SECURITY APPROACH
Protection with
clear boundaries.
Cipherleaf combines controlled viewing, encrypted storage, and attributable access. Here is what those safeguards mean.
Protected storage and delivery
Documents are converted to page images and divided into independently encrypted AES-256-GCM tiles. Source uploads are not retained after processing. The reader receives short-lived, identity-watermarked fragments rather than the original source file.
Permissions checked as you read
Account validity and document permissions are enforced together. Revocation and permission changes close affected views. Short-lived sessions renew only while access remains valid.
Accountability in the visible document
Server-applied identity marks and animated watermarks attribute the reading experience. Activity records help administrators investigate access and changes.
Visible information can still be captured
No browser application can guarantee that a reader cannot photograph a screen or reconstruct visible content. These safeguards deter redistribution, add attribution, and restrict routine source-file disclosure. They do not promise screenshot prevention.
Exports require separate care
Administrator-generated exports leave the controlled viewer. Handle exported files and their passwords according to your organisation’s policy; revoking online access does not recall a downloaded PDF.