PRIM'X ZONEPOINT

ZONEPOINT is an encryption product from PRIM'X designed to protect documents stored in Microsoft SharePoint libraries. It encrypts data at the source, on the user's terminal, before it is uploaded to SharePoint, so files remain encrypted at rest on the server and in transit. Access is partitioned on a folder-by-folder basis, allowing cryptographic separation between different teams, work groups, or departments within the same SharePoint environment. The product is intended for organizations that use SharePoint for both internal document sharing and external sharing with third parties, including cases where the SharePoint server is hosted or operated by an external party that is not part of the trusted zone. Because data stays encrypted regardless of where the server is hosted, companies retain the ability to choose their hosting location without exposing content to server operators. Encryption policies are set by document/library owners and can be managed centrally by application or security officers, who can also delegate administration to authorized users, providing corporate governance over how encryption is applied. Encryption and decryption occur locally on user workstations using individual user keys, so documents are never stored unencrypted on the server. Users interact with documents through their standard browser or file explorer without changes to their normal workflow. Technical specifications include compatibility with MS SharePoint servers, support for Chrome, Firefox, and Edge browsers, access via certificate/key and/or password, AES 256 encryption, compatibility with PKCS#11 cryptoprocessors (smartcard or USB tokens), compatibility with most market PKIs, and a companion mobile app (ZONEMOBILE) for iOS and Android.