689Cloud SecureDocs is a developer-first DRM and document encryption API for embedding enterprise content protection directly into your own applications, portals, and workflows — no need to build Information Rights Management from scratch.
Call a REST endpoint to encrypt a PDF, Office document, or video, stream video securely with DRM over secure HLS, set access policies, track every open, and revoke access remotely — all from inside your product.
Powering secure document workflows for SaaS platforms, fintech, healthcare, and enterprise IT teams that handle confidential files at scale.
Before the code, here is what SecureDocs protects and controls. Every capability is exposed through the same REST API — so you can encrypt any supported format, decide exactly how it is distributed and viewed, and keep full tracking and license control after delivery.
Encrypt and DRM-protect the file types your business runs on, with format-aware protection.
Control exactly how recipients receive and view protected content across documents and video.
Know who accessed what, and keep control of every license after content is distributed.
SecureMail and SecureDrive put 689Cloud's Information Rights Management in the hands of end users. SecureDocs puts the same engine in the hands of developers — so you can build secure document handling into any application, portal, or automated workflow.
Instead of stitching together encryption, key management, viewers, tracking, and revocation yourself, you call a well-documented REST API. Protection travels with each file, and you stay in control of every policy from your own backend.
Upload a file, apply an IRM policy, and get back a protected document and a secure viewer link. The SecureDocs API handles encryption, key management, and the viewer so you can focus on your product.
# Authenticate with your API Key and App ID headerscurl -X POST https://api.689cloud.com/documents \
-H "X-Api-Key: $SECUREDOC_API_KEY" \
-H "X-App-Id: $SECUREDOC_APP_ID" \
-F "file=@contract.pdf" \
-F 'policy={
"view_only": true,
"watermark": "{{recipient_email}}",
"expires_in": "72h",
"allow_download": false
}'
# JSON response{
"document_id": "doc_9f2a7c41",
"status": "protected",
"viewer_url": "https://view.689cloud.com/doc_9f2a7c41",
"expires_at": "2026-08-10T09:00:00Z"
}// Call the REST API directly from any language (JS Fetch shown)await fetch('https://api.689cloud.com/documents/doc_9f2a7c41/access', {
method: 'POST',
headers: {
'X-Api-Key': process.env.SECUREDOC_API_KEY,
'X-App-Id': process.env.SECUREDOC_APP_ID,
'Content-Type': 'application/json'
},
body: JSON.stringify({
email: 'partner@example.com',
permissions: ['view']
})
});
// A 401 is returned if the API Key or App ID is invalidSecureDocs is a language-agnostic REST API. Authenticate every request with your API Key and App ID, then automate the full document lifecycle from your own backend. Ready-to-copy code samples are provided across many languages in the API documentation.
Every SecureDocs endpoint applies file-level protection — not just access links. Compose them to build exactly the secure document workflow your application needs.
Encrypt and apply IRM policies to Office and PDF files with a single POST request.
Grant, update, or revoke recipient access programmatically, bound to verified identities.
Query views, downloads, and local file openings for full audit visibility.
Call the revoke endpoint to cut access instantly — even for downloaded files.
Drop a secure, view-only viewer into your app with a generated viewer URL.
Set time-based expiry per document so access ends automatically after a window.
Apply viewer-identity watermarks server-side to discourage leaks and captures.
Encrypt MP4 video and stream it securely with DRM over secure HLS.
The SecureDoc API is organized into logical groups. Explore the full request and response reference, with live code samples, in the API documentation.
Upload files and apply IRM protection, then retrieve document status and metadata.
Grant, update, and revoke recipient access to protected documents by identity.
Retrieve access activity — views, downloads, and local openings — for audit visibility.
Manage policies and account settings, and get your API Key and App ID from the Console.
Access links and folder permissions stop protecting a file the moment it is downloaded. SecureDocs applies Information Rights Management to the document itself through the API — so access, copy and print controls, watermarks, and expiry stay enforced wherever the file travels.
Protection is embedded in the document, not just the delivery mechanism.
Set view-only, download, print, expiry, and watermark rules per API call.
Recipient authentication ensures only intended viewers open the file.
Cut access at any time from your backend, even after download.
Integrate the SecureDocs API once, and every document your application handles is protected by default.
Get your API Key and App ID from the SecureDoc Console to start making requests.
Send authenticated requests with the X-Api-Key and X-App-Id headers from any language.
POST a file with a policy. SecureDocs encrypts it and applies IRM automatically.
