Secure file sharing for client and deal files
Shared drives and email attachments make it hard to say who can see a file, who opened it and which copy is current. Stowbill's Files module gives each firm folders with precise permissions, expiry dates on shares, full version history and a log of every access.
Six permission levels
Permissions are cumulative. Each level includes the ones above it. Set them on a folder and they apply to everything inside it, including subfolders.
| Level | Can do |
|---|---|
| View | Open and read files |
| Download | View, and save a copy |
| Upload | Download, and add new files |
| Edit | Upload, and replace or rename files |
| Delete | Edit, and move files to the recycle bin |
| Share | Delete, and share with others |
Nothing is lost by accident
- Every upload of a file keeps the previous version. Restore any earlier version.
- Deleted files go to a recycle bin for 30 days.
- A storage quota keeps usage predictable.
A record of every access
Each view, download and share is written to an append-only, hash-chained activity log. Export it to Excel. See the audit trail feature for details.
Security underneath
- AES-256 encryption at rest on Amazon S3.
- Upload checks that block programs and scripts. Antivirus scanning can be added on the Firm plan.
- Multi-factor authentication.
- Per-firm isolation enforced in the database.
Questions
Can I share with someone outside my firm?
Today, clients can upload through the client portal and sign through e-signature. Outside parties such as buyers and investors can also be given data room accounts, signing in with an emailed one-time link.
Do permissions apply to subfolders?
Yes. Permissions set on a folder are inherited by everything inside it.
What happens when a share expires?
The person or group loses access on the expiry date.
Can I recover a deleted file?
Yes, from the recycle bin within 30 days.
Can I stop someone downloading a file?
Inside the firm, give them the View level only. For outside parties, data rooms are view-only by default: PDFs open in a watermarked viewer with no download button. It cannot stop a screenshot, which is why each page carries the guest's name.
Where are files stored?
On Amazon S3, encrypted at rest with AES-256.
Last reviewed 10 November 2026. General information, not professional or legal advice.
Related
An audit trail that cannot be edited or deleted
An append-only, hash-chained log of every file view, download and share. The database blocks edits, and the ch…
FeaturesVersion control for working papers and deal documents
Check documents out and in with change notes, keep every version, restore old ones, and tie each sign-off to t…
SolutionsA virtual data room that sits inside your deal workflow
A virtual data room built into your deal workflow: permissioned folders, expiring shares, version history and …
SolutionsA due diligence data room with a full audit trail
A due diligence data room with an append-only log of every view, download and share, version history, expiring…
Run your next audit in Stowbill
Start a 30-day trial, or let us walk your partners through a live engagement.