Getting started

Scanhive makes your printer's scan to email button work again — and routes scans to storage, drives, and apps. Setup takes about two minutes:

  1. Create an account at app.scanhive.net.
  2. Add a printer — you get a server address, username, and password (shown once).
  3. Enter those on the printer in its scan-to-email / SMTP settings (see printer setup).
  4. Add a recipient — every address that should receive scans confirms by email first.
  5. Add a destination and a rule under Routes — email, cloud storage, SFTP, and more.
  6. Press the scan button. That's it.

Printer setup

Enter these in your printer's scan-to-email (SMTP) settings. The menus differ by brand — look for Network → E-mail, Scan settings, or SMTP:

SMTP serversmtp.scanhive.net
Port587 (or 25)
EncryptionSTARTTLS if offered — plain works for older devices
AuthenticationSMTP AUTH (LOGIN or PLAIN)
Verify server certificateOff (recommended — see below)
Usernamefrom your dashboard, e.g. prn_ab12cd34
Passwordshown once when the printer is added (rotate any time)
"Verify Server Certificate" — turn it off. If your printer offers this option, switch it off. Your scan is still encrypted over STARTTLS; this setting only asks the printer to check our certificate against its built-in list of authorities, and printer firmware ships with old, un-updatable lists that often don't recognise modern certificates — so leaving it on makes some printers refuse to connect. Turning it off keeps setup working across every brand and firmware age. (If your device's certificate list is current and you'd rather keep verification on, that works too — our certificate is a standard, publicly trusted one.)
Ancient printer? That's fine — Scanhive accepts the oldest SMTP dialects and uses the strongest encryption your printer supports. From Scanhive onward, everything travels fully encrypted.

The From address

Whatever "From" your printer is configured with, Scanhive rewrites the sender to a verified domain so modern mailboxes accept it. The original sender is kept in Reply-To and the display name.

Recipients & allowlist

Scans are only emailed to addresses on your verified allowlist. When you add a recipient, they get a confirmation email; until they click it, that address is unverified.

A scan to an unverified email address isn't rejected at the printer — it's accepted and held, and shown in your dashboard so you can approve the recipient (which sends them the confirmation link). Once they confirm, the held scan is delivered automatically. This keeps Scanhive from being an open relay while never losing a scan to a cryptic printer error. The allowlist only governs email delivery — scans routed to storage, drives, or SFTP don't depend on it.

Destinations

A destination is a place scans can go. Add them in the dashboard under Routes:

TypeWhat it does
emailDelivers to the scanned-to address (or a fixed list) from a verified domain
vaultScanhive's own encrypted store — powers the web inbox and archive
s3Your own S3-compatible bucket
gdrive / onedrive / boxCloud drives, connected via OAuth
dropboxDropbox folder (access token)
sftp / ftpAny SFTP or FTP(S) server
webdavNextcloud, ownCloud, or any WebDAV server
paperlessPaperless-ngx document management
webhookHTTPS POST to your app, HMAC-SHA256 signed
slackA note in a Slack channel per scan

Destination credentials are encrypted at rest with a key unique to your organisation, and are never returned by the API once saved.

Routing rules

Rules decide which destinations each scan goes to. A scan can fan out to several destinations at once; a rule with no conditions matches every scan.

  • Applies to — every printer, or specific ones.
  • Subject contains — e.g. route scans whose subject contains invoice to your accounting inbox.
  • Priority — lower numbers evaluate first; a rule can stop evaluation when it matches.

File naming

Storage destinations support folder and filename templates with tokens:

{date} {time} {subject} {sender} {message_id} {filename} {stem} {ext} {n}

e.g. folder {date} + filename {date} {subject} {n}{ext}2026-07-21/2026-07-21 Invoice 1.pdf.

Security & GDPR

  • No open relay — every recipient is verified by double opt-in before delivery.
  • Antivirus — every attachment is scanned; infected messages are rejected, never delivered.
  • Deliverability — mail is sent from a verified domain with SPF and DKIM aligned.
  • Storage is opt-in — without a storage destination, scans pass through and are not kept.
  • Encryption — stored documents and destination credentials are encrypted at rest with per-organisation keys; transport is TLS end-to-end from Scanhive onward.
  • Tenant isolation — enforced in the application and again at the database layer (row-level security).
  • GDPR — data hosted in the UK/EU; audit trail per scan; DPA available on paid plans.

API

Everything the dashboard does is available at https://api.scanhive.net. Authentication is session-cookie based: POST /v1/auth/login, then send the cookie with each request. Multi-org accounts scope requests with an X-Org-Id header.

curl -c jar -X POST https://api.scanhive.net/v1/auth/login \
  -H 'Content-Type: application/json' \
  -d '{"email":"[email protected]","password":"…"}'

curl -b jar https://api.scanhive.net/v1/printers
AreaEndpoints
AuthPOST /v1/auth/register · login · login/mfa · logout · GET /v1/auth/me · password forgot/reset/change · optional TOTP MFA
PrintersGET/POST /v1/printers · DELETE /v1/printers/{id} · POST /v1/printers/{id}/rotate
RecipientsGET/POST /v1/recipients · DELETE …/{id} · POST …/{id}/resend
DestinationsGET/POST /v1/destinations · PATCH/DELETE …/{id}
RoutesGET/POST /v1/routes · DELETE …/{id}
ActivityGET /v1/messages?limit=50
UsageGET /v1/usage
TeamGET /v1/users · invites create/accept/revoke

Webhook deliveries are signed with HMAC-SHA256 over the request body using your webhook's secret; verify the Scanhive-Signature: sha256=<hex> header before trusting a payload.