On-device encryption · Canadian-owned and hosted · Built to Quebec's Law 25 · No account needed for the other side

The secure way to send privileged client files.

Contracts, litigation files, settlement drafts, client confidences: much of what you send is confidential client information, some of it privileged, and everything you send by ordinary email is exposed. Privatt encrypts every file on your device before it leaves it, so the confidentiality your duty depends on does not rest on hope.

Send a file securely Explore Vault

Free to start. No account needed on the other side.

US CAN

Email is still how most privileged files move. That is the exposure.

A settlement draft as an attachment. A full matter file forwarded to co-counsel. Client records sent to an expert, a court, an opposing party. Standard email is not encrypted end to end, metadata is exposed even when the body is not, and once a file is sent you cannot unsend it, expire it, or see who opened it. Privilege protects the content of a confidential communication, but it depends on you having taken reasonable steps to keep it confidential. A leaked file does not just embarrass; it can undercut the confidentiality your privilege rests on, and it can mean malpractice and discipline exposure.

Confidentiality is your duty. We are built to meet it.

Your obligation to protect client confidences follows you into every channel you use. Encryption, access control, and the ability to show where data lived and who could reach it are exactly the kind of reasonable safeguards that duty expects, and that most email cannot provide. Privatt is built to Quebec's Law 25, one of the strictest privacy laws in North America; if you practise in Quebec it is your compliance baseline, and elsewhere in Canada these are exactly the kind of safeguards PIPEDA and its provincial counterparts expect you to weigh for sensitive client information. End-to-end encryption on the device, revocable access, Canadian ownership and hosting, by default.

Privatt is a tool that helps you maintain the confidentiality your duty requires. It does not make you compliant on its own, it does not guarantee any legal outcome, and nothing here is legal advice.

Two ways to work. You choose who holds the keys.

Send, for sending files

1

Encrypt in your browser.

Drop in the file, set a passphrase. It is encrypted on your device before upload, so Privatt only ever sees ciphertext.
2

Share the link.

Opposing counsel, your client, the court, or an expert opens it with the passphrase. No Privatt account, nothing to install on their end.
3

Stay in control.

Set an expiry, cap opens, and revoke access anytime, even after you have sent it.

Vault, for storing matters

Keep confidential matters encrypted on Privatt's Canadian servers or a Google Drive or OneDrive you already own. You choose who holds the keys: two-key, device-only (zero-knowledge, so not even Privatt can open it), or Privatt-managed with malware scanning.

Learn about Vault

Why lawyers choose Privatt

Encrypted before it leaves the device.

Send and the vault modes where you hold the keys encrypt on your device, so we store ciphertext, not your clients' matters. The Privatt-managed vault mode is the one exception, and we say so plainly.

No account for the other side.

The friction that kills most secure portals is gone: a link and a passphrase, whether it is your client or opposing counsel.

Canadian-owned, Canadian-hosted.

Data sovereignty by default: where the data lives and which laws reach it are the point, not an afterthought, and a genuine differentiator for US firms too.

Control that outlives the send.

Expiry, view limits, and revocation mean a file shared during discovery is not living in an inbox two years later.

Do not trust us. Verify.

Real cryptography (Argon2id, XChaCha20-Poly1305 via the independently audited libsodium), no home-rolled crypto, and we are explicit about the one mode where we hold keys and the ones where we cannot.

Common questions

Opposing counsel will not install anything.

They do not have to. Send is a link and a passphrase: nothing to install, no account.

I already have a practice-management portal.

Most portals encrypt in transit and at rest but can still read your files on the server, and everyone has to log in. With Send and the vault modes where you hold the keys, encryption happens on the device first, so we cannot read your files, and there is nothing for the other side to log into.

Does using a third-party tool waive privilege?

Taking reasonable steps to keep a communication confidential is what privilege expects; encryption and access control strengthen that posture rather than weaken it. (This is general information, not legal advice; your bar's guidance governs.)

Is this actually more secure, or just marketing?

We publish how the encryption works and use standard, audited libraries rather than our own. Read it, or have someone technical read it.

Give privileged files the channel your duty demands.

Send your first file free today. Move your whole practice over when you are ready.

Send a file securely Talk to us about your firm