Authorize recipients by identity and set view, download, print, and expiry permissions.
Use the generated viewer URL to render protected files securely inside your app.
Query access activity for audit trails, and revoke access programmatically anytime.
See what it takes to build document security in-house versus embedding the SecureDocs API.
| Capability | Build In-House | 689Cloud SecureDocs API |
|---|---|---|
| File encryption & key management | Design and maintain yourself | Built in |
| File-level IRM protection | Complex, specialized effort | One API call |
| Secure document viewer | Build and host | Embeddable viewer URL |
| Access tracking & audit trail | Custom logging pipeline | Built-in API |
| Remote revocation after download | Very difficult | Yes, via API |
| Dynamic watermarks | Custom rendering | Server-side, per policy |
| Expiry policies | Custom scheduling | Per-document setting |
| Protect Office, PDF & MP4 video | Format-by-format effort | Built in |
| REST API & multi-language code samples | N/A | Yes |
| Time to production | Months | Days |
| On-premise / private cloud option | Full ownership burden | Available |
The same API powers very different products. Here are three of the most common ways teams integrate SecureDocs — each combining encryption, controlled viewing, and license management in a different way.
Power M&A, due diligence, and investor deal rooms inside your own platform. Every document is encrypted, watermarked, and fully audited, so you can grant, track, and revoke access as a deal moves forward.
Protect premium course content in your learning platform. Stream training videos with DRM over secure HLS and lock down PDFs and slide decks, so paid material cannot be downloaded or redistributed.
Share patient records, reports, and referrals from your healthcare system with strict, identity-bound access. Recipients authenticate before viewing, and every open is logged for compliance.
Beyond these flagship scenarios, SecureDocs powers secure content handling across regulated and enterprise environments.
Add IRM-protected document sharing, viewing, and tracking as a native feature of your product.
Deliver statements, reports, and applications with programmatic access control and audit trails.
Automate protected delivery of contracts, case files, and confidential work product.
Protect e-books, research, and premium video with encryption and video DRM against redistribution.
Guard specifications, drawings, and IP shared with suppliers and partners through your systems.
Embed document protection into internal portals, RPA, and back-office automation.
Consume the SecureDocs API in the environment your organization requires — from managed cloud to fully on-premise.
Call the 689Cloud-hosted API and start protecting documents in minutes with minimal setup.
Run the SecureDocs API in a dedicated environment for greater control and data isolation.
Deploy the API on your own infrastructure to meet regulatory or data residency requirements.
Work with our team on tailored connectors and integration support for your stack.
689Cloud SecureDocs is a document security API that lets developers embed enterprise Information Rights Management into their own applications. With a simple REST API, you can protect files, control access, track usage, and revoke access programmatically — without building IRM yourself.
SecureMail and SecureDrive are end-user products for sending and sharing protected files. SecureDocs exposes the same underlying protection engine as an API, so you can integrate document security directly into your own product, portal, or automated workflow.
You can upload and protect documents, apply per-file policies (view-only, download, print, expiry, watermark), grant and revoke recipient access, embed a secure viewer, and retrieve access and tracking activity for audit trails.
SecureDoc is a language-agnostic REST API you can call from any stack. The API documentation includes ready-to-copy code samples for cURL, Node.js, Python, PHP, Java, Go, C#, Ruby, Swift, and more.
The SecureDoc API authenticates with an API Key and App ID. Include them in every request using the X-Api-Key and X-App-Id headers. You can get your API Key and App ID from the SecureDoc Console. A missing or invalid credential returns an HTTP 401 Unauthorized response.
Yes. For IRM-protected files, you can call the revoke endpoint at any time to cut access — including for documents already downloaded by recipients.
The SecureDoc API secures Microsoft Word, Microsoft Excel, Microsoft PowerPoint, PDF, and MP4 video files.
Yes. The SecureDoc API provides video DRM for MP4 files — encrypting the video and delivering it through a secure HLS stream so it can be viewed in a protected player without exposing a downloadable source file.
Yes. SecureDocs encrypts PDF and Microsoft Office documents (Word, Excel, PowerPoint) and manages the encryption keys for you, so you can add strong document and PDF encryption without building a crypto stack yourself.
Yes. The SecureDocs API is available as a managed cloud service, in a private cloud, or fully on-premise to meet security, regulatory, and data residency requirements.
Embed IRM protection, access control, tracking, and remote revocation into your application — without building document security from scratch. Get API keys and sandbox access to start today.
