SecureFile Persistent protection for sensitive files

Protection that travels with the file.

Files get copied, emailed, synced and saved to USB drives. SecureFile encrypts the sensitive data inside them and carries the access policy along, so control doesn't end when the file leaves the folder.

Book a demo → Product brochure

Q3_member_export.xlsx

Classified: PII · Restricted

Owner
Finance
Policy
need-to-know
Retention
7 years

  1. Saved to file server

    \\fin-share\reports

    Encrypted

  2. Copied to a laptop

    a.smith · endpoint

    Still encrypted

  3. Saved to a USB drive

    Portable media

    Still encrypted

  4. Opened by an unknown user

    Outside the organization

    Still encrypted

  • Persistent protection

    Files stay encrypted wherever they move.

  • Access control

    Control who can access, share, edit and download.

  • Visibility & audit

    Track file activity with a complete audit trail.

  • Work anywhere

    Cloud, hybrid and on-prem environments.

Protects files across the tools you already use

The problem

Folder permissions stop at the folder.

Sensitive data lives in contracts, spreadsheets, PDFs and exports, and those files don't stay put. SecureFile protects the information inside the file, not only the place it started.

When a file is... Folder permissions alone With SecureFile
Copied to a desktop Control is lost with the copy Still encrypted, policy still applies
Emailed to a contractor Anyone with the attachment can open it Opens only for authorized identities
Saved to a USB drive Readable on any machine Unreadable without authorization
Uploaded to personal cloud Outside IT's visibility Access tracked and auditable
Stolen in a ransomware attack Sensitive contents exposed Exfiltrated files stay encrypted

  • Copied to a desktop

    Folder permissions alone
    Control is lost with the copy
    With SecureFile
    Still encrypted, policy still applies

  • Emailed to a contractor

    Folder permissions alone
    Anyone with the attachment can open it
    With SecureFile
    Opens only for authorized identities

  • Saved to a USB drive

    Folder permissions alone
    Readable on any machine
    With SecureFile
    Unreadable without authorization

  • Uploaded to personal cloud

    Folder permissions alone
    Outside IT's visibility
    With SecureFile
    Access tracked and auditable

  • Stolen in a ransomware attack

    Folder permissions alone
    Sensitive contents exposed
    With SecureFile
    Exfiltrated files stay encrypted

Capabilities

Everything you need to find, protect and prove control of sensitive files.

  • AI-assisted discovery & classification

    Find sensitive documents automatically with AI and pattern matching, including PII, financial records, contracts and intellectual property.

    Member Ana Ruiz, SSN 512-55-0141, approved for a $42,000 loan at 6.1% under the Master Services Agreement §4.2. Account •••• 7745.

    • PII 2
    • Financial 3
    • Contract 1

    Restricted

  • Need-to-know permissions

    Granular policies down to the file, folder or field level, and they travel with the file.

    View Edit Download Share
    Finance
    Auditor
    Contractor

  • File catalog & data retention

    A central catalog of sensitive files with classification, ownership, retention policies and legal holds.

    File Class Owner Retention
    MSA_Acme_2026.docx Contract Legal Legal hold
    Q3_member_export.xlsx PII Finance 7 years
    loan_8841.pdf Financial Lending 5 years

  • Audit & access logs

    See who accessed what, when and what they did, ready for compliance and investigations.

    User Action File Where
    j.doe Viewed MSA_Acme_2026.docx SharePoint
    a.smith Downloaded Q3_member_export.xlsx Endpoint
    unknown Open denied Q3_member_export.xlsx USB

  • Ransomware resilience

    Copies, downloads and exfiltrated files stay encrypted on any endpoint, server, collaboration platform, cloud store, email attachment or USB device, so stolen files don't expose their sensitive contents.

    What your team sees

    Member Ana Ruiz, SSN 512-55-0141, approved for a $42,000 loan…

    What an attacker gets

    Ry9kFo4sE1·h2Wb·Dz6q·ZmBk4Gv2·Qw3e7Yc1Hs8·Lp4z07r6Kn5…

Built for how you work

Security that doesn't slow collaboration down.

  1. Persistent protection

    Sensitive data in files stays encrypted, so protection goes wherever the file goes.

  2. Fine-grained access control

    Identity-based access means each user sees only what they're authorized to see.

  3. Operational simplicity

    Policies apply automatically in the tools people already use, so teams keep working the way they do today.

The OnData platform

Protect every place sensitive data lives.

  • SecureDB

    Runtime encryption and need-to-know access for the databases your files are exported from.

    Explore SecureDB

  • SecureAI

    Keep sensitive documents protected when AI assistants and RAG systems use them.

    Explore SecureAI