Repository Document Security

Secure sensitive documents stored in repositories

Overview

Organizations store vast amounts of critical documents in repositories like Microsoft SharePoint, IBM FileNet, or any ECM, EDM, ERP, or groupware systems. These storage environments are frequent targets of cyberattacks and insider threats, making it essential to implement continuous document protection beyond the repository’s boundaries even when files are shared externally.

To ensure persistent security, organizations need a solution that:

  • Encrypts sensitive documents automatically at the repository level.
  • Maintains security even when files are moved, copied, or downloaded.
  • Restricts access to authorized users only, preventing unauthorized use.
  • Tracks and monitors file activity to detect and respond to potential threats.

Why FED-R for Repository Document Security

  • Seamless Integration with Existing System

    Fasoo Enterprise DRM for Repository (FED-R) integrates effortlessly with enterprise content management (ECM) systems, file servers, and cloud repositories, ensuring that encryption and access controls align with existing workflows without disruption.

  • Persistent Encryption for Continuous Protection

    Documents are automatically encrypted in real time when uploaded or downloaded, ensuring that security stays with the file – even if it moves outside the repository.

  • Granular Access Control & Activity Tracking
    Administrators can define detailed usage permissions, restricting actions such as viewing, editing, printing, and extracting content. Every document interaction is tracked and logged, providing full visibility into file usage and potential security threats.

Key Features

Automatic File Encryption

Encrypt sensitive documents automatically as they are downloaded or saved on endpoints. Automatic data encryption can be enforced to selective file formats, including Microsoft Office, PDF, images, texts, source code, CAD applications and many more.

Different Access Control by Users/Groups

Apply different permissions such as view, edit, print, and screen capture to users and groups based on their permissions in the information system. Integrate with existing authentication systems so users use the same credentials they always use for document access. And with efficient security management and exception policies, the user's work is not affected.

Seamless Integration with Different ECM, EDM, ERP

Simplify the deployment process using API integration with different ECM, PLM, or other information systems, including Microsoft SharePoint, iManage, Egnyte, IBM FileNet, Laserfiche, and Alfresco.

Advanced File-Centric Security

Fasoo Enterprise DRM is the industry’s leading file-centric security solution, providing protection, control, and tracking of sensitive documents throughout their lifecycle. With advanced behavioral analytics and actionable insights, FED simplifies security management and delivers robust, adaptive protection for business-critical files.

Download our Fasoo Enterprise DRM white paper now!

Use Cases

Stop unauthorized use of confidential data

Manage confidential data during M&A deals

Protect data downloaded from information systems

Challenges

A former employee of Morgan Stanley pleaded guilty to stealing confidential data from about 730,000 customer accounts. He downloaded a report from an information system with names, addresses, account numbers, investment information, and other data to his home computer to work on it. While improperly accessing the information, he was interviewing for a new job with two competitors.

  • Your employees access sensitive and confidential customer information so they can do their jobs.
  • Once the data leaves the protected confines of an information repository, file share, or cloud-based service, your authorized users can share it with anyone, do anything with it, and compromise your customer’s confidential information.
  • You may be subject to regulatory fines, not to mention losing customers because they can’t trust you to maintain their confidentiality.
  • You need to persistently protect confidential data so that customer information is protected regardless of where it goes and who has it.

Solutions

FED-R protects customer information by encrypting files and applying persistent security policies to protect them regardless of where they are or their format, leveraging the existing controls in your information system.

  • Once the data is protected, you can safely share sensitive files through email, USB drive, external portal, or any cloud-based file-sharing site.
  • File access is tracked in real-time for precise auditing, and you can revoke access instantly.
  • Fasoo Enterprise DRM not only ensures that you meet financial regulations and safeguard customer confidentiality but also protects and controls sensitive information at rest, in motion, and in use.

Benefits

FED-R encrypts customer information to meet consumer and data privacy and protection legislation. Employees can securely share files internally or externally and control who can view, edit, print, and take a screen capture. They can limit access time and a number of devices, revoke access to shared files immediately regardless of location, and track and manage user and file activities in real-time.

Challenges

Mergers and acquisitions (M&A) transactions often involve intensive collaboration between investment bankers, lawyers, accountants, auditors, and other deal participants from various companies.

  • They share many confidential M&A documents, and it is crucial to safeguard them during and after the process.
  • Deal participants may download and share sensitive documents from a virtual deal room (repository) with non-participating members or other unauthorized users, deliberately or by mistake.
  • This could put your deal at risk. Once the M&A project is complete, all sensitive documents on local servers, cloud storage locations, and personal devices should be discarded.

Solutions

Fasoo Enterprise DRM for Repository provides data-centric security to secure virtual deal rooms.

