Safeguard Enterprise PDF DRM protects PDF documents regardless of where they are stored or who they are sent to. It enforces the security policy governing their use, and allows you to dynamically change access – even after distribution.
Safeguard Enterprise PDF DRM
Enterprise Rights Management for PDF Files
Safeguard Enterprise PDF Security is PDF DRM software for corporate enterprises & large publishers.
It has all the features of Safeguard PDF Security (stops unauthorized distribution of files, copying, modifying, printing, screen shots, expiry, revocation, dynamic watermarks), plus additional features and security controls – document logging, IP restriction, flexible license checking and transfer, and reports.
Safeguard Enterprise PDF DRM delivers enterprise rights management for PDF documents. It supports the larger publisher or corporate enterprise that needs additional functionality and flexibility for controlling document use. It provides PDF DRM protection without passwords, and enables publishers to track how their documents are used. Stop unauthorized distribution of PDF documents and files, control what users can do with them, how long they can be used, and log use.
Protect PDF files from unauthorized:
You can enforce:
Lock PDFs to devices
Lock PDF documents to:
or enable Web Viewer use (no installation) for viewing protected documents in a browser on any Operating System.
Let users transfer their licenses from one device to another. So, for example, if device A is no longer used then device B can be used instead (a transfer from device A to device B will deactivate the license on device A and activate it on device B).
Safeguard Enterprise PDF DRM protects PDF documents regardless of where they are stored or who they are sent to. It enforces the security policy governing their use, and allows you to dynamically change access – even after distribution.
Enterprise PDF DRM lets you log when user’s:
so you can keep a secure audit trail of who is using your documents and when, and whether users are trying to register licenses from unauthorized locations (i.e. users are sharing them with others).
A country flag is displayed for each user registration so you can see at a glance any unusual activity.
Administrator events are also recorded so you have a log of what changes were made (i.e. user A was given an extra license).
If you are looking for a secure alternative to PDF password protection, want total control over how your PDF documents are used, want to enforce where they are used, and log what users are doing with them, then purchase Safeguard Enterprise Rights Management.
Safeguard PDF Security lets you create secure PDF files that:
|have stronger protection than passwords;|
|cannot be copied or shared with unauthorized users;|
|are locked to specific computers or USB sticks;|
|cannot be screen grabbed;|
|can be dynamically watermarked with user details - name, email, company, date/time;|
|can be print controlled - stop prints, limit prints, or allow unrestricted printing;|
|can expire after a number of views, days, prints, or at a fixed date;|
|can be revoked at any time;|
|can be viewed both online and offline;|
|can be logged so you can see who opened/printed them and when (Enterprise PDF DRM only);|
|can be restricted to specific countries and IP ranges - i.e. can only be opened within the USA and inside the office (Enterprise PDF DRM only);|
|can be customized with your own welcome*, unauthorized use, and expiry messages*, and splashscreen. (*Enterprise PDF DRM only)|
For a complete overview see Features Summary.
|Complete pdf protection and control of document usage|
PDF protection that enables you to prevent, allow or control the following functions:
|PDF protection that is simple to use|
Safeguard's PDF protection provides complete PDF protection for even the most novice of users. Protecting PDF documents couldn't be simpler.
To protect PDF documents, right click on them in Windows Explorer and select the secure PDF document access rights (use of printing - including how many times, etc.), press the OK button and your PDF files are instantly protected (PDF files are encrypted and document usage rights applied). PDF documents can be published on their own or assigned to publications for simple administration.
Multiple PDF files can be selected in Windows Explorer and you can choose the same PDF protection usage and access rights in one click. Or you can automatically batch protect PDFs without user intervention using our pdf command line encryption tool.
Distribute your protected PDF documents just like any other file - upload them to your web site or send them out on CD-ROM, DVD, etc., knowing that they will always be secure. Dynamic document control maintains access rights and permissions assigned to a secure PDF document once it has been published and distributed.
|Batch PDF protect - no user input required|
Batch PDF file protection enables you to effortlessly batch protect PDF documents without user intervention. See optional pdf command line encryption.
