Retrieving scans externally

Retrieving scans externally

Scans can be retrieved by constructing a link (URL). This link has a limited validity period to minimize the risk of unauthorized access to the scans.

For customers that are migrated to our new tex trecognition technology Smartscan for PDF invoices:

The URL must be constructed in the following format:


'customer'-  This is a fixed value for each customer, typically the name of the customer in lowercase letters. This value is provided by Visma | ProActive.

'file' - This is the file you want to retrieve. It is the original document number (without periods in the number) with _org.pdf appended.

'time' - This is either the Unix timestamp or the time in the format YYYYMMDDHHMMSS at the moment the link is generated. This time, in the chosen format, must also be used to create the checksum.

checksum: This is the SHA-1 hash of the string consisting of the file, time, and a password hash (in that order).

The password hash (provided by Visma | ProActive) is the part that is not transmitted in plain text and is known only by us on both sides. These links are valid for 3 minutes, determined on the server using the time that is sent. The server is synchronized with a time server every hour, so it is important to keep the server where the links are generated relatively synchronized as well.

For customers that are not yet migrated to our new text recognition solution:

The URL must be constructed in the following format:


'customer'-  This is a fixed value for each customer, typically the name of the customer in lowercase letters. This value is provided by Visma | ProActive.

'file' - This is the file you want to retrieve. It is the original document number (without periods in the number) with .pdf appended.

'time' - This is either the Unix timestamp or the time in the format YYYYMMDDHHMMSS at the moment the link is generated. This time, in the chosen format, must also be used to create the checksum.

checksum: This is the SHA-1 hash of the string consisting of the file, time, and a password hash (in that order).

The password hash (provided by Visma | ProActive) is the part that is not transmitted in plain text and is known only by us on both sides. These links are valid for 3 minutes, determined on the server using the time that is sent. The server is synchronized with a time server every hour, so it is important to keep the server where the links are generated relatively synchronized as well.