1. A computer-implemented method comprising: receiving, by a document handling device, a request to perform a task on document data, the document data being associated with one or more physical documents received by the document handling device in a non-digital form; and in response to the document handling device receiving the request, performing the following: converting, by the document handling device or a server computing device, the document data into text using optical image recognition (OCR); determining, by the document handling device or the server computing device, whether the requested task violates a data loss prevention policy, the converted text being used when determining whether the requested task violates the data loss prevention policy; and recording, in an audit trail, information identifying the requested task and the document data, and an indication of whether the requested task violates the data loss prevention policy.