Private document archiving: how to store files you can't afford to lose or leak

An archive is not a backup and not a shared drive

These get lumped together and they do different jobs.

A backup is a copy you restore after something breaks. A shared drive is a working space where files change daily. An archive holds documents that are finished: signed contracts, old proposals, tax records, closed-deal folders, board packs. They stop changing, but you still need to keep them and find them.

Mixing them is where the leaks come from. If your archive lives inside the same shared folder as live work, then everyone with access to the live work can open every confidential file you've ever stored. Separate them first. Everything else is easier once that's done.

Decide what goes in before you decide where it lives

Most archive projects stall on tooling when the real problem is that nobody decided what counts as archive-worthy.

I'd sort files into three piles:

• Keep and protect: contracts, financial records, anything with personal data, anything a regulator or client might ask for.
• Keep but don't worry: old decks, finished campaign assets, reference material.
• Delete: drafts, duplicates, "final_v7_REAL" and anything with no reason to exist.

The third pile matters for privacy more than people expect. A file you deleted on schedule can't leak. The retention periods for the first pile depend on where you operate and what the document is, so check them with an accountant or lawyer for your situation rather than guessing from a blog post, including this one.

What makes an archive private

"Private" gets used loosely. In practice it comes down to four things.

Pick tools for the job, not the brand

You don't need a data room to archive your own documents. Data rooms are built for deals, where many outside parties need controlled access to the same pile of files. For an archive, you need storage with good permissions and decent search.

The honest options for most people:

1. Cloud storage with proper permissions. Google Drive, OneDrive or Dropbox, set up with a dedicated archive folder and named access. The tools are fine. The permissions are where people slip.
2. Encrypted local or NAS storage. More control, more upkeep. Good for a small amount of very sensitive material.
3. A dedicated document management system. Worth it once you have compliance duties or enough staff that folder discipline fails on its own.

If you're comparing platforms for the sharing side as well, I wrote up ten secure file sharing platforms on what they do about encryption, permissions and what happens after someone opens a file.

Archiving and sharing are different problems

The moment an archived document has to go back out to someone, a new risk appears. You pull a signed agreement out of the archive and email it as an attachment, and now an uncontrolled copy sits in someone else's inbox forever. I covered that in is it safe to send documents over email, and the short version is: mostly no, not for anything sensitive.

Better to leave the master in the archive and send access to it. That's where sharing a document as a link beats an attachment, because you can switch the link off later. If the file is sensitive, my guide to sharing confidential documents goes through the options.

This is the one place I'd mention LiveDocument. It isn't an archive, and I'd be lying if I pitched it as one. It's not storage, not a document management system and not a data room. What it does is let you share a PDF or image file as a single link, with a video walkthrough attached if the document needs explaining, and set that link to expire or revoke it when you're done. So the archive stays the source of truth, and what goes out to other people is a controlled view of a file rather than a loose copy. For a lot of teams, that's the gap between "we store things safely" and "we share things safely."

Keep it alive with a small yearly routine

Archives rot. Not because the files degrade, but because nobody looks at them. Once a year I'd do four things:

• Remove access for anyone who no longer needs it.
• Delete what has passed its retention period.
• Open a few random files to check they still open and the backup copy matches.
• Move newly finished work in from the live folders.

That's an hour or two. Skip it for three years and you'll spend a weekend untangling it.

Where I'd start this week

If you've got nothing in place, don't build the perfect system. Create one folder called Archive, outside your day-to-day shared space. Limit it to the named people who genuinely need it. Move your signed contracts and financial records in first, then add a second encrypted copy elsewhere.

That one move gets you most of the privacy benefit. The rest is tidying.

FAQ