PloxDocs

Security overview

Every access control, content protection, and audit feature Plox offers, in one place.

2 min readLast updated Nov 2025View as Markdown

Plox Tip

You can stack any of these. A common LP-grade combo is Allowlist + Passcode + Dynamic Watermark + Disable Download.

Plox is built so the only people who see your content are the people you intend, and so you always know who actually opened it. Here's the full toolkit, grouped by what they protect against.

Access controls#

FeatureWhat it doesBest for
Require Email to ViewViewers type an email before access.Lead capture with low friction.
Email Verification via OTPOne-time code sent to the typed email.Confirming real recipients.
Require PasscodeA shared secret unlocks the document.Pre-approved viewer lists.
Allow Specific Emails OnlyExplicit allowlist of viewers.Internal sends, closed-room deals.

The controls compose, turning on email + passcode + allowlist gives you three independent checks before anyone sees a single page.

Access & security
Control who can open Clarity Bank and what they can do.
Global settings
Defaults applied to everyone with the dataroom link
Require email
On
Verify email
On
Passcode
On
Watermark
All files
Allow specific users
Off
Allow download
Off
File permissions
Override downloads and security per file or folder
Files & folders
Regulatory & compliance
Clarity Bank Investor Deck.pdf
Financial Model 2025.xlsx
Loan Book & Risk.xlsx
Plox access and security controls, in one place

Content protection#

  • Dynamic Watermarking, every page is stamped with the viewer's email and timestamp. If a screenshot leaks, you'll know who took it.
  • Disable Download, viewers can read but can't save a local copy.
  • Screenshot Protection, mobile screenshots are blocked entirely; desktop screenshots carry the watermark.
  • Confidential Documents, a preset that flips everything on by default for high-stakes files.

Visibility & revocation#

  • Live analytics, see every view as it happens (see Tracking your document).
  • Per-viewer audit log, email, IP, location, device, time, pages read.
  • Revoke any link, instantly, toggle a link off and any open session is killed on the next request.
  • Notification triggers, alerts when specific viewers open or revisit.

Infrastructure & compliance#

  • TLS 1.3 in transit, AES-256 at rest.
  • SOC 2 Type II compliant hosting.
  • GDPR-friendly: you control viewer PII; you can delete it on request.
  • Custom domain support so your branded URL never reveals "plox" in the link.

Was this article helpful?

Need a hand?

Email our support team at rohan@plox.in , we usually reply within a few hours.