intelligence. Real impact.
PaperOffice AI is the AI-DMS. Four functional areas on one DMS foundation, with three ways in.
Features, modules and benefits at a glance.
Capture, organize, search and collaborate on documents.
Plug into your systems and AI workflows.
No installation, ready in seconds.
Search all tools