Rhea

Shared Access Control

Sharing is an access decision, not a copy operation.

Give named members access to protected folders and files, change that access later, and keep a record of who was given what.

Status: Available today

The model

Access is granted to people, not to URLs.

  • Members are added to a protected folder or file by name, not by circulating a token.
  • Access can be changed or removed after the fact, and the change applies to future reads.
  • Member additions, removals and file access are recorded as evidence.
  • An administrative role manages membership. It does not confer the ability to decrypt another member's document.

LimitationRemoving access prevents future authorized reads. It cannot retract material a person already decrypted and kept.

In the product

Membership and access history.

Product captureRED shared access panel showing folder members, their access level and recent access events.
Status: Available todaySynthetic data
Shared folder membership with recorded access. Capture uses synthetic data.

See it against your own environment.

Connect your own storage, protect a document, and read the recorded evidence yourself.