The file leaves.
It can be saved, forwarded and re-sent. You cannot expire it, revoke it or know which copy was opened.
Control ends at sendSecure document sharing
Share in seconds. Stay in control after send.
Create a personal link for the exact recipient, require verified email, decide what can leave the room, and close access without chasing a file.
No attachment · No public folder · No credit card
Data Room · New linkEffective policy
01
Name the recipient instead of sending one shared URL.
02
Verify the email before any protected material loads.
03
Set an expiry, or revoke the link immediately.
04
Control downloads, print, watermark and screenshots.
01 — The access model
Convenient to send. Specific about who opens.
The important difference is not another copy of the document. It is a live access policy wrapped around the original material.
The URL becomes the permission.
Anyone who finds or receives the same URL can look like the same anonymous visitor.
Fast, but identity-blindThe recipient and rules travel together.
Name the audience, verify email, add expiry, keep downloads off and see each session on the same link record.
Access stays live and editable02 — Effective policy
The strictest rule wins.
RoundOS resolves access across the workspace, the published room, groups, sections, individual items and the link itself. A personal link can tighten the room policy; it cannot quietly weaken it.
Workspace baseline
Set defaults for downloads, screenshot deterrence and automatic expiry across new links.
Published room preset
The room defines the minimum gates. Links inherit required verification, NDA, watermarking and download limits.
Groups and content
Give one group access to a section, hide another, and keep a specific file view-only even when the rest can be downloaded.
Personal link
Add a recipient email, allowlist or blocklist, password, expiry, print setting, version policy and stricter link-level controls.
Personal by design
One link for the audience you intended, not one URL for everyone it reaches.
03 — Link lifecycle
Access has a beginning, a record and an end.
A link is not an email campaign. Create it, copy it when ready, and keep the full access history attached to the link you sent.
Choose the audience and target.
Share a room or a direct document. Name a person, a fund, a domain or a generic audience.
Prove identity before entry.
Email verification, NDA, password, allowlists and manual approval can run before protected material appears.
Keep access and activity together.
See verification, opens, sessions, documents viewed, downloads and suspected forwarding on the link record.
Expire, revoke or reactivate.
End access immediately. A revoked link can be reactivated later after its expiry is made valid again.
04 — Forwarding
If the link moves, the record changes.
A verified-email gate can stop an unexpected address. New device, IP and visitor patterns can also surface suspected forwarding instead of folding the activity into the original recipient.
Link activity · Bessemer · IrisIdentity state
Recent accessPersonal link · verification on
↓
Financial model downloadedAllowed by group and item policy · recorded 14:08
Logged?
Link opened from a new deviceParis · different visitor identity · possible forward
Review×
Different email did not pass the gateMaterial stayed closed; access request remains separate
Denied05 — The record after send
Security that leaves useful evidence.
Controls and analytics sit on the same link. You can tell not only that access was protected, but how the protected material was used.
Verified email status, visitor, company, device and session continuity.
Gate events, approval state, NDA signature, expiry and revoke history.
Documents opened, pages seen, time spent, completion and return visits.
Downloads, new-device opens and suspected forwarding appear in context.
06 — FAQ
Questions worth answering.
01Does a recipient need a RoundOS account?
No. They open the link in a browser and pass only the gates you selected, such as verified email, NDA, password or approval.
02Does creating a link send an invitation automatically?
No. RoundOS creates and copies the secure link. You decide when and where to send it.
03Can I control download and print separately?
Yes. Print is a link setting. Download access is resolved across workspace, room, group, section, item and link policies, so a stricter rule can protect one file without opening everything else.
04Can I reopen a revoked link?
Yes. Reactivate it when needed. If the link has already expired, set a future expiry or choose no expiry before reactivating it.
05What is different from a password-protected PDF?
A PDF password travels with the file and cannot show you what happened. A RoundOS link can verify identity, expire, revoke, watermark, limit download and keep a session-level access record.
Close the loop
Share now. Keep the off switch.
Create the personal link in minutes and keep every rule editable after it leaves your inbox.
No credit card. Live in minutes.