Sharing business files by email: the risks nobody considers

Every day, in thousands of companies, someone opens their inbox, downloads an attachment, edits it and sends it back. It's the most natural way to work with colleagues, accountants and clients. Yet sharing business files by email – price lists, orders, customer records, the Excel spreadsheet that runs the whole business – carries risks that almost nobody considers until something goes wrong.

In this article we look at what those risks are, why they are so easy to underestimate, and how your team can collaborate without scattering copies of your data across every inbox.

How email became the "server" of so many small businesses

In small companies, email starts out as a way to communicate and quietly turns into a storage and collaboration system. Nobody decides it; it just happens. The customer list lives in an attachment, the latest price list is "in Mark's last email", and this week's orders arrive in a spreadsheet that has been forwarded three times.

That works while two or three people are involved. Then the business grows, new staff join, and external consultants and sales agents need access. Suddenly the Excel file sent by email becomes the weakest link in the whole organisation.

The hidden risks of sending business files by email

1. Copies multiply out of control

Every attachment you send creates a new copy of the file. One stays in your Sent folder, one lands in the recipient's inbox, and another ends up on their laptop when they download it. Forward it, and the copies keep growing.

Before long you no longer know where your data actually lives. A customer list sent to a former employee can sit in their personal mailbox, or on a laptop nobody ever checked, for years.

2. There is no single source of truth

"Use the file I sent yesterday, not this morning's." If that sounds familiar, you know the problem. When files travel by email, everyone works on their own copy, and changes made in parallel have to be merged by hand.

One slip is enough for someone to overwrite a colleague's work or make decisions on stale data: an outdated price, a wrong stock level, an order that was shipped but still shows as open.

3. The wrong recipient is one click away

Address autocomplete is convenient, but it is also one of the most common causes of accidental data leaks. A similar name, an unnecessary "reply all", a rushed forward: the file with your margins, discounts or customers' personal details ends up with someone who should never see it.

And once an email is sent, you can't truly take it back. You have no way of knowing who opened the attachment, nor of deleting it from their device.

4. All or nothing: no access control

When you email an Excel file, the recipient sees everything in it. You can't show them only the rows that concern them or hide the margin column. Sheet passwords in Excel offer limited protection and are often shared right alongside the file.

In practice, anyone who receives the attachment has full access to all of its data, forever.

5. Privacy and data protection rules

If the file contains personal data – names, addresses, phone numbers, ID numbers of customers or employees – every email is a processing of that data. Under regulations such as the GDPR, scattering copies around makes it much harder to respect principles like data minimisation and storage limitation, or to answer a simple question with confidence: "who has access to this data?". We covered this in more depth in Excel and GDPR: the risks of customer data in shared spreadsheets.

6. Attachments and cybersecurity

Office attachments have long been a favourite vehicle for phishing and malware. If it's normal in your company to receive and open spreadsheets from colleagues and suppliers all day, it becomes far easier to open a malicious one that looks just like the rest.

Getting people out of the habit of swapping operational files by email also shrinks this attack surface.

7. No record of who did what

Who changed that product's price? When was that customer deleted? With files bouncing between inboxes, these questions are almost impossible to answer. There is no reliable history, and piecing events together means digging through dozens of emails and attachments.

Half-measures (and why they fall short)

Many companies notice the problem and try a few fixes:

• Password-protected zip files: they secure the transfer, but the password often travels in the next email, and once opened the file is a free-floating copy again.
• Shared cloud folders: fewer copies, but they are still Excel files with the usual limits – editing conflicts, no permissions per row or column, formulas that break.
• Internal rules ("don't forward this file"): sound in principle, but they rely on everyone's memory and goodwill.

These are steps in the right direction, but they don't change the fundamentals: your business data still lives inside a file that can be copied, sent and edited with no real control.

What you actually need: one place for data, controlled access

The shift in mindset is simple: instead of sending data to people, you bring people to the data. One central system that everyone logs into with their own credentials, seeing only what they need.

In practice, that means:

1. One up-to-date version: everyone works on the same data in real time, with no copies to reconcile.
2. Users and permissions: you decide who can view, edit or only read each section.
3. Revocable access: when someone leaves, you disable their account and the data stays where it is.
4. Automatic backups: your data no longer depends on someone's laptop or an old email attachment.
5. Simultaneous work: several people can enter and update information without stepping on each other's toes.

How Nitor fixes this without upending the way you work

The reason so many companies keep emailing files is that their business system is an Excel workbook, built up over years and tailored to how they operate. Swapping it for off-the-shelf software feels like too big a leap.

Nitor starts right there: it turns the Excel file you already use to run your business into an online business app, hosted and maintained by us. The structure of your data stays familiar, but the way it is shared changes completely:

• your data lives in the cloud, with backups;
• there is a single, always up-to-date version;
• each person has their own login and defined permissions;
• several users can work at the same time;
• when you need new features, the app can be extended.

Your warehouse team, a sales rep on the road and your accountant no longer need an attachment: they log in, see what concerns them and work on the real data. If you're wondering whether now is the right time, take a look at our checklist of 10 signs your business has outgrown Excel.

In short

Sharing business files by email feels harmless, but it multiplies copies of your data, creates conflicting versions, exposes confidential information to the wrong people and makes it nearly impossible to control who sees what. Passwords, zip files and shared folders soften the problem without solving it.

The answer is to stop moving data around and centralise it in a system with users, permissions and backups. If your business currently runs on an Excel file, you don't have to throw it away: you can turn it into an online business app and finally let email go back to what it was made for – communicating.