  • All M&A-related documents in the virtual deal rooms are automatically encrypted at download; only specific groups can access the protected documents.
  • After closing an M&A deal, the deal room or other repository stores the final copies. 
  • The security administrator revokes all transaction documents on desktops, mobile devices, email, file servers, cloud repositories, and other storage locations, disabling user access to all other copies.

Benefits

FED-R encrypts deal information to meet data privacy and protection requirements. Users securely share files with deal participants, control who can View, Edit, Print, and take a Screen Capture of files, track and manage user and file activities in real-time, and revoke access to M&A transaction files immediately, regardless of location. FED-R also applies efficient security management/operations with exception policies.

Challenges

Organizations maintain relatively strong protection policies for documents in information systems using various security tools or techniques. When authorized users access these documents for legitimate purposes, they may save them as PDF files or share them in other formats.

  • These file derivatives are vulnerable to misuse and often overlooked as a source of a data breach.
  • Allowing authorized users to download sensitive documents while maintaining persistent protection of sensitive data is critical to protecting your customers and business.

Solutions

FED-R automatically encrypts and applies persistent protection policies to documents when saved (localized) to desktops.

  • When an authorized user downloads a document and saves it in PDF or other format, the file is automatically encrypted and only accessible by authorized users.
  • When a user copies the file to an external storage device or a cloud location or shares it through email, unauthorized users cannot access it.
  • This ensures your sensitive data remains in the hands of authorized users.

Benefits

FED-R encrypts customer or other sensitive information downloaded from information systems, enabling the company to meet data privacy and protection legislation. Users can control who can view, edit, print, and take a screen capture of sensitive files, including any derivatives or copies, and revoke access to shared files immediately, regardless of location.  The organization can track and manage user and file activities in real time, providing a sense of security and control over your data.

FED-R

Meet with an FED-R
Sales Representative

Brochure

Learn more about
Fasoo Enterprise DRM

Resources

FAQ

What is
Fasoo Enterprise DRM for Repository
(FED-R)?

Fasoo Enterprise DRM for Repository (FED-R) is a data security solution that secures files downloaded from document repositories, controlling them beyond organizational boundaries.

Digital Rights Management (DRM) describes the tools, systems, and data-centric process used to automatically encrypt files and control file access privileges dynamically of unstructured data at rest, in use, and in motion. In the consumer space, DRM aims to control the use, modification, and distribution of copyrighted material, such as computer software and multimedia files.

In business, Enterprise DRM ensures data-centric document protection inside and outside the IT perimeter and along an organization’s supply chain to protect sensitive information against theft or misuse by insiders and unauthorized access from the outside.

Data Loss Prevention (DLP) refers to a set of security strategies, tools, and techniques designed to prevent the unauthorized access, sharing, or leakage of sensitive data outside an organization’s network. DLP systems monitor and control data in various forms – whether it’s being used, transferred, or stored – across different devices or environments. By using predefined policies, DLP solutions identify and block the transmission of sensitive data like personal information, financial details, or intellectual property to unauthorized destinations, ensuring compliance with legal regulations and reducing the risk of data breaches.

DRM vs DLP

DRM and DLP are both security technologies but they focus on different aspects of data protection. While they may seem similar, understanding their core difference is key to choosing the right solution for your organization.

  • Focus Area

DLP primarily focuses on protecting sensitive data by preventing it from leaving the organization’s network. It aims to secure data in transit or at rest and ensure that confidential information doesn’t leak through channels like emails or external devices. DRM, on the other hand, provides a more comprehensive focus by protecting the actual content itself. DRM controls how data is used, accessed, and shared across its entire lifecycle – whether the data is inside or outside the organization. This makes DRM particularly effective in protecting intellectual property and sensitive information at every stage, regardless of its location.

  • Approach

DLP uses predefined rules to monitor, detect, and block sensitive data from being transferred or accessed inappropriately. It reacts to potential threats and enforces security policies to prevent data breaches. DRM takes a proactive approach, embedding protection directly into the content itself. DRM ensures that files, documents, and other digital assets are secure from unauthorized access or distribution, including setting permissions for viewing, editing, printing, and sharing.

  • Scope of Protection

DLP is effective at monitoring and restricting data flows within an organization. However, once the data is shared externally, DLP’s protection ends. DRM offers broader protection by securing data no matter where it travels. This makes DRM ideal for protecting sensitive data across multiple environments, including external collaboration platforms, email exchanges, and cloud storage.

To learn more, read Enterprise DRM and DLP: Comparison Made Simple.

Exito Cyber Security Summit 2025

March 20-21, 2025
Marriott Manila, Philippines

Join us at the expo floor to learn more about the Fasoo Zero Trust Data Security Platform and NextGen DSPM.

Keep me informed