Security lives inside the document itself.

Data-Centric Security is a security model that binds protection policies directly to data and documents.

Control continues to exist even when a file is copied, emailed, stored on another device or shared with a partner.

Data loss prevention (DLP) detects and stops data from leaving the enterprise via email, USB, websites or the cloud.

DCS protects directly at the file and keeps controlling how the file is used after it has been shared. The two solutions complement each other.

Digital rights management (DRM) controls usage rights for a document such as viewing, editing, printing or sharing.

DCS goes further: it protects data throughout its lifecycle, combining encryption, permissions, audit logs and control of documents after they leave their original environment.

DCS protects enterprise files and documents in the following groups:

• Office: Microsoft Office, PDF.
• Engineering: drawings, CAD files, R&D documents.
• Development: source code.
• Business: contracts, quotations, customer data, intellectual property.

The AISA team checks compatibility with specialized software or formats during the survey phase.

Files are encrypted and bound to a usage-rights policy from the start. The policy clearly defines:

• Who may open the file.
• Who may edit it.
• Who may print it.
• Who may copy it.
• Who may share it.
• How long the file may be used.

Yes. DCS configures automatic encryption according to policy, reducing reliance on manual user actions. Protection runs in the background and does not noticeably change how employees work day to day.

Yes. Enterprises can apply the full set of permissions:

• View, edit, print, copy.
• Screenshot, share, forward.

Permissions are set by user, group, department, project or document type.

Yes. With persistent file control (Persistent File Control), enterprises can revoke access to documents remotely in supported configurations. Useful when:

• A file was sent by mistake.
• A project has ended.
• A partner no longer needs access.
• An employee leaves.

Yes. DCS can be deployed in an on-premise environment for enterprises that want to keep data in internal infrastructure — suitable for R&D data, intellectual property or especially sensitive data.

Yes. DCS is architected to fit:

• On-premise.
• Cloud.
• Hybrid.

The specific deployment model depends on each enterprise's infrastructure, security requirements and data policy.

Yes. DCS automatically synchronizes the user directory and department structure via Microsoft Active Directory (AD) or LDAP, and supports importing lists via standard Excel files.

Yes. DCS integrates with security monitoring and operations systems:

• SIEM (Security Information and Event Management) — centralizes and analyzes security events.
• SOAR (Security Orchestration, Automation and Response) — automates incident response workflows.

The AISA team confirms the specific integration capability against the systems the customer actually uses.

Yes. DCS provides an API (Application Programming Interface) by module and deployment architecture, used to integrate with management systems, automation or other enterprise applications.

DCS protects data with minimal impact on the user experience. Real-world performance depends on:

• File type and size.
• The software in use.
• Device and network configuration.

For CAD, R&D or specialized application environments, AISA runs a trial (POC) before wide rollout.

According to the specifications, the impact on workstation CPU resources is under 3%; users notice no delay when opening, saving or editing files.

Not significantly. Protection policies run automatically in the background — users keep opening, editing and saving files in their familiar workflow.

Yes. In supported configurations, enterprises grant time-limited offline access — useful for employees who are:

• On business trips.
• Working outside the office.
• Working in areas with an unstable network.

DCS uses AES-256 (CTR mode) to encrypt file content and RSA-2048 key pairs to wrap and protect keys per account or group. An encrypted file grows by only about 1 KB.

Workstations: Windows XP, 7, 8, 10 and 11 (64-bit). Servers: Windows Server 2012 / 2016 / 2019 / 2022.

Yes. DCS encrypts documents stored on shared NAS / SAN / file servers directly, without requiring any intrusive software on the file server.