Glossary
Watermarking
Also called: watermark
Watermarking applies a visible marker to a document preview or download — draft status, confidentiality level, or recipient identity. Its purpose is to make a document's status obvious to whoever is holding it, particularly once it has left the system as paper.
Watermarking explained
The problem it addresses
A document that leaves the system loses its context. A printout of a procedure looks identical whether it is the current revision or one retired two years ago, and on a production floor or a construction site the printed copy is frequently the one in use.
Watermarking makes the copy carry its own status, which is the only mechanism that survives printing.
Recipient watermarking
Stamping a document with the identity of the person who downloaded it changes behaviour more than a confidentiality label does. It does not prevent a document being forwarded; it makes the forwarder identifiable, which is a deterrent rather than a control.
What it is not
It is not a data leakage prevention control and should not be presented as one. It does not stop a screenshot, a photograph of a screen, or retyping. Any vendor positioning watermarking as protection against exfiltration is overstating, and a security reviewer will notice.
The honest framing is that watermarking addresses accidental misuse — the superseded printout, the draft treated as final — and does nothing about deliberate exfiltration.
Static versus dynamic
A static watermark is part of the stored document and applies to everyone. A dynamic watermark is applied at the point of preview or download and can carry the viewer's identity and the current status. For document control the dynamic kind is the useful one, because status changes over time and the stored bytes should not.
FAQ
Watermarking: common questions
Does watermarking prevent documents leaking?
No. It makes a leaked document traceable and makes a superseded one identifiable. Preventing exfiltration is a different problem and watermarking is not part of the answer.
Should watermarks appear on previews or only downloads?
Both, for status marking — a reader looking at a superseded document on screen needs to know. Recipient watermarking is more useful on downloads, since that is the copy that travels.
Related terms
- Audit trailAn audit trail is an append-only record of every action taken on a document — views, downloads, edits, approvals, permission changes and deletions — with the acting user, timestamp and affected version.
- Chain of custodyChain of custody is the documented, unbroken record of who has held, accessed or altered an item of evidence, and when.
- DispositionDisposition is what happens to a record when its retention period expires: destruction, transfer to an archive, or a decision to extend.
- Document controlDocument control is the discipline of ensuring only approved documents are in use, superseded ones cannot be mistaken for current, and every change is authorised and recorded.
- Information governanceInformation governance is the framework of accountability, policies and controls determining how an organisation creates, uses, retains and disposes of its information.
- Legal holdA legal hold suspends the routine destruction of records that may be relevant to litigation, an investigation or an audit.
Last reviewed: 28 August 2026. Browse the full glossary.