Safeguard's PDF protection Command Line Utility allows the automation of actions that would otherwise have had to be carried out manually whilst protecting PDF documents through the Writer GUI. Commands can be run from the DOS prompt or a batch file without the need for manual input or user intervention. All the PDF protection options available through the Safeguard Writer GUI can be accessed through the command line utility.
This PDF protection feature can also be used by organizations internally to rapidly protect documents for secure distribution and to control what DRM protection features are made available to sub-administrators.
|Unique concept of publications makes document management simpler|
Use of publications ensures minimum administration overheads and enables you to effortlessly manage your user base. The concept of the publication is a way of associating documents that are logically related. Different enterprises may see this in different ways:
So being able to bring together collections of documents to create a publication, makes the administration of connected documents easier for the publisher, and makes those documents automatically available to authorized users.
If you choose to publish your PDF documents as separate items, then each one will have it's own encryption key. However, where users are purchasing subscriptions to publications they expect to register their subscription once and then be able to read each issue as it arrives. Also, you as the publisher may find it easier to associate documents with publications.
To meet this operational flexibility, if PDF documents are protected as something in a publication, the encryption key of the publication is used to protect it rather than generating a new random key. This means that the user is able to immediately use a new issue regardless of how you ship it to them (eMail, flash card, CD-ROM for instance), and without you having to grant individual access to that document on the administration system. Of course if you send them a protected PDF document that is not part of a publication that they have been granted access to then they will have to connect to the administration server to retrieve the new key. And if you set the rules so that they must connect before using your protected PDF documents then that will be enforced.
Safeguard enables you to manage your subscription base effortlessly by providing individual publication expiry on a per user basis - you can expire a user's access to different publications at different times, and manage this all from a single user account. With Enterprise PDF DRM you can also choose when the document expiry message (or redirection to a URL of your choice) is displayed (e.g. 15 days before a document expires), giving users ample time to renew their subscriptions.
|Document watermarking with dynamic variables|
For additional PDF protection against photos or photocopies being taken, you can add custom text, system data, and image watermarking to a document. This is displayed when a protected PDF document is printed and/or viewed in the Secure PDF Viewer software. The following items can be displayed - images, custom text, system data (date/time, user name, company name, email address).
System data is dynamically applied when the protected PDF document is displayed and/or printed, ensuring you only ever have to protect a document once in order to customize it for multiple users.
Watermarks can be prevented from displaying on the first page of your documents (useful if you want your cover page and branding to appear unmarked whilst the rest of the document is watermarked) and behind or in front of your PDF content.
User information can be displayed to deter photocopying, and the use of moiré images (available for free download from the Locklizard web site) can be used to ensure photocopying produces extremely poor quality copies.
|User and document expiry, including instant revocation for previously distributed documents and
persistent version control
Safeguard's PDF protection gives you total control over when user accounts expire and when access to your PDF documents expire. You may want to, for example, give users access to documents during a specific time period, and let them be able to view those documents in the future, but not access any new ones you publish.
You can set user accounts to expire to enable time limited trials and control subscription services.
Safeguard's PDF protection enables you to control expiry to your publications on an individual user and publication basis. Users, for example, may have subscribed to one of your publications for a year, and all documents in that publication are accessible to them for a year. After a year, they will still be able to view their existing documents, but not any new ones that are published after their subscription period has ended, unless of course they subscribe for an additional period. Users can be given access to multiple publications, each with their own expiry period.
Expire documents on a certain date, after a number of days, after a number of views, or after a number of prints.
Safeguard's PDF protection also enables you to control document expiry (PDF expiration). Regardless of a users subscription to your publications you may have certain documents that are time sensitive and must not be usable after a certain date. It also means you can sell documents that are accessible for a limited time period at a lower cost, rather than being available forever, enabling you to reach new markets that are price sensitive. You can be sure that those users can only view a protected PDF document for a day or a week, or whatever you choose. This PDF protection feature also ensures that only the authorized or current versions of documents are used after publication because obsolete versions can no longer be accessed.
