NetDocuments Confidential Document Security for HR and Legal

NetDocuments confidential document security is the set of controls that keeps sensitive legal, HR, and executive files visible to a named few while the rest of the platform stays open for everyday work. It combines where the documents live, who administers them, how their access lists are protected from change, and how they leave the system.

What is NetDocuments confidential document security?

NetDocuments confidential document security is the combination of cabinet design, profile-based security, access-list protection, controlled sharing, and deletion rules applied to documents that only a small group should ever see. A leak of that material is expensive, since the 2026 edition of a long-running global study puts the average cost of a data breach at $4.99 million, a record high. Typical examples are workplace investigations, executive compensation, board materials, and privileged transaction advice.

The most common failure is human. Verizon’s 2025 Data Breach Investigations Report found that the human element was involved in roughly 60 percent of breaches, including misdelivery and simple errors. The controls that matter most stop a well-meaning colleague from widening access by accident.

Where should confidential documents live in NetDocuments?

Confidential documents in NetDocuments should live either in a separate cabinet with its own membership or in restricted workspaces protected by absolute security within a shared cabinet. The right choice depends on how many people need the material and how often it changes hands.

An HR or executive cabinet has its own member groups, its own administrators, and its own default access, which makes it the cleanest option when a function such as HR owns a large, steady volume of sensitive files. A single investigation or deal inside the main legal cabinet can instead be walled off with absolute profile-based security on its matter row, which suits confidential matters that come and go. Many legal departments use both: a standing cabinet for HR and board material, and restricted workspaces for time-limited matters.

How do cabinet administrators affect confidential documents in NetDocuments?

Cabinet administrators in NetDocuments receive implicit View, Share, and Administer (VSA) rights to every item in the cabinets they manage. A cabinet administrator can therefore reach a confidential document even when its access list does not name them.

• Choose administrators per cabinet. For an HR or executive cabinet, appoint administrators from the function that owns the content, plus one trusted legal IT lead.
• Separate administration from editing. The Administer right lets someone change access lists, delete, and rename. It does not by itself grant Edit rights to document content.
• Review on every change. Check the administrator list for every confidential cabinet at least twice a year, and immediately when someone changes role or leaves.

How does absolute security wall off a confidential matter in NetDocuments?

Absolute profile-based security walls off a confidential matter in NetDocuments by replacing the cabinet default access with an access string written against that matter’s lookup row. The row starts with an exclamation mark, and every document profiled to the matter receives only the rights the string grants.

• Absolute rows. A row such as `!Investigations|VES*U:jane.doe@company.com|V` gives one group full working rights and one named individual read access, and nobody else from the cabinet default.
• No Access carve-outs. Writing `N` against a user or group removes their access to the matter and overrides rights they hold through any other group. Use it when the subject of an investigation sits in a group that would otherwise see the files.
• Existing documents. Profile-based security applies to items profiled after the change. When a matter becomes confidential midstream, run a search on the matter and update the access of documents already filed.

Have a second person check every absolute row, because a missing group stays invisible until someone cannot find the documents.

What does ACL Freeze do for confidential documents in NetDocuments?

ACL Freeze in NetDocuments flags a document or email so that implicit changes, such as access inheritance or profile-based security, cannot alter its access list. It is typically used for email that has been locked down to specific people, so the access holds even if the email is moved.

The feature is disabled by default. A cabinet administrator enables it by setting “Allow users to freeze ACL” to Yes, after which users are prompted to freeze an access list when they modify it. A frozen access list can still be changed manually by someone with Administer rights, and moving an item to a ShareSpace does not preserve it. Frozen and thawed items can be found through custom search criteria using field identifier 52.

For an HR cabinet, freezing the access list on investigation interview notes protects them from a later reprofiling mistake that would otherwise apply a broader matter string.

How do ethical walls work in NetDocuments Workspace Security Manager?

Ethical walls in NetDocuments Workspace Security Manager (WSM) apply a policy to a workspace that sets the groups and rights for every document and folder created there. When the policy has “Set as a Wall” enabled, the access list cannot be modified by any user, including cabinet administrators, through the interface, ndOffice, or the API.

Locking a group’s permissions in a policy makes that access persistent, so it can only be changed in the policy itself, and persistent security takes precedence over a frozen access list. Applying a policy downgrades or removes groups the policy does not define, and new documents in the workspace follow the policy by default.

