Briefs and client material
Briefs, brand guidelines, logos and fonts, research, sales figures and product plans not yet announced. Shared for the project, and for nothing else.
A client portal for agencies and consultancies, with AI kept inside each client’s folder
Your team already puts client decks and data through AI to get the work out faster. In folders.id each client has its own folder, AI reads only the folders you allow, and every access is on the record.
What you hold
What an agency holds
Material a client shared under an NDA, often before anyone outside their own team had seen it.
Drafts and deliverables
Concepts, decks, layouts, copy and reports, going back and forth through round after round of revisions until the client signs off.
Contracts and NDAs
Service agreements, statements of work and NDAs, with the purchase orders and invoices that go with each project.
Your clients’ customer data
Contact lists for a campaign, form sign-ups, CRM exports and survey results. Personal data about your client’s customers, now sitting in your folders.
What binds you
What you are bound by
A summary, not legal advice. For certainty, read the regulation itself.
The NDA and the contract
Your duty of confidentiality to a client comes mostly from what you signed: the NDA, or the confidentiality clause in the service agreement. Check what it says about subcontractors, third-party tools (AI among them), and returning or deleting material when the work ends.
When you process your client’s customer data
An agency handling a client’s customer data for a campaign is usually its processor under UU 27/2022. Article 51 limits you to the client’s instructions and requires their written approval before you bring in another processor. Article 52 applies the controller’s duties to you too, among them confidentiality (Article 36) and preventing unauthorised access (Article 39).
The client’s brand and intellectual property
Logos, fonts, photography and campaigns not yet launched belong to the client or are licensed to them, and the contract usually limits what you may do with them. Keep them where only the team on that account can reach them, and hand them back or delete them as the contract says.
Where folders.id fits
Where folders.id fits in your agency
It does not make you compliant on its own. What it gives you is control over who and what opens a client’s files, and a record you can show when the client asks.
A folder per client, from brief to invoice
The client template sets up folders for the brief, contract, deliverables, approvals, invoices and meetings. Share each client only with the team on the account, so someone working on one brand never sees the next.
AI inside the client’s folder, and no further
Connect Claude or ChatGPT over MCP, or ask the built-in AI, whose answers link to the passage they quote. Each connection reads only the folders you pick, and NIK, NPWP and account numbers are masked before any AI receives them.
Send work and collect assets in one place
Share drafts and collect material through a portal link with a password, an expiry and a download limit, or give a client’s folder its own email address, once email intake is set up. The client needs no account, and every file is scanned for malware before it is opened.
Sign-off on the exact version
The client approves or asks for changes on a specific version, and any two versions can be compared. Your team can highlight, strike through and annotate a PDF without leaving the folder.
An answer when the client asks about AI
The activity record keeps every search and read an AI made, refusals included, and the AI access report exports to CSV. Useful when a client’s security questionnaire asks how you use AI on their material.
Related guides
AI Acceptable Use Policy Template for Firms
A copy-ready AI acceptable use policy for law, notary, tax and accounting firms: approved tools, banned data, human review, incident reporting and rollout.
Read the guideData Protection Officer Indonesia: Does Your Firm Need One?
When Indonesia's PDP Law requires a law firm, notary, tax or audit firm to appoint a data protection officer, and how a small firm can fill the role.
Read the guideIs Google Drive Safe for Confidential Client Documents?
What Google already protects, where firms usually slip, and 14 steps to harden Google Drive for law firms, notaries, tax advisers and accountants.
Read the guideQuestions
Questions agencies ask
Does our client have to approve the AI we use?
Check your contract first, and ask counsel if in doubt. If you handle a client’s customer data as its processor, Article 51(5) of UU 27/2022 requires the client’s written approval before you involve another processor, and an AI service that receives that data may count as one. In folders.id you can keep AI out of that client’s folders entirely, or limit it to the ones the client has agreed to.
Where are our files stored?
Uploaded files are stored with an Indonesian object-storage provider; the application and its database, including the text read out of documents for search, currently run in Singapore. When an AI reads a document, the content goes to the AI provider you connected and that provider’s policies apply — so you choose the folders, and identity numbers are masked first.
Everything we have is in Google Drive. Do we have to move it all?
Not at once. Import once or sync folders from Google Drive, Dropbox, OneDrive, SharePoint and Box. Drive, Dropbox, OneDrive and Box can also sync both ways, so you can start with a single client.
Can clients sign the SOW or the NDA here?
Yes, where an ordinary electronic signature is enough: every step goes into a certificate in which any tampering can be detected. It is not a certified electronic signature under UU ITE; use a certified provider (PSrE) where one is required.
What does it cost a small agency?
There is a free plan with the same permissions and activity record as the paid ones. Plans are not priced per person: each carries storage, file and member limits plus monthly credits for work such as OCR and AI answers.
Start with one client
Create a free workspace, use the client template, and send one portal to a client. Then connect an AI to that folder and see for yourself what was recorded.
Create your workspace