Protected PDF documents can also be set to automatically expire once a specified number of views and/or prints have been reached. You can specify both an expiry date and a number of views (e.g. 10 views and expiry 5 days from first use) and whatever expiry option is reached first will cause the document to expire.
Instant user and document revocation - terminate access to protected PDF documents instantly.
With Safeguard's PDF protection you can force users to connect to the administration server (happens transparently) before they can view your protected PDF documents. This can be every time they want to view your protected PDF documents or after a certain number of days. If you choose a number of days then after the length of time you set has passed users must go back online to gain further access.
Using this PDF protection option you can instantly revoke user access to previously distributed documents as the access approval required to view your protected PDF documents is instantly expired.
|Complete off-line PDF protection|
Your controls are locked into each protected PDF document so there is no need for users to connect to the Internet in order to view your protected PDF files (assuming of course that they have the correct decryption key stored on their computer).
Whether you want users to connect to the Internet or not to use your protected PDF documents is a decision you make when protecting your PDF documents.
With Enterprise PDF DRM, if you do force users to connect to the Internet every n days, then you can also specify a grace period (so verify document access every 10 days with 3 days grace period). This means that if a user opens a document in say 15 days time at a location where no Internet access is available (on a plane, boat, etc.) a message will be displayed telling them they have now 3 days before they must connect to the Internet rather than document access being denied. Or you can enforce access after so many days and then never again - say 30 days to make sure no charge backs have been made and you therefore need a certain time period available to revoke document access.
|PDF print control - PDF print protection to stop or limit printing|
Safeguard's PDF protection gives you complete control over printing of your protected PDF documents. Stop printing of your protected PDF documents on Windows, Mac or all operating systems.
If you decide to allow printing you can control how many times your protected PDF documents can be printed. Document access can be automatically revoked once this number has been reached.
You can enable document printing on a document or individual user basis and change print controls even after publication. Documents can be protected without printing enabled and prints granted on an individual user basis.
With Enterprise PDF DRM you can log whenever a user prints a document.
Safeguard's Secure PDF Viewer automatically prevents printing to file, email, PDF format (Acrobat distiller, etc.), common image printers, etc.
|License & Document location management|
With Enterprise PDF DRM you can restrict the countries and location(s) from which your secure PDF documents can be used.
Our geolocation security enables you to allow or block specific country access and record the country a user registers from so you can quickly see at a glance any unusual or suspicious user activity.
With IP restriction, you can tie registration and document usage to a single IP or range of IP addresses on both a global and user basis, further locking down PDFs to controlled environments.
If you use Enterprise internally, then this is a great way of preventing internal users sharing their licenses with outsiders, or for making sure that only specific third parties can register from known country locations. It also ensures that users who register on a laptop from say an approved location (e.g. the office) cannot then take their laptop home (a non-approved location) in order to view secure documents there. You can therefore prevent sensitive documents from being taken outside your organization.
You can suspend individual licenses to prevent users from continuing to view secure documents on specific computers. For example, if a user tells you they have purchased a new computer and will no longer be using their old one, then you can prevent them from continuing to view secure PDF documents on that computer, and also from registering licenses on that computer in the future.
Not only does Safeguard PDF Security enable you to select multiple user accounts to perform specific actions on (e.g. giving several users access to one or more new publications or documents you have published), but Enterprise PDF DRM also provides a batch change feature to enable you to perform specific actions on ALL your user accounts in one go. This provides a quick way of updating user accounts without you having to manually select individual or multiple accounts to perform specific actions on.
The following batch changes are available:
|Company Branding - customizable message text and image options|
When you set up user accounts on the administration server, users are automatically sent an email to the address you entered with a download link to the Secure PDF Viewer software and their license file. This email is automatically customized with your company name and email address in it so users know who to contact if they have any problems accessing your PDF documents.
You can further customize this email with your own text and logo by purchasing your own Custom Viewer Registration Email.
You can also use your own SMTP server so that emails are sent from your own domain name.
