Retail & logistics: protect your customers, data, and operations

The documents worth more than any single transaction, and that leave the company as a matter of routine: price lists and commercial terms, supply contracts and specifications, packing lists and shipping documents, customer records and delivery data. In retail, internal data is compromised in 84% of breaches, credentials in 26% and trade secrets in 20%; in transportation, internal data is at 84% and credentials at 27% (Verizon DBIR 2026). The goal is not to stop the file from leaving, since leaving is the work itself. It is to keep it encrypted, tracked and revocable after delivery.

By encrypting the file rather than the channel. With FileGrant the document is created encrypted inside a vault and shared through a link with RBAC permissions set separately for each carrier, subcontractor and customer, expiry tied to contract duration, and blocking of downloads, printing and screenshots. Every open lands in an audit trail with user, timestamp and IP. When the relationship ends, access is revoked without needing the file back. That is the direct countermeasure to the DBIR 2026 finding that 68% of retail breaches run through a third party.

NIS2, transposed in Italy through Legislative Decree 138/2024, classifies rail networks, local public transport, long-distance bus operators, sharing platforms and logistics companies as essential or important entities. It requires structured governance, continuous monitoring, supply chain risk management and rapid incident notification, moving accountability from the IT department to the board. In practice that means demonstrable measures: encryption proportionate to risk, access control, exportable audit trails. The 2025 ransomware attack on Italy's state railway group, which hit ticketing and passenger displays, is exactly the kind of event the directive exists to prevent and record (Clusit Report, March 2026).

Blocking public tools without offering an alternative does not work: the work moves to channels with even less visibility. 45% of employees are now regular users of AI tools on corporate devices, up from 15% the previous year, and 67% use non-corporate accounts (Verizon DBIR 2026). FileGrant blocks content scraping by public AI systems and classifies documents automatically; AIGrant provides on-premise private AI that answers questions on price lists, procedures and contracts without data leaving the network, segregated by department and by brand. The cost is measured: shadow AI adds an average of 670,000 dollars to a breach (IBM Cost of a Data Breach 2025).

It means using algorithms that resist a future quantum computer. The reference is CRYSTALS-Kyber, standardised by NIST as FIPS 203 (ML-KEM) on 13 August 2024. It matters to retail and logistics today because of "harvest now, decrypt later": an attacker stores encrypted files now and decrypts them once the technology exists. Multi-year contracts, supply agreements and customer records have a useful life longer than conventional encryption can guarantee. FileGrant's Lock&Go encryption applies CRYSTALS-Kyber to downloads, so the file stays protected outside the platform too.

No. FileGrant and RemoteGrant sit alongside the tools already in place and cover what those tools do not: persistent encryption that follows the file outside corporate systems, revocation of access after sharing, screen capture blocking, protection from AI scraping, and an audit trail usable in a NIS2 audit. WMS, ERP, SharePoint and the e-commerce platform remain where the document lives; CyberGrant is what protects it when it leaves. On-premise deployment with zero-knowledge keys is available. Worth noting that encryption is among the measures that reduce breach cost the most, 208,087 dollars below the global average of 4.44 million (IBM Cost of a Data Breach 2025).