Watermarks, screenshot blockers, and NDA gates. Which document controls actually work.
I tested every content protection feature available in the major document sharing tools. Some work exactly as advertised. Others are theatre. Here is what I found.
What is everyone actually using for client document sharing in 2026?
We are still emailing PDFs to most clients. No standard, no tracking, no visibility into whether anyone read what we sent. Curious what this community is doing.
How we use document open tracking for sales follow-ups. The actual workflow.
We stopped guessing when to follow up on proposals and started following the data. Open rate, time per page, repeat views — here is exactly how we set this up.
Benchmarking PDF compression across 8,000 files. Ghostscript won.
Storage costs pushed us to find a compression solution that could run at scale without per-document API costs. Ran every option through the same test set.
DocuSign renewal came in 40% higher. What we evaluated and where we landed.
Our team sends around 60 envelopes a month. The new price was hard to justify. Spent three weeks evaluating alternatives.
We audited our Google Drive after 4 years. 340 files were still shared with people who left.
Nobody had run a permission audit since the company started. When we finally did the results were uncomfortable.
Built a contract clause extractor with Claude. Six months later, here is what broke in production.
The demo looked great. Production was different. Sharing what broke, what we fixed, and the parts of the original approach we had to throw out entirely.
Our Series B data room was a mess. Here is what we changed before Series C.
First round we used Google Drive and nearly lost a term sheet over a permissions error. By round three we had a system. Sharing the folder structure and access tiers we landed on.
PDF redaction tools compared. Most of them do not actually work.
I tested eight redaction tools. Five of the eight failed — the text was still in the file. The ones that passed were not the obvious choices.
We sent a term sheet to the wrong investor. Full incident report.
Copy-paste error in a link-sharing flow. The wrong investor had access to a confidential term sheet for 11 hours before we caught it.
