Pre-release figures and transaction materials are shared because decisions cannot happen without them. Finance leaders, board members, investors, advisers, counsel and counterparties may all require access before information becomes public.
The risk is not simply whether an unauthorised person can break into a system. It is also what happens after an authorised person views, screenshots, downloads or forwards the information.
The most sensitive window is often temporary
A forecast, earnings preview or term sheet can become less sensitive after an announcement, filing or completed transaction. Before that moment, even a short period of uncontrolled distribution can have serious commercial, regulatory and reputational consequences.
Controls should therefore be strongest at the point of authorised sharing—not added only after a leak becomes visible.
Protect both portals and exported files
Financial workflows rarely remain in one format. A management dashboard may be viewed in a private Web App, exported to PDF, attached to a board pack and later discussed through email or a data room.
ExactMark supports the two points where identity commonly disappears:
Authenticated pages: the SDK applies session-specific signals to verified Web App sessions and links them to customer-controlled opaque viewer references.
Recipient copies: ExactMark Imprint creates a separately marked image or PDF for every intended recipient.
A screenshot from the portal can be searched against Web Sessions. A returned document or image can be searched against Imprint recipient records.
Design distribution around named recipients
Avoid treating “the board”, “the advisers” or “the deal team” as one recipient when individual accountability is required. Create distinct copies for named people and deliver them through controlled channels.
Where a firm legitimately needs a central copy for an internal system, label and govern that route separately. Do not let convenience erase the difference between individual and shared distribution.
Keep the visible material professional
A large visible watermark can interfere with dense tables, forecasts and presentation design. Covert marking keeps the content usable while adding a recoverable identity beneath the normal viewing experience.
Signal strength still involves a trade-off. Stronger marking may improve recovery but can become more noticeable on flat colours. Test representative documents and dashboards before rolling protection across a critical reporting workflow.
Investigate carefully
If material surfaces, preserve the best available artifact and its context. Submit it using the search scope that matches the source workflow. Review confidence, candidate separation, file metadata, hashes and distribution records together.
A recipient-linked finding identifies the copy most consistent with the evidence. It does not automatically prove that the named recipient intentionally disclosed it. Shared assistants, compromised accounts, internal forwarding, device access and legitimate onward distribution all need consideration.
For consequential matters, involve qualified legal, compliance, security and forensic professionals. ExactMark provides an attribution lead and supporting report; it is not a regulatory conclusion or a substitute for an independent investigation.
Make traceability part of the timetable
Include protection in the reporting or transaction checklist:
- Confirm the final approved version.
- Identify everyone who genuinely needs access.
- Protect the private portal and test viewer identification.
- Generate individual Imprint copies for exported material.
- Record additions to the distribution list.
- Remove access promptly when the sensitive window closes.
- Retain attribution records according to a justified policy.
The right time to create evidence is while the intended audience is known. After a document has escaped, an ordinary identical copy cannot tell you which route it followed.