PPAD (Persistent Protection After Download) is a digital rights management (DRM) solution where the protection travels with the file. Encryption, access control, and tracking stay attached even after a file is downloaded or forwarded, so you can see every open and revoke access at any time. Unlike a shared link, you stay in control after the file leaves. Works inside Gmail and Google Drive, or through an API.
PPAD (Persistent Protection After Download) is a digital rights management (DRM) solution where the protection travels with the file. Most security tools protect a document only until someone downloads it. PPAD keeps protecting it. The access controls, encryption, and tracking stay attached to the file wherever it goes, so you stay in control even after it leaves your systems.
Protection That Travels With the File
Share a document and the rules go with it, whether it is opened in Gmail, saved to a laptop, or forwarded to someone outside your company. Change permissions, set an expiry date, or revoke access at any time, even after download. Unlike a shared link, access does not end at the point of sending.
Document Security and Control
PPAD protects PDFs, Office documents, and images. Block copying and printing, deter screenshots with ScreenShield, and verify identity with a one-time passcode before a file opens. Every view is recorded in a full audit trail, so you always know who opened a file and when, and you have proof for compliance.
Low Friction for Recipients
Recipients open protected files in the browser with no software to install. Traditional enterprise DRM fails because it is hard to use. PPAD removes that friction while keeping you in control, so protection does not slow the work down.
Protection Against AI Tools
Anyone who can open a file can paste it into an AI tool. PPAD is built to make that much harder. Protected files cannot be read or ingested by AI systems without authorization, copy-paste extraction is blocked, and ScreenShield limits what is visible on screen.
Works in Gmail, Google Drive, and Your Own Products
PPAD works inside Gmail and Google Drive through a lightweight plugin, so your team can protect an attachment in one click. Developers can use the REST API to build the same protection, tracking, and revocation into portals, cloud storage, and other products.
Built for Regulated and IP-Sensitive Work
PPAD suits banking, finance, and healthcare, along with consulting, publishing, and technology, and confidential deal workflows like M&A due diligence and fundraising. It is built on Digify, is ISO 27001 certified, offers on-premise options for strict data residency, and supports GDPR, HIPAA, and other regulations."
Highlights
Protection travels with the file, so you stay in control even after it is downloaded or forwarded.
Recipients do not need to install desktop software, unlike traditional DRM, so protection does not slow work down.
Revoke access and see every open at any time, with a full audit trail.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
You pick between two contract plans, both priced per user. The Enterprise Plan protects files across email and cloud work tools with added security controls. The API Plan suits high-volume usage and custom needs, giving you API access to build file protection into your own apps and workflows. Both scale by the number of users you license under your contract. Choose the Enterprise Plan for direct team use, or the API Plan when you need programmatic integration and higher usage volumes.
Top-of-mind questions for buyers
What counts as one user for billing under the Enterprise Plan and API Plan?
A user is a licensed team member on your account who can send, protect, and track files. Each person you add counts as one user. Recipients who only view protected files do not count as licensed users. You license the number of users your team needs under the contract.
How does the API Plan differ mechanically from the Enterprise Plan for the same team?
The Enterprise Plan is for direct team use, protecting files across email and cloud work tools through the app. The API Plan gives programmatic access, letting developers add file protection, access control, and tracking into their own apps and workflows. It also suits higher usage volumes.
What happens to file protection and cost if I revoke access after a file is downloaded?
Revoking access does not change your per-user contract cost. You license users, not individual files. You can revoke access or set expiry at any time, even after download, and protection rules stay with the file offline. Billing stays tied to the number of licensed users.
Request a private offer to receive a custom quote.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Digify is a secure document sharing and digital rights management platform for everything that leaves your company. Share files through a virtual data room or a secure link, keep your internal Drive and SharePoint separate, and keep control of every file after it is sent. See who opened each document, restrict downloads, and revoke access at any time, even after download. ISO 27001 certified, GDPR and HIPAA compliant.
Bynder's digital asset management platform enables teams to conquer the chaos of proliferating content, touchpoints, and relationships in order to thrive. We are the brand ally that unifies and transforms the creation and sharing of assets.
PGM is the leader in Automotive Audiences. With information on 200+ million VINs across 138 million individuals, our automotive audience insights help you reach the right consumers at the right time.
ClearLayers.Ai protects sensitive information and maintain regulatory compliance with our high-performance PDF Redaction API. Unlike simple text-replacement tools, our engine preserves the structural integrity of your PDF while permanently "burning in" black-out redactions over sensitive data.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.