StowbillSecure document sharing for confidential work
Sending a contract or a set of accounts is easy. Knowing afterwards who has it, whether they forwarded it, and whether you can take it back is the hard part. This guide sets out what to look for.
Seven controls that matter
| Control | Why it matters |
|---|---|
| Named access | Each person signs in as themselves, so access can be given and removed one person at a time |
| Permission levels | View without download, upload without browsing, edit without sharing onward |
| Expiry | Access ends on a date without anyone remembering to remove it |
| Watermark with the reader's name | A leaked copy shows who it came from |
| Activity record | Who viewed, downloaded or shared each file, in a log nobody can edit |
| Encryption | In transit and in storage, so a copy of the disk is not a copy of the files |
| Two-step login | A stolen password alone does not open the files |
Match the method to the risk
A newsletter can go by email. A client's bank statements should go through a portal the client uploads to, with no account needed. Deal documents for outside buyers belong in a data room, with an NDA, a watermark and a record of every view. The more a leak would cost, the more of the seven controls you want.
In Stowbill
Stowbill has all seven: named accounts for staff and one-time sign-in links for outside guests, six permission levels passed down through folders, share expiry, watermarks on PDF, Excel and Word, a tamper-evident log, AES-256 encryption in storage, and two-step login. Deleted files stay in a recycle bin for 30 days.
Not available today: AI features, page-by-page viewing analytics, email and calendar sync, a mobile app, and SOC 2 or ISO 27001 certification. If you need one of these now, a larger vendor will suit you better.
Questions
Is email with a password-protected file secure?
It is better than a plain attachment, but the password usually travels by email too, and you still have no record of who opened the file.
What is the safest way to send documents to a client?
A portal or data room where the client signs in, you control what they can do, and every access is recorded.
Can I take a document back after sharing it?
You can remove access to a document that is viewed online. A file that was downloaded cannot be recalled, which is why view-only access matters.
Last reviewed 15 November 2026. General information, not professional or legal advice.
Related
Secure file sharing for client and deal files
Share client files with people or groups at six permission levels, set expiry dates, keep every version and lo…
FeaturesWatermarked, view-only documents under your firm's name
Every page a guest opens carries their name, email and the time. View-only access for PDF, Excel and Word, und…
GuidesHow to redact a PDF properly
A black box over text does not redact a PDF. Here is how to redact properly, how to check that it worked, and …
SolutionsA virtual data room that sits inside your deal workflow
A virtual data room built into your deal workflow: permissioned folders, expiring shares, version history and …
Run your next audit in Stowbill
Start a 30-day trial, or let us walk your partners through a live engagement.