You can specify the text that will be displayed if a user does not have the correct decryption key present to view your protected PDF documents - e.g. where they can purchase a license from or who to contact.
With Enterprise PDF DRM you can also re-direct users to a web page instead of displaying a message.
With Enterprise PDF DRM you can customize the text that is shown when your protected PDF documents expire (or alternatively you can redirect users to a web page where this information is displayed), and choose to have this text displayed when your documents expire or n days before. The expiry date can be dynamically inserted when the message is displayed.
With Enterprise PDF DRM you can re-direct users to a web page the first time they open your document or ebook (e.g. "Thank you for buying... In case of any difficulties... Other books we sell... etc.") .
Each time a protected PDF document is loaded, a splash screen can be displayed. You can insert your own image here (say your company logo and maybe a brief message) to customize Safeguard's PDF protection to represent your company image. With Enterprise PDF DRM you can also specify how long this is displayed.
With Safeguard PDF Security you can require protected PDFs to open in particular formats, and can prevent users from being able to change to another style of presentation. This allows you to enforce your own house style and appearance.
You can brand the Windows Viewer and Web Viewer with your company logo - see Publisher Own Branding.
|Web based administration|
Safeguard PDF Security comes with its own simple to use web-based administration system, enabling you to control and revoke access to your secure PDF documents in real-time even after distribution.
Once you have protected PDF files, it is a simple matter of setting up users on the administration system (user name, company, email address) and allowing them to use one or more of your publications or documents. Each protected PDF document that belongs to a particular publication will then be accessible to all users that have subscribed to that publication.
The administration system can handle a large number of users, documents, and publications, and you can perform actions on multiple users, documents, and publications in one go, and has advanced search and sort filters to help quickly find information (e.g. just show all expired documents). Safeguard records all the document protection options for each individual document on the administration system, and you can customize record displays, add and edit descriptions. For extra security, a manual logon/logoff process is used.
|Data import / export|
You can import user data into the Locklizard Administration system, and export user, document, and publication information to separate CSV files.
With Enterprise PDF DRM you can choose to export all the available information, or just subsets - for example, all users that have not registered.
Exporting information in a CSV format makes it readily accessible for spreadsheet manipulation and analysis.
CSV importing means you can interface systems that do not obey consistent standards.
|Advanced search and sort filters|
Safeguard provides advanced search and sort filters. You can search by ID, name and/or email, display records in date or alphabetical order, and specify the number of records displayed on each page. You can show only specific classes of user accounts (e.g. only users that have registered, or whose accounts have expired), or documents that have been published to a specific publication or have limited prints/views allocated to them.
The system has been designed with flexibility in mind, so you can search and filter certain subsets of information and then perform specific actions on those selections.
|User, document & system auditing|
The administration system records the date, time and IP address of users when they first connect to the server to obtain their decryption keys. It also records whether a user has tried to register with you more than once (i.e. on another computer), when this occurred, and the IP address they were using. Enterprise PDF DRM also records the country users register from if geolocation is enabled.
With Enterprise PDF DRM the use of individual documents can also be logged so you can see who viewed and/or printed them and when this occurred.
Further, the administration system also logs when administrators log on, when they performed an action (ie. adding, deleting, or modifying a record), and when this occurred.
|Reports & Statistics|
In the statistics section, the dashboard provides you with a summary of users, documents, and publications, backups and system level actions.
Selecting an entry shows more detailed information. For example, clicking on 'suspended documents' will display all the documents that are suspended.
With Enterprise PDF DRM reports can be run against users, documents, and publications, exported and then saved. For example, you might want to run a report on what users have access to document x, or what users have been added in the last week.
System activity logs detail what system events have occurred (admin logon, addition/edit/deletion of records).
Pie charts provide a quick visual summary of the principal system details.
|Choice of license delivery|
User licenses can be sent automatically by email (either as an attachment or as an embedded link) or you can choose to display them on a web page (in conjuction with the ecommerce module) for instant license delivery. You can also choose whether individual users are sent license files, and can resend registration emails if they have been blocked by SPAM filters or deleted by mistake by the user.
