Why law firms start looking for a Google Drive alternative
Almost every law firm and notary office in Indonesia starts on Google Drive. It is cheap, everyone already knows it, and sharing a file with a client takes one link.
The trouble shows up a few years later. There are hundreds of client folders, people have joined and left, and questions that used to be rare now arrive from corporate clients, auditors and partners:
- Who can open this client's folder today?
- Who downloaded that draft deed last week?
- Which AI tools have read client documents, and what did they read?
- Which country are our files stored in?
This guide compares Google Drive (Google Workspace), Dropbox, OneDrive/SharePoint and folders.id from a law firm's and a notary's point of view. Everything said about the other products comes from their official documentation as of September 2026. Features and plans change, so follow the links again before you decide.
Six things a law firm or notary needs
1. Permissions per client folder
Each client or matter has its own folder, and only the team working on it may open it. Being able to set permissions is not enough: you need to be able to see quickly who has access right now.
2. An access record
Who opened, downloaded, shared or deleted a file. That record is what you reach for when a client asks, or when you suspect a document has leaked.
3. Receiving files from clients
Clients need to send ID cards, old deeds, certificates or financial statements without creating yet another account, and they must not see anyone else's files.
4. AI you can restrict
Staff already use AI to summarise and draft. The question is which documents it may read, and whether there is a record of what it did read.
5. Data location
Some clients, corporates and financial institutions especially, ask where their data is stored. "In the cloud" is no longer an answer.
6. Search in Indonesian, including scans
Much of a law firm's archive is scanned: old deeds, certificates, powers of attorney signed in ink. If the text cannot be read by a machine, those files never turn up in a search.
At a glance
| Need | Google Workspace | Dropbox | OneDrive / SharePoint | folders.id |
|---|---|---|---|---|
| Per-folder permissions | Yes; folder access is inherited by its files | Yes | Yes; by site, library and folder | Yes; also per AI connection |
| Access record | Drive log in every edition; investigation tool in some | Activity page on team plans | Audit Standard, 180 days; Premium longer | Audit log, including every AI request |
| Receive files without an account | Google Forms uploads need a Google sign-in | File requests, no account needed | Request files, work or school accounts | Client portals and a mail-in address per folder |
| AI | Gemini, same access as the user | Dash, within the user's permissions | Copilot, within the user's permissions | Only the folders chosen per connection |
| Data location | US, Europe or no preference | Mainly US; some other countries if eligible | Jakarta available, committed via add-ons | Uploaded files with an Indonesian provider |
The table is deliberately brief. The conditions are in the sections below.
Google Drive and Google Workspace
Drive's strength is familiarity. Nearly every member of staff and every client already knows it, and sharing outside the firm is effortless.
- Per-folder permissions. Drive has Viewer, Commenter and Editor roles, and access you apply to a folder is inherited by every file in it. That is convenient, and it cuts both ways: a file moved into a shared folder is instantly open to everyone who can see that folder.
- Public links. "Anyone with the link" lets people open a file without signing in to a Google Account. For client folders, an admin should switch that off.
- Access expiry is available only to eligible work or school accounts.
- Audit. Drive log events record who viewed, edited, downloaded, printed, deleted and shared files. The basic audit tool is in every Workspace edition; the security investigation tool is limited to certain editions, such as Enterprise Standard and Enterprise Plus.
- Receiving files from clients. Google Forms has a file upload question, but respondents must sign in to a Google Account. Clients without one, or unwilling to use one, get stuck here.
- AI. Google says Gemini has the same access to Workspace data as the user, and admins can restrict its access to some or all Workspace data.
- Data location. Workspace data regions offer the United States, Europe or no preference, and only in certain editions. There is no Indonesian option.
Dropbox
Dropbox is strong on large files and on receiving files from outside.
- File requests let anyone send you files, whether or not they have a Dropbox account, on every plan.
- Team plans (Standard, Business, Advanced, Business Plus, Enterprise) have an Activity page in the admin console for team activity reports.
- Dropbox says its AI assistant, Dash, only gives users access to content they have permissions for.
- Dropbox's storage servers are mainly in the United States, with Australia, the EU, Japan and the UK available to eligible customers. Indonesia is not on the list.
OneDrive and SharePoint
If your firm already runs on Microsoft 365, SharePoint is often the most sensible choice.
- Receiving files. Request files in OneDrive for work or school lets people without an account send you files, and they cannot see anything else in the folder.
- Audit. Microsoft Purview Audit (Standard) is on by default and keeps records for 180 days. Audit (Premium) keeps OneDrive and SharePoint records for a year, and longer with an add-on.
- AI. Microsoft says Copilot only surfaces organisational data the user has at least view permission for.
- Data location. This is Microsoft's clearest advantage in Indonesia. Microsoft lists Jakarta as a datacentre location, and Indonesia is a Local Region Geography. For Indonesia, though, the commitment to keep SharePoint and OneDrive data there comes through the Multi-Geo or Advanced Data Residency add-ons, not the standard Product Terms that cover some other countries. Ask your reseller exactly what you have bought.
SharePoint's weakness is complexity. It can do almost anything, and that is why permissions at site, library and folder level so often pile up until nobody is sure who can open what.
When Google Drive is enough
To be frank, many firms do not need to move. Google Drive, particularly paid Workspace, is enough when:
- Your team is small, say under ten people, and everyone may genuinely see every matter.
- Clients rarely send sensitive documents, or you already have a safe way to receive them.
- No client has yet asked for proof of who accessed their files.
- No contract requires the data to be stored in Indonesia.
- Staff do not connect AI tools to Drive, or that access is controlled in the admin console.
In that situation the most useful thing is to tidy Drive: one shared folder per client, sharing outside the domain restricted, "Anyone with the link" off for client folders, and a look at the activity log once a month.
Signs you need another layer
Usually one of these:
- A corporate client sends a security questionnaire asking for per-document access logs.
- You want AI to read your research and template folders but not client folders.
- Clients send ID cards and tax numbers over WhatsApp because nothing else is easy.
- Old deeds never appear in search results because they are scans.
Using both
Moving platform is not the only route. Many firms keep Drive or SharePoint for day-to-day work and add a separate layer for client portals, AI restrictions and the access record. The practical questions are which folders stay in Drive, which are synced elsewhere, and who manages the permissions.
Where folders.id fits
folders.id is built for law firms, notaries and tax consultants. What it does today:
- Per-folder permissions, including for each AI connection. Claude, ChatGPT or the built-in AI read only the folders you pick.
- An audit log of every AI request, refusals included, and a view log for every client portal.
- Client portals to send, receive or exchange files, with a password, an expiry date and a download limit. Clients need no account.
- NIK and NPWP masked before they reach an AI, on by default.
- Mixed Indonesian and English full-text search, with OCR for scans in Indonesian and English.
- Sync from Google Drive, Dropbox, OneDrive, SharePoint and Box, so nothing has to move at once. Drive, Dropbox, OneDrive and Box can sync both ways.
- Uploaded files are stored with an Indonesian object-storage provider.
folders.id does not replace your email or your word processor, and is not meant to.
Choosing in a week
- Write down the three questions about your files that clients or auditors ask most often.
- Try to answer them with what you use now, and note which you cannot.
- Check your edition and plan against the official documentation linked above. Many audit and data-location features depend on the plan.
- Test with one real client: ask them to send documents through the tool you are considering, with no extra instructions.
- Decide: stay, add a layer, or move.
If step two answered everything, your Drive is enough. If not, start with one client folder, not the whole archive.