Watermark function
The watermark function is used to reduce the risk of leakage during file preview, download, print, share and outgoing process. Babel's watermark capabilities are divided into interface/preview watermarks, output file watermarks, and real watermarks embedded in files, and work with permission control, sharing policies, audit logs, confidentiality levels, and enterprise console configurations.
Watermark type
| Type | Description | Typical uses |
|---|---|---|
| Text watermark | The administrator can set fixed text, such as company name, project name, confidentiality level | Enterprise unified confidentiality tips |
| Register account watermark | Display watermark based on current visitor account information | Trace screenshots, photos or leaked sources |
| Image watermark | Use corporate logo or specified image overlay | Brand recognition, copyright protection |
| Mixed watermark | Private cloud version can combine multiple watermarks according to configuration | High security level files or outgoing data |
| True watermark | Watermark embedded in file content or output file | Scenarios where the mark needs to be preserved as the file propagates |
Effective range
The scope of use of watermarks can be configured by the administrator in the enterprise console. Common strategies include:
- Enable watermarks on all files.
- Enable watermarks only on all externally shared files.
- Allow file sharers to choose whether to enable watermarks when sharing.
- Enable for specific enterprises, departments, security policies, confidentiality levels or file transfer scenarios.
- Used in combination with permission policies such as "preview only, prohibit downloading, and allow downloading of watermarked PDF".
Preview, download and print
The white paper clearly mentions that the preview file can have an embedded watermark and can be saved as a watermarked PDF file. When watermarking is turned on, the preview transcoding server will preprocess the preview image and embed the watermark in the image; image files can also be saved as watermarked PDFs. For different formats such as Office, PDF, pictures, CAD, 3D, video screenshots, etc., the final effect depends on the preview/transcoding module, file format and deployment configuration.
Relationship with permission system
Watermarks are not a replacement for permissions, but part of permissions, auditing and leak tracing:
- Access controls determine who can view, edit, download, share or print.
- Watermarks are used to add visual cues and traceability identification when access has been authorized.
- Sharing permissions determine whether external visitors can preview, download, edit or continue sharing.
- Audit log records file access, sharing, downloading, permission adjustment and other behaviors.
- Confidentiality levels, IP policies, Mac binding, two-factor authentication, and departmental security policies further tighten access boundaries.
Administrator configuration
Administrators can maintain watermark types, parameters, and display ranges in the enterprise console. Related capabilities listed in the feature list include "Watermark type selection and watermark settings" and "Real watermark embedded in files." In the privatized deployment scenario, it can also be configured in combination with corporate logo, login background, module switches, security policies and customized transcoding services.
Watermark setting instructions
The Babel watermark is set by the administrator in the enterprise console. It can use one of text watermarks, registered account watermarks, and picture watermarks. The private cloud version supports three kinds of watermark overlays; after the setting is completed, the watermarks will be displayed on the files within the scope according to the administrator's configuration.
Related chapters
White paper excerpt
The BabelBird Enterprise Console centralizes the administrator's functions for managing the entire enterprise. Enterprise administrators can configure various options of the enterprise network disk in the enterprise console, turn on or off the required functional modules, set the organizational structure, customize roles and permissions, manage members, set watermarks, set department security policies, IP access policies, bind accounts and mac addresses, monitor network disk usage...
Main columns
- Enterprise configuration: Comprehensive management of enterprise network disk configuration items, such as space allocation, whether personal files are allowed, allowed file upload size, historical version validity period or number of historical versions, various administrator assignments, changing logo and login background, prohibiting or enabling external sharing, and whether to accept email notifications. Various enterprise configuration options can be found in the enterprise configuration column.
- Organizational structure: Unified management and maintenance of the enterprise's organizational structure and departments. Ability to view departments and management departments in a tree view. View department members, allocate department space, create sub-departments, set department security policies...
- Permission management: Create roles and change role permissions, and manage custom file permissions.
- Member management: You can search and filter the member accounts of the entire enterprise, add new members, import members in batches, assign member departments and roles, view and manage the information and usage of each member in detail, handover when members leave, add, delete, modify and check member accounts, allocate and limit member space and traffic.
- Tag management: unified management of tags used by enterprises, adding tags and classifying tags to facilitate users to select tags.
- File configuration: Add an optional process for file approval and manage the already added approval process. It also has a file blacklist function that can prevent specific types of files from being uploaded.
- Corporate notifications: Create corporate notifications, manage historical corporate notification lists, and send corporate notifications.
- Group management: Create and manage groups. When sharing files in the frontend, you can choose which group to share them with.
- Watermark settings: manage document watermark types, adjust watermark parameters, and set watermark display range.
- Access log: Manage and query all access records of the entire enterprise network disk. Log reports can be exported.
- IP policy list: The upload and download behavior of corporate files can be managed through IP policies. For example: downloading files is prohibited in a certain IP range, and you can download files by returning to a certain IP range.
- Mac address binding: You can bind the user account to the mac address of a specific device, so that the account can only be used on the device bound to the mac address. You can also create a mac address pool.
- Statistical analysis: Statistically analyze the usage of network disk. Including system activity, file number statistics, active files, number of new files within a period of time, number of uploads per month, and traffic usage.
- Workbench push: Set the default display card of the workbench.
- System configuration (private deployment version only): configure the mail server, bind third-party SSO authentication, and set the third-party authentication login method.
- Third-party account synchronization (private deployment version only): Set the third-party account synchronization time and query the third-party account synchronization record.
- Optional modules (private deployment version only): Select the functional modules that the enterprise needs to display and turn off some functional modules.
- Monitoring and warning: Set warnings for abnormal behavior, and notify administrators when abnormal behavior occurs (for example: users delete files in large numbers)
- Transfer file configuration: The configuration of the data ferry system allows data ferrying between multiple sets of BabelBirds. Configure the receiving port and sending port of data.