A public link to a folder: contracts that are no longer found only by a colleague

A cloud folder shared by link solves the task in a minute: the guest does not need an account. A year later the link sits in an old letter, a forwarded chat and sometimes in search, if the folder was opened like a site. Inside are acts, passports for a pass, a mailing database. The company thinks this is an "internal disk". To the network it is a page without a password.

How to use links without handing out the archive

• An expiry on the link. "Forever" access is not needed for a one-off invoice.
• A separate folder for sharing, not the root of the disk where everything sits.
• After the project the link is killed. Deleting the letter on your side is not enough: the recipient still has a copy.
• Customer exports do not go into a folder that was shared with a design contractor.

If the link has already traveled, renaming the file does not help: the access itself is changed, and you look for a copy in mail and in a bot chat. Passwords inside documents also count as known if the file sat in the open.

Lexora finds these links when they stick out from the site or from correspondence tied to the domain. That is part of an audit and data protection, not a promise to search the whole internet. The basic audit is free for new clients. If a public folder already held customers' personal data, we say plainly that this is an access incident, and we do not hide it inside a recommendation to "set a stronger password".