Every license file emailed from the administration system can also be sent to a monitor email address of your choice so that a record is available of who has been sent their license files, which you may also use to resend licenses. You can use Locklizard's email system or enter your own SMTP settings.
|E-commerce integration for a 24x7 service|
Ecommerce integration enables you to automate your entire sales process so there is no manual intervention. See optional ecommerce integration.
You can integrate Safeguard's PDF protection with your existing e-commerce system to help provide a totally automated secure document distribution service. Once users pay or are authorized to use a document or publication, their details are automatically set up on the administration server and assigned the appropriate publication / document access rights. License file information is sent out automatically by email so users can view your protected PDF documents straight away.
|Choice of hosting arrangements|
You can either use our managed service (hosted on our own servers so no set up configuration required), or you can host the administration system on your own server (we can even set up the system for you or you can choose to do this yourself).
Hosting on our servers requires a $250+ yearly maintenance fee but ensures you are up and running from day one as no server configuration is required at your end - saving you time, hassle and money.
Regardless of who hosts the administration system, you always protect PDF files locally on your own computer and distribute them just like any other file (from your web site, by email, CD-ROM, etc.).
|Limitless PDF protection - no limit to the number of protected PDF documents or the number of users|
Unlike other products, our PDF protection software lets you protect as many PDF documents as you want and manage as many users as you want for no additional cost.
There is no limit to the number of PDF documents you can protect or the number of users you have viewing those protected PDF documents.
|Free secure PDF viewer software|
Users can download the Secure PDF Viewer software totally free of charge, either from our web site or from yours or you can distribute it freely via email.
The FREE Secure PDF Viewer can be:
Protected PDF documents are decrypted on-the-fly in memory. They are never saved to disk in temporary format or to the Windows swap file. We do not create extra files on disk that can be copied to another computer along with the protected PDF files so they can be easily shared and viewed.
Viewer updates can be enforced to ensure that users are always using the latest version.
|Transparent real-time web based user authorization|
|Government strength PDF protection for your documents|
To ensure complete PDF protection, your PDF documents are encrypted using industry-standard encryption - the US Government approved algorithm, AES, at its strongest setting, 256 bits.
Encryption allows us to enforce the digital rights management controls applied to your protected documents.
Since no decryption keys are included with the documents, an attacker faces the (currently) impossible task of breaking the encryption algorithm itself.
|No passwords to send, enter, manage, forget or pass on to others|
Safeguard's PDF protection does NOT use passwords. Strong public key technology is used rather than weak password mechanisms that are easily crackable. Not using password protection ensures bullet-proof protection of your PDF documents - since there is nothing to enter the system is not vulnerable to password attacks.
You don't have to distribute passwords to users and they don't need to type in access codes to get going. Decryption keys are transparently relayed to the client computer and stored in encrypted format. There are no passwords to enter, manage, compromise, forget or pass on to others.
Whilst we use public key technology, no key management is required by you as the publisher or by users, as it is all handled transparently by the licensing system. There are no certificates to revoke when you want to terminate a users access or any other PKI complexity.
Locklizard provides a secure exchange mechanism in order to move the required key down to the user's desktop at the same time as validating the user's authorization to receive the key. Keys are seamlessly delivered to user's computers.
Whilst user keys are stored on the user's computer, they are also locked to that computer and cannot be moved. So the user must be at that computer in order to be able to use the licensed documents. Any attempt to move the keys system to another computer will invalidate it.
|Total PDF protection - no PDF security risks|
Read this article published by Bryan Guignard, an Adobe Certified expert on why we don't use Adobe's implementation / Adobe plug-in for PDF protection.
Information is decrypted on-the-fly and is not saved to disk in temporary format or to the Windows swap file. We do not create extra files on disk that can be copied to another computer along with the protected PDF files so they can be easily shared and viewed.
To ensure total PDF protection for your source files, you protect PDF documents on your own computer. The source PDF files (unprotected files) are never exposed to a web server where they could be easily compromized.
