Send the document.
Keep the control.
TriLockSafe delivers your sensitive files through a locked, zero-install web viewer — where print limits are enforced on the server, every page is watermarked to the reader, and access is revoked the instant you decide. Now with built-in eSignature — send any document to sign, right from the same platform.
TriLockSafe · do not distribute
See how TriLockSafe works.
The problem, how it works, and every control — in about three minutes.
A PDF you email is a PDF you've already lost.
Password-protected PDFs are cracked, stripped, or simply forwarded with the password.
Once it's downloaded, you can't limit prints, expire it, or take it back.
Nothing on the leaked copy tells you who leaked it.
Vendor DRM fixes some of this — then makes every reader install a desktop app and charges you per seat.
The file becomes page images behind a login. Printing becomes a server decision.
Nothing your reader can reach is a downloadable document. The rights travel with the access, not the file.
Publish
The offline writer rasterizes your PDF into per-page images and pushes them to private storage. The original never goes to the edge.
Lock & grant
You issue a personal access link with a print allowance — 3, 5, whatever you set. Each recipient gets their own watermark and their own counter.
Enforce
Every open is logged, every page served no-store, every print counted. At the limit, the server simply refuses — and you can revoke anyone in one click.
-- Grants a print ONLY if one remains. Runs as a single D1 statement, -- so two simultaneous prints at the limit can never both win. UPDATE recipients SET prints_used = prints_used + 1 WHERE id = ? AND prints_used < max_prints; -- 0 rows changed → server returns print_limit_reached
Everything a vendor DRM does — on infrastructure you own.
Built-in eSignature
Send any PDF for signature — sequential or parallel routing, draw/type/upload, ESIGN/UETA audit trail and a tamper-evident Certificate of Completion. No DocuSign bill.
API & your own storage Business Plus+
Automate everything over a REST API, or switch on bring-your-own storage — TriLockSafe encrypts each document (AES-256) and keeps the ciphertext in your own OneDrive, so your data never rests on our servers.
Server-enforced print limits
The (N+1)th print is refused by the backend, not by a checkbox in the reader.
No-download locked viewer
Documents render as page images behind an authenticated session. There's no PDF to save.
Per-recipient watermark
Name, email and timestamp burned across every screen and every printed page — a forensic trail on any leak.
Instant revocation
Kill any recipient's access from the console immediately — no re-send, no waiting on the file.
Access expiry
Links can expire on a fixed date or after a set window. Old grants stop working on their own.
Full audit trail
Every open and every print recorded with IP, device and timestamp — exportable evidence, per recipient.
Zero install for readers
Opens in any browser. Your clients never download a desktop “secure viewer” to read your document.
Self-hosted, own your data
Runs entirely on your own cloud infrastructure. No third party ever holds your documents or your clients.
Multi-tenant
One deployment, isolated tenants — reuse it for every client and every brand you serve.
OTP-protected admin
Console access is one-time-code gated. Codes and print tokens are short-lived and single-use.
Screenshot & copy deterrence
Selection, right-click, save and print shortcuts are blocked; the watermark identifies anyone who photographs the screen.
Global edge delivery
Served from a global edge network — fast for a reader in any region, with no origin to scale.
Seven controls you keep on every document — even after you hit send.
Each file carries server-enforced rights you set per recipient and can change or revoke at any moment. The document never stops answering to you.
Protect your IP
- Stop unauthorized opens and re-sharing
- No passwords to leak, forward or crack
- Encrypted at rest; decrypted only inside the viewer
Restrict what they can do
- Block copy, paste and editing
- Deter screenshots and screen capture
- Allow, limit or fully disable printing
Set an expiry
- Expire on a fixed date
- Or a window from the first open
- Cap the number of opens and prints
Revoke instantly
- Cut off any recipient the moment you decide
- One person or in bulk
- Works even after they've downloaded a copy
Watermark every page
- Reader's name, email and time on each page
- Burned in by the server — not the browser
- Survives screenshots and printouts
Log every use
- Every open and print recorded
- Device, network and timestamp per recipient
- Alerts on copy, screenshot and new device
Stay compliant
- Restrict documents to named parties
- Auto-expire to enforce retention
- Tamper-evident proof-of-use trail
Enforced always.
Change any rule from the console and it applies on the next open — no re-send.
No plugins. No passwords. Nothing to crack.
Most “secure PDF” still leans on two things that fail the instant a file leaves your hands.
A password only guards the first open
Once it's typed, the PDF is fully in the reader's hands — to copy, print, forward or strip. Share the password once, or forward the file, and your control is gone. There's nothing left to revoke.
Plugins are fragile and bypassable
DRM bolted onto Adobe Reader breaks on every update, clashes with other plugins, needs admin installs, and can be disabled or the protection stripped. You're trusting the reader — and the reader isn't yours.
Rules enforced on your server
Your controls live on your backend, not inside the file. Documents open in a locked, zero-install viewer that renders pages on demand and counts every print server-side. Nothing to install, nothing to strip — and you can change or revoke the rules any time.
