Your files leave the building. Now they leave a trail.
SecureTrace is the safe way to send sensitive files — drawings, contracts, price lists, personal data — to suppliers, contractors and other outside partners. Every file has a label, a manager approves every send, links stop working on their own, and every step is written down.
- Hosted for you, or on your own servers
- Nothing to install for the people you send to
- Built around ISO 27001
Project D55-FL27 · files to send
door-panel-outer-rev-c.step
46.1 MB · owned by Aiman Yusof
stamping-die-layout-d55.dwg
12.2 MB · owned by Aiman Yusof
This release is
The highest label among the files. Nobody can send it as anything lower.
Each file gets a label when it is uploaded. A send takes the highest label among its files.
What you can send
Any file you can't afford to lose track of.
A drawing, a contract, a price list, a payroll export: the same rules protect them all. Every file gets a label, and the label decides how carefully it travels.
Engineering and design
CAD drawings, tooling specs, prototypes
Contracts and legal
Agreements in negotiation, NDAs, claims
Finance and pricing
Quotes, price lists, audit packs
People and HR
Payroll, employee records, benefits data
Marked as personal data: it only goes to partners cleared to hold it, always with a code and a watermark.
Customer data
Customer lists, service records, exports
Marked as personal data: it only goes to partners cleared to hold it, always with a code and a watermark.
Plans and tenders
Tender packs, roadmaps, board papers
The problem
Sharing files with partners shouldn't mean losing track of them.
Most sensitive files still leave by email, file-sharing links or USB drives, and none of them leave a record you could show an auditor. Flip the switch to see what changes.
- How a file is sentEmail, file-sharing links or a USB drive
- Who can open itAnyone it gets forwarded to
- How long it lastsFor ever
- How many copiesAs many as anyone likes
- What you can proveNothing you could show an auditor
- When the job is doneThe files stay with them
How it works
Five steps from your folder to their inbox, and back.
Your team uploads, a manager approves, the partner opens it with a code, and SecureTrace keeps the record the whole way.
Who it's for
One place for everyone who touches the file.
Each person sees only what their job needs. Nothing on screen that they can't use.
Your team
Upload files and send them to a partner in a few clicks.
- Project folders and revisions
- Search by project, owner or date
Managers
Approve or turn down each send from one inbox, with the facts beside it.
- Email when something needs you
- See the partner's agreement at a glance
Security and audit
Set the rules, look after the partner list and export evidence for an audit.
- Rule changes need two admins
- Tamper-evident audit exports
Partners
Get exactly the files they need, with nothing to install and no password to forget.
- A link and a one-time code
- Send marked-up files back the same way
Features
Rules the system enforces, not reminders people forget.
Each check happens on the server, at the moment it matters. When something is refused, the screen says why and what would fix it.
The right file to the right partner
A file in an Internal folder, going to a mid-risk partner, can only carry the labels in the middle. Anything else is stopped.
A record nobody can quietly edit
- #1041Transfer created9c1e…a47b
- #1042Agreement validated41d8…07e2
- #1043Approvede3b0…c442
- #1044Code verified7f2a…19dd
- #1045File downloadedb61c…8e05
Every row is sealed with the digest of the row before it.
Two people for the big decisions
Only the right person opens it
Odd downloads get flagged
Scanned coming and going
Encrypted where it's stored
Proof it was destroyed
ISO/IEC 27001:2022
Ready for the auditor's questions.
Every ISO 27001 control SecureTrace claims is matched to the feature that meets it and the record it keeps as proof. Where the software stops and your own processes take over, it says so plainly.
- Audit extracts you can hand over, sealed so any change shows
- A yearly policy review, with who did it and when
- Partner agreements tracked, and access stopped when one lapses
- Figures and a written summary for management review
Indicative, for proposal purposes. This is a mapping of what the software does, not a certification claim: certification is awarded to an organisation's ISMS, never to a product.
Start with what you need
Organise files first. Add partner sharing when you're ready.
The two halves share one file tree, so turning on sharing later moves nothing.
File organiser
Your team's files in one governed place.
- Folders by project and department
- Revisions, search, bulk download
- Access by project, set by an admin
- Audit trail and ISO reports
File organiser + partner sharing
Everything on the left, plus sending to outside partners.
- Partner list with agreements and risk tiers
- Approvals, expiring links and download limits
- Partner portal with one-time codes
- Destruction requests and certificates
Getting started
We set it up. Your team starts sending.
No IT project on your side. We host it for you, or install it on your own servers if you prefer. Either way, your files stay yours.
Hosted for you
We run it and keep it up to date. There is nothing for you to install.
Or on your own servers
If your policy keeps data in-house, we install the same product there.
Set up with your team
We load your projects and departments with you and train your first admins.
Works through email
Sign-in links and codes arrive by email. Nobody needs a new app.
Checks on a schedule
Access stops when a partner's agreement lapses, and odd downloads are flagged.
A checklist for your admin
The dashboard shows what is left to switch on, like virus scanning.
For your IT team: a single container with PostgreSQL and any S3-compatible storage, and sign-in email through Brevo or Amazon SES.
FAQ
Questions people ask before they start.
Including the ones about what SecureTrace can't do, because an auditor will ask those too.
Know where every file went.
Who sent it, who approved it, who opened it, and when their access ended. Try it and send your first file in a couple of minutes.