SECURE DOCUMENT SHARING FOR LAW FIRMS AND LEGAL ADVISORS

Working documents, before client records. In breaches against professional services the most frequently compromised data is exactly that: memoranda, correspondence, draft contracts and internal material, present in 80% of cases, followed by credentials at 31% and personal data at 14% (Verizon DBIR 2026, NAICS 54). Incidents against the sector grew 91% worldwide in 2025 (Clusit Report, March 2026). The operational priority is therefore to encrypt case files at creation and keep them tracked and revocable after they leave the firm, because leaving is part of the work: the document has to reach the client, the counterparty, the expert witness.

By encrypting the document rather than the channel. With FileGrant the file is created encrypted inside a vault and shared through a link with role-based permissions: who can read, who can download, who can re-share. Expiry is tied to the duration of the engagement, and download, printing and screen capture can be blocked. Every open lands in an immutable audit trail with user, timestamp and IP. If the relationship ends or the document went to the wrong recipient, access is revoked without retrieving the file: the number of copies already downloaded is irrelevant, because authorisation is managed independently of the physical copy.

A Virtual Data Room is an encrypted environment for sharing confidential documentation with counterparties, advisors and investors for the duration of a transaction. FileGrant creates white-label VDRs branded with the firm's identity: each participant sees only authorised documents, every access is logged, and when the deal closes the room closes in a single operation, revoking access to everything already downloaded. This is the use case described in the M&A advisory case study, where managing the data room cut handling time by 40%.

With CyberGrant Connector, which is an extension of FileGrant rather than an alternative to Microsoft. Documents stay where they are, users keep their Microsoft login and their habits, and every uploaded file is automatically encrypted with quantum-safe encryption. Encryption is zero-knowledge, so not even Microsoft tenant administrators can read the documents, and files open only on authorised devices. Connector also covers the non-Office files Microsoft Purview leaves unprotected, and encrypted files are unreadable to any AI, Copilot included. No migration, no replacement of SharePoint, OneDrive or Purview: it adds the file-centric encryption those tools do not provide.

Banning public tools without offering an alternative does not work, because the work moves to channels with even less visibility. Shadow AI adds an average of USD 670,000 to breach costs (IBM Cost of a Data Breach 2025). The setup that holds has two parts: AIGrant provides on-premise private AI that analyses, summarises and searches across pleadings, memoranda and contracts without a byte leaving the firm's network, with answers limited to documents the user is authorised to see; FileGrant blocks content scraping by public AI and classifies documents automatically. The topic is covered in Shadow AI and confidential data.

GDPR Article 32 explicitly cites encryption, access control and logging as measures appropriate to the risk when handling personal data. CNF professional rules add the duty of professional secrecy, which today translates into verifiable technical measures rather than a contractual clause alone. NIS2, transposed in Italy through Legislative Decree 138/2024, applies to firms within scope, including as suppliers to essential or important entities: ACN Determination 127437 of 13 April 2026 sets the operational requirements, due October 2026. In practice three things must be demonstrable in an audit: encryption proportionate to risk, documented access management, and an exportable audit trail.

It means using algorithms designed to resist a future quantum computer. The reference is CRYSTALS-Kyber, standardised by NIST as FIPS 203 (ML-KEM) on 13 August 2024. It matters to a law firm now because of "harvest now, decrypt later": an attacker stores the encrypted documents it manages to take today and decrypts them once the technology allows. A litigation file, a multi-year contract or the documentation of a transaction easily has a useful life beyond ten years, longer than conventional encryption can guarantee. FileGrant's Lock&Go applies CRYSTALS-Kyber to downloads, so the document stays protected outside the platform too.