Solutions
The other side gets the pack. Not the personal data.
For litigation support, disclosure counsel, and practice groups that live in Outlook and still have to ship a verified binder.
Law firms leak personal data in mail every day, then again in the production set. Outbound Guard SoftBlocks unmatched CPR and escalates press or opposing destinations. Fast Track accepts an identity once across the exhibits. Binder Studio packs TOC, stamps, and Bates on the verified PDFs. The production portal hands opposing a receipted download instead of a zip. Prompt Guard sits in front of Copilot. Conversation Redact covers chats and recordings in the same workcell.
30-day free trial · no card required
User stories
When this is already the job
Each When should make you nod. The ink cell is the module that sits in that moment. Then is the useful part: what it does, and what you stop doing in Word, Excel, Outlook, or a zip.
When
A partner hits Send on a reply to a journalist who asked about a neighbour in the file.
Then
Unmatched CPR is SoftBlocked at Send. Own-contact details can still go. You get a body-free count for the DPO instead of a screenshot of a draft you cannot take back.
When
Counsel emails a draft pleading to opposing, and last night someone pasted a client's CPR into the thread.
Then
Journalist and opposing mailboxes escalate automatically. The toast sits in Outlook. You do not stand up a 12-month Purview program to get a send gate for the other side.
When
Lit support has a few hundred exhibits, and the same three people appear in every PDF.
Then
Accept a person once: name, email, ID, and phone follow across the set. You stop hunting page by page in Adobe. Download is refused if a leftover string survives apply.
When
Exhibit B is counsel work product. It has to stay in the file, not in the production.
Then
Flag the language, keep basis and page range on a privilege log, and produce a clean pack beside it. Opposing gets the verified export. You keep the schedule.
When
Friday's production needs a table of contents, exhibit stamps, and Bates numbers. The pack currently lives in three Word files plus a zip.
Then
Assemble volumes on the PDFs you already verified. TOC, cover, bookmarks, stamps, and Bates run in the workcell. Binder assembly stops being a second tool after redaction.
When
Opposing counsel wants the produced set today. You do not want to email a multi-gigabyte zip.
Then
Share a time-limited portal of completed redacted files, with Bates and a watermark. Withheld rows show schedule metadata only. Downloads are receipted. Revoke the link when the window closes.
When
An associate copies a memo into Copilot to tidy the language before a client call.
Then
CPR, emails, and phones leave the clipboard before paste. The firm keeps Copilot. The memo's personal data does not become a prompt.
When
The hold includes Teams chats and a recorded conference, and someone is about to produce the raw export.
Then
Review speaker turns with the same identity Fast Track as documents. Names and IDs leave the transcript. Voices can beep, silence, or anonymize. The recording is not a second vendor.
Activity map
What this team uses Northdocs for
Not a feature list. Grouped the way the work shows up.
Outlook, every working day
SoftBlock unmatched CPR
Own-contact details can go. Anyone else's CPR stops at Send, with a correspondent-aware gate.
How the job worksEscalate press and opposing counsel
Destination class raises the bar for journalist and other-side mailboxes without a full DLP project.
How the job worksWipe or tokenize in compose
Clean the draft in Outlook. Purview can notify, block, or encrypt. It does not wipe the text you are about to send.
How the job worksInspect attachments on Send
PDF and Office files are inspected at send time. Permanent destruction of a file is a Cases job, not the default warning.
How the job worksBody-free accountability pack
Counts, destination class, and overrides for the DPO. No mail bodies stored.
How the job works
Disclosure packs
Litigation and discovery redaction
Content-stream removal plus fail-closed re-extract. Overlay black boxes are not enough.
How the job worksFast Track identity dossiers
Name, email, ID, and phone for one person, accepted once across the exhibit set.
How the job worksPrivilege spotting and withhold schedule
Flag counsel work product, keep a privilege log, and produce a clean pack beside it.
How the job worksLegal binders
TOC, cover, exhibit stamps, and Bates on the PDFs you already verified. Binder assembly is not a second tool after redaction.
How the job worksProduction portal
A time-limited portal of completed redacted files. Withheld rows are schedule metadata only. Downloads are receipted. Revoke the link when the window closes.
How the job worksClient DSAR production
The same identity-first path when the firm answers access requests for a client or for itself.
How the job works
AI and conversation hygiene
Prompt Guard
Clipboard wipe before ChatGPT, Copilot, or any paste the firm does not want to leak.
How the job worksChats and meeting audio
Teams, Slack, WhatsApp, captions, and recordings. Beep, silence, or forensic voice anonymize.
How the job works
Firm IT and diligence
DMS import
iManage, HighQ, SharePoint, OneDrive, and Datasite. Redact in Northdocs, optionally write back after sandbox certification.
How the job worksEntra SSO
Self-serve Microsoft EASIE or Entra SAML on Enterprise, with Enforce SSO.
Open the setup guideEU residency and Trust Center
OVHcloud Frankfurt, DPA, subprocessors, architecture, and the security questionnaire.
How the job works
Related workloads
Use-case pages go deeper on a single job.
Litigation disclosure
Produce defensible redacted binders for discovery and court packs.
Read the use caseOutbound email
Stop unmatched CPR leaving Outlook, with a send gate, attachment inspect, and DPO evidence. No Cases required.
Read the use caseDSAR production
Cut through subject access volume with identity-first review and fail-closed export.
Read the use caseChats and meeting audio
Produce Teams, Slack, and WhatsApp exports and recordings without leaving names, IDs, or voices in the file.
Read the use caseQuestions this team asks
- Is this a full eDiscovery platform?
- No. Northdocs is the redaction and disclosure workcell: find PII, review, remove, verify, and pack. It complements your DMS and review tools.
- We already have Microsoft Purview.
- If E5 DLP already fires on Exchange, the gap is wipe-in-compose, press versus opposing class, body-free evidence, and Cases when a file must be destroyed. If you are on E3, coarse Denmark PIN to external is not a law-firm preset.
- Can we start with Outlook only?
- You can. Outbound Guard is mailbox seats without Cases. Most teams start with the disclosure workcell (the trial includes both). Outlook-only is a lighter SKU.
Start with the pack you have to ship
Upload a real FOI, DSAR, or litigation file and download only after verification passes. Add Outbound Guard when mail is the next leak.