On-device encryption · Canadian-owned and hosted · Built to Quebec's Law 25 standard · No account needed for the other side

The secure way to send privileged client files.

Contracts, litigation files, settlement drafts, client confidences: much of what you send is confidential client information, some of it privileged, and everything you send by ordinary email is exposed. Privatt encrypts every file on your device before it leaves it, so the confidentiality your duty depends on does not rest on hope.

Send a file securely Explore Vault

Free to start. No account needed on the other side.

US CAN

Email is still how most privileged files move. That is the exposure.

A settlement draft as an attachment. A full matter file forwarded to co-counsel. Client records sent to an expert, a court, an opposing party. Standard email is not encrypted end to end, metadata is exposed even when the body is not, and once a file is sent you cannot unsend it, expire it, or see who opened it. Privilege protects the content of a confidential communication, but it depends on you having taken reasonable steps to keep it confidential. A leaked file does not just embarrass; it can undercut the confidentiality your privilege rests on, and it can mean malpractice and discipline exposure.

Confidentiality is your duty. Ordinary email was not built for it.

Your duty of confidentiality follows every file you send. Under ABA Model Rule 1.6 and Formal Opinion 477R, lawyers must make reasonable efforts to protect client information, and particularly sensitive matters may call for special precautions such as encryption. A leak can mean malpractice and discipline exposure, on top of the state data-breach-notification laws that now reach client data. Privatt gives you end-to-end encryption on the device, revocable access, and Canadian ownership and hosting, so with Send and Privatt-hosted storage your clients' files sit outside the US cloud. And because we are built to Quebec's Law 25, one of the strictest privacy laws in North America, encryption, access control, and revocation are the default, not add-ons.

Privatt is a tool that helps you maintain the confidentiality your duty requires. It does not make you compliant on its own, it does not guarantee any legal outcome, and nothing here is legal advice.

Two ways to work. You choose who holds the keys.

Send, for sending files

1

Encrypt in your browser.

Drop in the file, set a passphrase. It is encrypted on your device before upload, so Privatt only ever sees ciphertext.
2

Share the link.

Opposing counsel, your client, the court, or an expert opens it with the passphrase. No Privatt account, nothing to install on their end.
3

Stay in control.

Set an expiry, cap opens, and revoke access anytime, even after you have sent it.

Vault, for storing matters

Keep confidential matters encrypted on Privatt's Canadian servers or a Google Drive or OneDrive you already own. You choose who holds the keys: two-key, device-only (zero-knowledge, so not even Privatt can open it), or Privatt-managed with malware scanning.

Learn about Vault

Why lawyers choose Privatt

Encrypted before it leaves the device.

Send and the vault modes where you hold the keys encrypt on your device, so we store ciphertext, not your clients' matters. The Privatt-managed vault mode is the one exception, and we say so plainly.

No account for the other side.

The friction that kills most secure portals is gone: a link and a passphrase, whether it is your client or opposing counsel.

Canadian-owned, Canadian-hosted.

Data sovereignty by default: where the data lives and which laws reach it are the point, not an afterthought, and a genuine differentiator for US firms too.

Control that outlives the send.

Expiry, view limits, and revocation mean a file shared during discovery is not living in an inbox two years later.

Do not trust us. Verify.

Real cryptography (Argon2id, XChaCha20-Poly1305 via the independently audited libsodium), no home-rolled crypto, and we are explicit about the one mode where we hold keys and the ones where we cannot.

Common questions

Opposing counsel will not install anything.

They do not have to. Send is a link and a passphrase: nothing to install, no account.

I already have a practice-management portal.

Most portals encrypt in transit and at rest but can still read your files on the server, and everyone has to log in. With Send and the vault modes where you hold the keys, encryption happens on the device first, so we cannot read your files, and there is nothing for the other side to log into.

Does using a third-party tool waive privilege?

Taking reasonable steps to keep a communication confidential is what privilege expects; encryption and access control strengthen that posture rather than weaken it. (This is general information, not legal advice; your bar's guidance governs.)

Is this actually more secure, or just marketing?

We publish how the encryption works and use standard, audited libraries rather than our own. Read it, or have someone technical read it.

Give privileged files the channel your duty demands.

Send your first file free today. Move your whole practice over when you are ready.

Send a file securely Talk to us about your firm