Reputation: 1678
-
Total posts: 12
There are a lot of options to share documents over the internet. The problem with most of the options, as pointed out by Adrian above, is compliance with local laws, federal laws, ethical obligations, and maybe even corporate compliance. The most compliant option will always be one that is created internally, but this will also be the hardest to implement and will require a larger capital investment up front. The problem with storing sensitive data in the cloud stems from not knowing where your data is, this means that auditing physical access to the server can't be accomplished. SmartVault, as mentioned by Natasha, does actually tell you where the servers are located, but that only narrows it down to a data center that contains thousands of servers. The only way to mitigate physical access is to encrypt the data while on the server, and in transit between endpoints. There are some options that could be cobbled together from available components for little to no cost. PGP (Pretty Good Privacy) and GPG (Gnu Privacy Guard) can be used to secure email and attachments between sender and receiver. They could also be used to encrypt large documents for sharing from the cloud provider of your choice. The downside to those options are the complexity involved for your clients to sign and return a document. I think the best cloud option that I have seen to date would probably be Box.net, because they are HIPAA compliant, and store your confidential documents with encryption that staff have no access to. SmartVault on the other hand allows their staff access to your data.