Use a report’s Sharing page to decide who can open it and what they can do with it. Open the report and choose Sharing. Only the report’s owner can manage this.
View-only access, watermarks, passcodes, NDAs and page analytics are included in every plan.
Share with a person
Enter their email
Under Sharing, enter the Recipient Email. If they already have an account, access is granted directly. If not, they get an invitation by email, and they sign in or create an account to open the report.
Choose a permission
Choose View only, Comment or Suggest.
Share
Choose Share. Everyone you’ve shared with appears under People With Access.
If the email couldn’t be delivered, you’ll see Invitation saved, email not sent. Try sharing again later.
A report that isn’t locked on chain is a draft. To share one, turn on Allow draft sharing for this unverified version. Recipients see a DRAFT stamp.
Share with a viewer group
Under Share With Audiences, tick one or more Viewer groups, choose the Membership behavior, and choose Share with selected groups.
- Dynamic membership follows future changes to the group.
- Snapshot membership freezes access to the current members.
To create a group, see Create viewer groups. For access that covers future reports too, use follow access.
Protect the document
The Document protection card sets what recipients can do with the original file. It applies to everyone you’ve shared the report with, from their next view. You always see the original.
- Allow downloads: turn this off and recipients read page images in Sureshake. They can’t download or open the original file.
- Watermark pages: each page a recipient views shows their email and the time. If downloads are also on, a downloaded PDF carries the same stamp on every page. A file that can’t be stamped can’t be downloaded while the watermark is on.
To set a different rule for one audience, go to Saved audience policies under Share With Audiences and change Downloads or Watermark from Report default.
If someone reaches a report in more than one way, the strictest rule wins. They can download only if nothing forbids it, and pages are watermarked if anything requires it.
Add a passcode, email check or NDA
These protect an individual share. Under People With Access, find the person and choose Access protection.
| Protection | What the recipient has to do |
|---|---|
| Require a passcode | Enter the passcode. The report stays open for them for 12 hours. Send the passcode separately from the invitation. |
| Only (the invited email) | Open it from the invited email address. Anyone opening a forwarded invitation from another account is refused. |
| Require an NDA | Read your text and sign by typing their full name. |
Sureshake checks them in that order: email, passcode, NDA. You and your company’s team members are never asked for any of them.
After five wrong passcodes in 15 minutes, the recipient has to wait before trying again. Changing the passcode locks the share again for anyone who used the old one.
What an NDA records
When someone signs, Sureshake records their name, email, the time and a fingerprint of the exact text they accepted. The share shows who signed and when.
The fingerprint is also anchored on the Base blockchain, in batches, with no name or email on chain. The share links to a public page where anyone can check it. See Verify attestations.
If you edit the NDA, recipients are asked to sign the new text. This records that someone accepted your text. Whether that text is enforceable is a question for your lawyer.
What recipients see
Recipients find your report under Review > Shared With Me. It opens on a Report tab with the key figures and what the report doesn’t contain, and a Source data tab with the files behind it. A Verification panel sits beside it, and they can ask questions with Ask about this report.
A share doesn’t reveal your other documents or workspace. A follow or connection on its own doesn’t grant access to any report.
Revoke access
Under People With Access, choose Revoke. For an audience, choose Revoke under Saved audience policies.
Revoking doesn’t recall a copy someone already downloaded. Turn off Allow downloads before you share anything that shouldn’t leave Sureshake.
Withdraw a report
Deleting a report nobody else has had removes it completely. Once anyone else has had it, deleting withdraws it instead. That covers a share, an audience grant, a public listing, a shared collection, or a view by someone else.
- Its content, original file and page images are deleted.
- Recipients who open it see that you withdrew it and when, rather than a broken link. It stays under Shared With Me, marked Withdrawn with the date.
- Its title, fingerprints and share history stay on record, so someone who kept a copy can still check it against the fingerprint.
This can’t be undone. A report locked on chain can’t be deleted or withdrawn.
See who read it
The report’s Analytics page shows views, readers and time per page. See the analytics guide.