In this article · 5 sections
Every business shares files: quotations, contracts, ID proofs, invoices, design files, website backups. Most of it travels through WhatsApp, email attachments or Google Drive links set to "anyone with the link". Secure file sharing is about choosing the right method for the sensitivity of the file.
Common risks
- Open links that anyone can open if forwarded or leaked
- Files sitting forever in WhatsApp chats on staff phones
- Wrong recipient autocomplete in email
- Sensitive documents (Aadhaar, PAN, bank statements) shared without need
- Former staff or clients keeping access to shared folders
Better practices
- Share with specific people, not "anyone with the link", in Google Drive or OneDrive
- Use expiring links and view-only access where possible; disable download for drafts
- Password-protect sensitive PDFs and send the password through a different channel
- Use your business account (Google Workspace / Microsoft 365) instead of personal accounts. See Microsoft 365 vs Google Workspace
- Review shared folders quarterly and remove old access. See offboarding checklist
- Collect, don't send: for ID documents, use a secure form with uploads that only authorised staff can view
- Mask what you don't need (e.g. show only the last 4 digits of Aadhaar)
- Delete sensitive files once the purpose is done. See DPDP Act basics
Choosing a method
| File type | Suggested method |
|---|---|
| Brochures, public price lists | Any channel, open link fine |
| Quotations, designs in progress | Named sharing, view-only |
| Contracts, invoices | Business email or named sharing |
| ID proofs, financial documents | Secure upload form or encrypted PDF, then delete |
| Website backups, database dumps | Private cloud storage, never public links. See website backups |
Website upload forms
If you collect documents through your website, store uploads outside the public web folder, check file types, and restrict access to logged-in staff. Joboo Web's own legal request form works this way.
FAQs
Is WhatsApp encrypted, so it's safe?
Messages are encrypted in transit, but files remain on phones and backups, and can be forwarded easily.
Are Drive links safe if nobody knows the URL?
"Anyone with the link" links can be forwarded or leaked. Prefer named access for anything sensitive.
Was this article helpful?
Your answer helps us improve our guides