That's why a government or healthcare team can open a TriLockSafe document with nothing but a browser — no reader app, no plugin, no password to leak — and why you stay in control after you hit send.
Locklizard-grade control, without the desktop app or the per-seat bill.
| Emailing a PDF | Vendor DRM (e.g. Locklizard) | TriLockSafe | |
|---|---|---|---|
| Reader installs an app | None | Desktop “Safeguard Viewer” required | None — any browser |
| Where it runs | Your outbox | Vendor cloud / vendor licensing server | Your own cloud account |
| Cost model | — | Per-user / per-seat licensing | Your edge, flat infra cost |
| Enforced print limit | ✕ | ✓ | ✓ atomic, server-side |
| Per-reader forensic watermark | ✕ | ✓ | ✓ screen & print |
| Instant revoke after sending | ✕ | ✓ | ✓ one click |
| Open & print audit trail | ✕ | Partial | ✓ per recipient, exportable |
| Own your documents & client list | ✓ | ✕ held by vendor | ✓ entirely yours |
| Built-in eSignature | ✕ | ✕ separate DocuSign bill | ✓ ESIGN/UETA + certificate |
| Programmatic REST API | ✕ | Paid add-on | ✓ Business Plus & Enterprise |
| Keep data in your own storage | — | ✕ vendor-held | ✓ encrypted in your OneDrive |
| Encrypted at rest | ✕ | Vendor-managed | ✓ AES-256, per-tenant key |
Enterprise DRM, without the enterprise invoice.
Every plan includes unlimited recipients — no per-seat fees, no per-reader charges, and never an app for your readers to install. Document capacity scales with your plan.
Starter
For a single brand or practice getting documents under control.
- Up to 300 documents
- 1 protected brand (tenant)
- Unlimited recipients
- Locked cloud viewer — zero install
- View, print-limit, copy, watermark & expiry rules
- eSignature — send documents to sign
- Gateway PDF delivery · OTP-secured admin
Business
For teams and MSPs protecting documents across several brands.
- Everything in Starter, plus:
- Up to 1,500 documents
- Up to 10 brands (tenants)
- Device / network lock
- Copy & screenshot email alerting
- eSignature — sequential & parallel routing
- Per-recipient audit & export · priority support
Business Plus
For high-volume teams that need more document capacity.
- Everything in Business, plus:
- Up to 3,000 documents
- eSignature with Certificate of Completion
- API access — automate via REST
- Bring your own storage — keep encrypted docs in your OneDrive
- Higher-volume delivery & audit
- Priority onboarding & support
Enterprise
Per-user pricing for organizations at scale — the more seats, the lower the rate.
- Under 500 users — $25/user/yr
- 500–1,000 users — $20/user/yr
- 1,000–5,000 users — $15/user/yr
- Unlimited documents & brands
- eSignature — unlimited envelopes
- API access & bring-your-own storage (OneDrive)
- Server-burned watermark · SSO · custom domain
- SLA · dedicated support · self-host option
For comparison: Locklizard cloud runs $500–$1,000/mo (on-prem license $6,495–$12,995), and Digify is $99–$199/mo with monthly document caps. TriLockSafe starts at $30/mo for up to 300 documents, scales to 3,000 on Business Plus, and per-user Enterprise pricing (annual) from $15/user/yr — always with unlimited recipients, built-in eSignature, and no reader app.
Built security-first, and honest about the one thing no DRM can stop.
Signed, expiring sessions
Access and print tokens are HMAC-signed with your secret and delivered as HttpOnly, Secure, SameSite=Strict cookies.
Single-use print tokens
Each granted print issues a one-time token that lives ~150 seconds and is burned on use — it can't be replayed.
Nothing cached, nothing stored
Pages are served no-store, private. The document exists only as authenticated image streams — never as a saveable file.
Immutable audit log
Every open and print is appended to a tamper-evident trail with device and network fingerprints, per recipient.
Cloud-based, encrypted, and kept in the USA.
Customer data is handled with the same rigor as the documents it protects — encrypted in transit and at rest, isolated per client, and processed only on U.S. infrastructure.
Encrypted in transit — TLS 1.3
Every connection is served over HTTPS with modern TLS (1.2/1.3) and HSTS. Nothing travels in the clear between the reader, the viewer and the server.
Stored & processed in the USA
Documents, keys and audit records live on U.S.-based cloud infrastructure. Data residency is United States only — your data does not leave the country.
Encrypted at rest & first-party
Content sits encrypted at rest in your own cloud account. No third-party trackers, no advertising pixels, no analytics resellers — and we never sell or share your data.
Isolated per client
Each brand or client is a separate tenant. One customer's documents, recipients, signatures and keys are never visible to another — enforced on every request.
Put the next document behind the lock.
Register a document, grant a reader three prints, and watch the counter hold. The whole workflow runs from your admin console.