GuardWare PROTECT applies persistent file encryption at the file level. Files remain encrypted in storage, in transit, and during active use. Authorised partners work with files normally. Anyone without authorisation cannot open them. Access can be revoked instantly from a central console.

Persistent file encryption is encryption that travels with the file regardless of where it is stored, how it is transmitted, or who is holding it. Unlike standard encryption that protects data at rest or in transit, persistent encryption remains active when the file is opened and in use. If someone steals the file, the encryption remains. Without the decryption keys, the file is unreadable. 

Remote key revocation destroys the encryption key associated with a specific file, rendering it cryptographically unreadable instantly. It requires no physical access to the device holding the file. An engagement ends, an authorisation changes, or a security incident occurs — the key is destroyed from your central console and the file becomes inaccessible everywhere it exists.

Yes. PROTECT integrates with MIP to extend your existing classification and labelling framework beyond your organisational perimeter. Files classified and labelled within MIP can be protected by PROTECT, ensuring consistent governance across internal and external environments.

No. PROTECT uses format-preserving encryption that is transparent to authorised users. Partners work with files exactly as they always have using their standard applications. The protection is invisible to them and absolute to anyone without authorisation.