FileDial › Guides › Privacy and security
How to protect client documents as a freelancer
By Himanshu Ranjan · Updated 8 November 2026
Encrypt your Mac with FileVault, keep client files out of free web tools, strip metadata before sending anything back, share through channels you control, and delete files when the engagement ends. You do not need an IT department for this. A short written routine covers most of what clients actually worry about.
Why this lands on you
Clients hand freelancers contracts, financials, customer lists and unpublished work, usually with no security team on your side. When something leaks, the client remembers who held the file. The FTC's guide for businesses gives a useful frame even for a one-person shop: take stock of what you hold, scale down to what you need, lock it, pitch it when you are done, and plan ahead for a problem.
Lock the Mac first
Turn on FileVault in System Settings under Privacy & Security. Apple's platform security guide says that on Apple silicon the internal volume is encrypted by default and FileVault adds your password to the key protection, which matters if a laptop is stolen. Use a strong login password, enable automatic screen lock, and keep macOS updated. Put each client in its own folder so you can see what you hold and delete it as a unit.
Keep files off random web tools
The FBI warned in March 2025 that free online converters can return files carrying malware and can scrape personal data from uploads. In 2024, Cybernews reported two PDF services that exposed 89,062 uploaded files through open storage. When the file belongs to a client, do not upload it to a site you have not vetted. A contract that says you will keep their documents confidential does not stretch to a free converter's server.
FileDial runs every tool on the Mac and never uploads files, and every tool works with Wi-Fi off. That covers the usual freelance document jobs: Compress › Compress PDF (strong), merging and splitting, and Sign & Lock › Add password…
Clean what you send back
Files you deliver carry your working history. Remove it. Sign & Lock › Sanitize for sending… removes scripts, actions, attachments, comments and metadata from a PDF and writes a fresh file. For documents, spreadsheets and slides use Privacy › Remove metadata, and Privacy › Accept changes and remove comments for tracked changes. For photo deliverables, Share › Client proof… makes a watermarked 1600 px JPG with metadata removed, useful for proofs before final payment.
Archive › Deliverable package… bundles files in a ZIP with a README.txt and a SHA-256 manifest, so the client can verify what they received.
- Duplicate the final deliverable; never clean your working file.
- Run the matching clean-up tool on the copy.
- Open the new file and check it, including the document properties.
- Send it, then archive the original in the client folder.
Share with channels you control, then close out
Prefer the client's own portal or an encrypted, password-protected file with the password sent separately. Large deliverables can go by Mail Drop, within Apple's 5 GB limit and 30 day expiry. When the engagement ends, agree in writing what you will keep and for how long, then delete the rest and empty the Trash. See the guide on securely deleting files on a Mac for what deletion does and does not guarantee on an SSD.
This is practical guidance, not legal advice. If your contracts include data protection terms, follow those first; a tool can support a policy but does not make you compliant on its own.
Common slips freelancers make, and the quick fixes
The most common slip is letting client files pile up in Downloads, the Desktop and email attachments with no folder per client. If you cannot list what you hold, you cannot delete it at the end or tell a client what was exposed after a theft. Fix: one folder per client inside one Clients folder, and a weekly five-minute sweep of Downloads.
Second, reusing a personal Mac, cloud account and browser profile for everything. A family member's login, a shared photo library or a browser that syncs passwords widens who can reach client material. Fix: a separate user account or at least a locked screen, and a password manager with unique passwords.
Third, returning deliverables with your working history. A Word file with tracked changes, a PDF with a draft title and your name in the properties, a spreadsheet with a hidden sheet: each tells the client, or the next reader, more than intended. Fix: clean a copy before sending, as described above.
Fourth, keeping everything forever 'just in case'. Old projects become liabilities. Agree a retention period in the contract, set a calendar reminder to review it, and delete when it is due; see the guide on securely deleting files for what deletion does on an SSD.
Fifth, ignoring backups. An encrypted backup protects against a lost laptop and against ransomware of the kind the FBI warned about in the context of malicious converters. Time Machine to an encrypted external drive, plus a second copy elsewhere, is a baseline. Test a restore once a year.
None of this requires a security team, and none of it makes you compliant with a particular regulation by itself. It simply shrinks the list of things that can go wrong to a handful you can manage.
Questions
Do I need special software to protect client files?
Not necessarily. FileVault, a strong login password, local processing of client files and a habit of cleaning documents before sending cover the main risks. Add a password manager and an encrypted backup for a solid baseline, and consider a separate user account for client work if the Mac is shared.
Should I keep client files after a project ends?
Only as long as you need to and as your contract allows. Agree a retention period up front, put a reminder in your calendar, then delete the files and the backups of them. Keeping fewer files means less to lose in a breach and less to explain to a client afterwards.
Is it okay to use cloud storage for client files?
Many clients allow it, but check the contract first. Use services the client approves, protect shared links with passwords and expiry, and avoid free tools you cannot vet. Local encrypted storage plus an encrypted backup is the safest default when the client has no preference.
What is the quickest improvement for a freelancer?
Turn on FileVault and stop uploading client documents to free web tools. Those two steps address a stolen laptop and a documented source of leaks, and both take minutes. After that, add a folder per client and a clean-before-sending step for deliverables.