Protect Files and Folders in
OneDrive and Google Drive

Seald Healthcare encrypts files, documents, and folders on your device the moment they are saved, before they sync to OneDrive or Google Drive. If a Microsoft or Google account is compromised, the attacker gets ciphertext, not patient records. Your team keeps working in the folders they already use.

OneDriveGoogle Drive

Shared Drive › Patient Records

  • Patient IntakeFolder · 48 files Encrypted
  • Referral_Letter_Chen.docxDocument Encrypted
  • Lab_Results_Q3.xlsxSpreadsheet Encrypted
  • Intake_Form_Mitchell.pdfPDF Encrypted

Authorized Staff

Patient:
Sarah Mitchell
DOB:
03/15/1987
Dx:
Type 2 Diabetes

Stolen Password

8Fh12!Jk-)8%jK

Ki65G=@>Jk$!.

HjKi32^9)zQ_Zx%

Example drive

The Problem

The Cost of an Exposed Drive

One click on a phishing link, a stolen password, or a forgotten share link can expose every patient file in a shared drive. When that happens, the cost is measured in millions.

1B+

Patient records exposed in reported healthcare breaches since 2009

HIPAA Journal, 2026

$6.64M

Average cost of a healthcare data breach, highest of any industry

IBM Cost of a Data Breach, 2026

$398

Cost per breached patient record in the United States

Ponemon Institute, 2015

The Solution

Peace of Mind for You, No Changes for Your Team

Staff save, open, and organize files the way they do today. Only ciphertext reaches the cloud.

  1. Step 1

    Save as Usual

    Files, documents, and folders are encrypted on your device the moment they are saved, with your keys, before they sync. OneDrive and Google Drive only ever store ciphertext.

  2. Step 2

    Open as Usual

    Authorized staff open files on their registered devices during their allowed hours. Routine access stays seamless. Anything unusual asks for a one-time code first.

  3. Step 3

    Every Open Is Recorded

    Who opened or changed each file, from which device, and when is recorded in a tamper-evident audit trail you can export.

Encrypt on WriteFiles, documents, and folders are encrypted the moment they are saved.
Per-Person Access ControlsLimit each team member by device, hours, location, and more.
Step-Up VerificationOff-hours access or a new device requires a one-time code first.
One-Time Secure LinksSingle-use links bound to the recipient's email, with automatic expiration.
Cryptographic SigningTamper-evident proof of exactly what you shared.
Real-Time RevocationRevoke a person, device, or link instantly.

Secure Sharing

Share a Folder With a One-Time Secure Link

Send records to a lab, specialist, or billing service without an open-ended share link. Each Seald Healthcare link works once, only for the person you sent it to, and expires automatically.

  • Single-use and bound to the recipient's email address
  • Expires automatically, and can be revoked at any time
  • No patient data travels in the email itself
  • Every access is recorded in the audit trail

Share Securely

Encrypted
Referrals · October12 files
  • Single use
  • Bound to this email
  • Expires in 24 hours
  • Access logged
Send Secure Link

Activity

Example share

Breach Exposure

Encrypted Files Change the Outcome of a Breach

Whether or not you bill insurance, a breach of readable patient files can mean lawsuits, fines, and public notification.

Patients Can Sue

If your business is covered by California's CCPA, every patient whose unencrypted personal information is breached can sue for $107 to $799. At 5,000 records, that is up to $4 million. Washington's My Health My Data Act also lets consumers sue over health data outside HIPAA.

Regulators Can Fine

HIPAA penalties reach $2,190,294 per year for each type of violation. State attorneys general add their own. South Dakota can seek up to $10,000 per day for each violation of its breach law.

Every Patient Must Be Told

All 50 states require breach notification. Under HIPAA, a breach affecting more than 500 residents of a state must also be reported to HHS and to prominent media outlets.

Properly encrypted files change all three

Encrypted data generally falls outside HIPAA breach notification (45 CFR § 164.402), most state notification laws, and California’s per-consumer damages.

Rules vary by state. Confirm your obligations with counsel.