WSM is an add-on, so confirm it is licensed before you design around it. Where available, it is the strongest control for a matter that must stay closed even to administrators.

How do you share confidential documents with outside parties in NetDocuments?

Confidential documents in NetDocuments are shared with outside parties most safely through secured links, with external users kept out of the cabinet’s internal lists. Ongoing work with outside counsel suits a CollabSpace that shares selected documents without opening the workspace.

• Secured links. A sender can add a password, lock the version, allow or block downloading, and set an expiration date. Cabinet administrators can require passwords on every secured link and cap the expiration period, and a sender can revoke all links to a version at once.
• Hidden lookup tables. Administrators can hide a profile attribute’s lookup table from external users, which NetDocuments recommends. That keeps client, matter, and employee names out of view of anyone outside the organization.
• IP restrictions. A repository can limit access to approved IP ranges, with an exception for external users so that outside counsel can still reach content explicitly shared with them.

For HR material, a 7 to 14 day expiration and a required password is a sensible default for anything sent to an outside investigator or employment counsel.

What happens when a confidential document is deleted in NetDocuments?

A confidential document deleted in NetDocuments stays in the cabinet flagged as deleted, and access is removed for every user except the person who deleted it. The deletion is recorded in the document’s history, and the document can still be recovered until it is purged.

• Undeleting. When a document is undeleted, its previous rights and folder locations are not restored. Someone must rebuild the access list before anyone else can see it again.
• Purging. A cabinet setting can restrict permanent deletion to cabinet administrators, which is the right choice for any cabinet holding records under a legal hold.
• Rollback. NetDocuments backs up documents once every 24 hours, and each document can have up to 30 backup points, one per day of edits.

Align each confidential cabinet’s deletion and purge rules with your records retention schedule before go-live.

How should you test NetDocuments confidential document security before go-live?

NetDocuments confidential document security should be tested with named test users who should and should not see each confidential matter, before any real file is loaded. Build 8 to 12 test accounts covering the owning team, general legal staff, administrators, and an external user.

• Exclusion tests. Log in as each excluded user and confirm the matter’s documents cannot be opened or found through search.
• Migration checks. Documents moved from iManage arrive carrying whatever security the legacy system held, so sample 20 to 30 migrated confidential documents and compare their access lists with the design.
• Production check. Configuration proven in a sandbox still needs verification once it reaches production, so repeat the exclusion tests after deployment.

Keep the results with the security design. Privacy and data governance across GDPR, CCPA, and HIPAA is ongoing compliance work, and HR files often fall under exactly those frameworks.

Conclusion

NetDocuments confidential document security works when each layer is chosen on purpose: a cabinet or restricted workspace for the material, a short list of administrators, absolute rows and No Access where a wall is needed, frozen or policy-locked access lists, and deliberate sharing and deletion rules. The risk sits in the gaps between them, and in documents that arrived before the rules were set. Test with real users, fix existing documents, and write the design down so the next administrator inherits it intact.

Frequently asked questions

What is NetDocuments confidential document security?

NetDocuments confidential document security is the combination of cabinet design, profile-based security, access-list protection, controlled sharing, and deletion rules used to restrict sensitive files. It keeps legal, HR, and executive documents visible to a named group only.

Can a NetDocuments cabinet administrator see confidential documents?

A NetDocuments cabinet administrator receives implicit View, Share, and Administer rights to every item in the cabinets they manage. A Workspace Security Manager wall is the control that prevents even administrators from changing a protected access list.

What does ACL Freeze do in NetDocuments?

ACL Freeze in NetDocuments protects a document’s access list from implicit changes such as inheritance or profile-based security. It is disabled by default and must be enabled per cabinet.

Can anyone change the access on a Workspace Security Manager wall?

Access on a Workspace Security Manager wall cannot be changed by any user, including cabinet administrators, through the interface, ndOffice, or the API. It can only be changed in the policy itself.

Does undeleting a NetDocuments document restore its access?

Undeleting a NetDocuments document does not restore its previous access rights or folder locations. Someone with Administer rights must rebuild the access list.

How far back can a NetDocuments document be rolled back?

A NetDocuments document can be rolled back using daily backups, with up to 30 backup points per document. Each point represents one day on which the document was edited.

---

*This article is provided for general information only and does not constitute legal advice. Basla Solutions provides legal technology implementation and support services and does not practice law.*