There are two kinds of watermark and only one of them does anything useful.
A static watermark is the same on every copy — “CONFIDENTIAL” diagonally across the page. It looks serious and deters nobody, because it’s identical on all fifty copies and identifies no one.
A dynamic watermark is generated per viewer, carrying the name and email of the person who opened it. Every copy is different. Every copy is traceable. That’s the one that changes behaviour.
Why per-viewer watermarking works
It doesn’t prevent anything — a determined person can still screenshot or forward. It changes the calculation.
Someone who’d casually forward an anonymous PDF hesitates when their own name is printed across every page. And if a document does surface where it shouldn’t, you know precisely whose copy it was. In a competitive process, where your underwriting reaching a rival is a real and expensive risk, that’s the difference between a suspicion and a fact.
The deterrent is doing most of the work. Traceability is the backstop.
The manual way, and why it doesn’t scale
You can do this in Acrobat: open the document, add a watermark with the person’s name, save a copy, send it. Then repeat for every recipient.
For three people, fine. For a raise going to thirty LPs, that’s thirty documents to generate, name correctly, track, and re-do every time the model updates. People start skipping it by the fourth deal, which means the control exists on paper and not in practice.
There’s also a versioning trap: thirty individually watermarked copies in a folder, and when the financials change you have to regenerate all of them. In reality somebody sends a stale one.
The automatic way
Platforms that support dynamic watermarking apply it at view time. The document is stored once. When a named viewer opens it, their identity is composited onto what they see and onto anything they download.
That gives you:
- One source document. Update it and everyone sees the current version, still watermarked.
- No manual work. No per-recipient copies to generate or track.
- Nothing to forget. It's a setting, not a habit.
- Coverage on downloads too, not just in-browser viewing.
Turn it on before you upload
The one thing people get wrong.
On most platforms — Shrubs included — watermarking is a setting you enable, and it then applies to everything uploaded from that point forward. It does not reach back and stamp files that were already sitting in the room.
Which produces a predictable and unpleasant surprise: you build the deal room, load thirty documents, remember watermarking at the end, switch it on, and none of the thirty are covered. Everything you upload afterwards is. The originals aren’t.
So: configure the room first, upload second. Ten seconds at the start, versus re-uploading a full document set at the point you least want to.
If you inherit a room that was built without it, the fix is to enable the setting and re-upload anything sensitive. Tedious, but it’s the only way to bring existing files under the policy.
What a good watermark contains
Enough to identify, not so much it ruins readability:
- The viewer's name and email — the essential part
- Date and time of access — useful for narrowing a leak
- A light diagonal repeat across the page, so it can't be cropped out
- Low enough opacity to read through, high enough not to be trivially removed
Don’t cover the page so heavily that legitimate readers struggle. The point is deterrence, not obstruction — a document nobody can comfortably read is a document nobody reads.
When it’s worth it
Worth watermarking: offering memorandums, financial models, rent rolls, tenant schedules, appraisals, anything with underwriting in it, anything under NDA.
Not worth it: marketing flyers, public listing photography, anything you’re actively trying to have circulated widely. Watermarking material you want forwarded is self-defeating.
Where this leaves you
If you send sensitive documents a few times a year, Acrobat and some discipline will do.
If you run deals continuously, manual watermarking is a control that quietly stops happening — and a control that only works when you remember it isn’t a control.
Shrubs applies per-viewer watermarking to PDFs and images, on view and on download, with no per-recipient copies to manage. Switch it on once and every file you upload afterwards is covered. Combined with NDA gating and access logs, it means every document that leaves is traceable to a named person. Free plan includes 2.5 GB (USD pricing).