For detailed information on creating secure PDF files and Viewing them, see the Product Walkthrough.
For more information see Safeguard PDF DRM for internal company use.
Ensure greater compliance with privacy regulations for electronically distributed information
Compliance is the achievement of minimum requirements as dictated by regulatory bodies and law. New regulations and best practices (Sarbanes-Oxley Act, Gramm Leach Bliley Act, HIPAA, ISO 17799) raise these standards by increasing the demand for availability, yet enforcing the need for adequate security against information misuse or wrongful disclosure. Sarbanes Oxley even builds on existing regulations to require the proof of effective internal controls for company assets, including the protection of information assets such as a company's trade secrets.
Safeguard PDF DRM ensures ongoing policy, legal and regulatory compliance. It removes the risk of you incorrectly transmitting sensitive data by continuing to protect and enforce policy controls even after distribution.
Complete control over your IPR
Increase your revenue streams
License expiry lets you give users evaluation / limited time trials of your documents and/or ensures subscribers will continue to pay for your products at renewal time
Users can 'try before they buy' without you having to give away unrestricted use of your PDF documents. Just specify a number of days or views for evaluation.
In the same way, when a subscription license expires it does so automatically and your subscriber will have to renew it before they can continue using your PDF documents. You therefore retain full control over your PDF documents at every stage, and ensure customers continue to pay license fees when they are due.
Another way of using license expiry is to allow restricted time access (a few days, a month, etc.) to your PDF documents for a cheaper price, or as a limited alternative to selling a paper copy.
Simple administration when selling document information services
Controls are automatically applied to the individual desktop and cannot be bypassed by the users of the system.
You can implement the administration system on your own servers (we can implement this service for you at extra cost) or you can use our managed service – choose which best suits your business model.
Take control over sensitive information while increasing the flexibility of using electronic documents
Protect valuable and confidential PDF documents from unauthorized viewing.
US Government strength encryption and state-of-the-art licensing controls ensure your information is never at risk.
Your documents are never uploaded to our servers at any time (except if using Web Publisher), they always remain completely under your control.
Ease of deployment
No need to wait days like our competitor offerings to be up and running. Start issuing licenses in a matter of minutes from purchasing.
Our fully hosted systems ensure there are no extra costs involved in time or money (server configuration, consultant fees, etc.). And when you want to bring the system in-house you can switch over to your own server hosting and integrate it with your e-commerce system for a totally automated solution.
Our ecommerce integration module and command line utility ensure a totally automated protection and license delivery system without the need for manual input. Batch protection of your PDF documents can be simply and quickly incorporated into your existing web based applications without the need to use an API.
Simple method for controlling access to and use of commercial and confidential documents
Protect patent documents, IPR or commercially valuable documents in just a couple of mouse clicks.
Without proper protection of electronically maintained information, organizations face serious risks to their financial performance, intellectual property, trade secrets, research, customer privacy and more.
Insight into user, system, and document activity
Get a complete overview of user, system, and document activity – see the whole picture or examine sections and individual items.
Zero installation Viewers for web browsers & USB devices
Our zero installation Viewers ensure IT departments and users don't have to custom install, assign administrator privileges, worry about firewalls, or carry out formal evaluation - saving time and money.
A browser based Viewer, Safeguard Web Viewer, enables protected PDF files processed by Web Publisher to be viewed in a browser from any device using any Operating System. It is ideal for environments where no Viewer software can be installed.
A Viewer that runs from a USB stick, Safeguard PDF Portable, can be used without an Internet connection ever being available. It provides ultimate flexibility for using protected documents wherever the user goes. Secure documents are instantly accessible just like ordinary files.
Operating Systems supported
For Viewer OS's supported see our Secure PDF Viewer.
File size supported
Maximum single file size that can be protected is 200MB.
Server requirements (for own server hosting)
The Safeguard administration system can be installed on the following server operating systems:
Full root access is required and a domain name must be assigned to the server.
The server must be capable of having the following software installed on it:
Minimum hardware specification: