The Case for Non-Custodial Document Storage: Why Your Marketing Files Should Stay in Google Drive

When you upload a file to most document-sharing platforms, something important happens: your file leaves Google Drive (or wherever it lives) and is stored in that platform's infrastructure. You have access to it through their interface. You've become dependent on their storage.

This is called custodial storage — the platform takes custody of your files.

Non-custodial storage is different. Your files stay in your own Drive. The portal or delivery platform provides the interface and access controls, but your files never leave your infrastructure. The platform connects to your Drive; it doesn't replace it.

For marketing agencies managing client documents, the distinction matters in ways that aren't immediately obvious.

Why Custodial Storage Creates Risk

Risk 1: Vendor Lock-In

When your files live on a third-party platform, leaving that platform is expensive. You have to export everything (if the platform allows it), move it to your new system, and re-establish client access. For a marketing agency with years of engagement history, this is a significant undertaking.

With non-custodial storage, leaving a portal vendor is trivial. Your files are already in Drive. You just stop using the portal's interface and choose a different one.

Risk 2: Continuity Risk

What happens to your files if the portal vendor goes offline? Shuts down? Gets acquired and sunsets the product?

With custodial storage: you may lose access to your files, or face an emergency migration under time pressure.

With non-custodial storage: your files are in Drive. The portal vendor going away doesn't affect your file access at all.

Risk 3: Version History Loss

Google Drive maintains a complete version history for every file. When you upload a file to a custodial platform, that version history doesn't come with it. You're starting fresh — the prior version history exists only in Drive, which is now decoupled from the platform you're using.

With non-custodial storage, Google's version control is intact and accessible throughout the life of the file.

Risk 4: Governance Complexity

Many marketing agencies work with enterprise clients who have data governance requirements — restrictions on where data can be stored, how long it can be retained, and who can access it. Custodial storage platforms add a third party to this governance picture, complicating compliance.

With non-custodial storage, your data governance is controlled by the infrastructure you already use (Google Workspace), not by a third-party portal vendor's policies.

What Non-Custodial Architecture Looks Like in Practice

In a non-custodial system:

1. Files live in Google Drive (or your chosen infrastructure) — this never changes
2. A portal platform connects to your Drive via the Google Drive API and provides the interface for client delivery, access control, and analytics
3. Clients access documents through the portal — they see a structured, branded workspace — but the underlying files are always in your Drive
4. Revoking portal access removes the client's portal access; the file in Drive is unaffected
5. Switching portal vendors is seamless — the files are already where they need to be

Firma is built on this architecture. Your files stay in Drive; Firma provides the portal interface, access controls, delivery notifications, and analytics. If you ever stopped using Firma, your files would still be in Drive exactly as you organised them.

The Question to Ask Any Portal Vendor

"Where do my files live — in my Google Drive, or on your servers?"

If the answer is their servers, it's a custodial model. If the answer is your Drive, it's non-custodial. This single question determines your governance situation, your vendor risk, and your access to Google's version history.

---

Frequently Asked Questions

What is non-custodial document storage for marketing agencies?

Non-custodial document storage means your files remain in infrastructure you control — typically Google Drive or Microsoft OneDrive — rather than being uploaded to a third-party portal platform. The portal provides the interface (branding, access controls, analytics, delivery notifications) while the files stay in your Drive. You're not dependent on the portal vendor for file access or continuity.

Why should marketing agencies prefer non-custodial document storage?

Three reasons: continuity (files remain accessible in Drive regardless of what happens to the portal vendor), version history (Google's complete version control is preserved, not lost when files move to a new platform), and governance (data stays under your existing governance policies rather than adding a third party to the compliance picture). For agencies managing years of client engagement history, these aren't minor considerations.

What is the difference between a custodial and non-custodial client portal?

A custodial portal stores your files on its own servers — you upload to the platform, which takes custody. A non-custodial portal connects to your existing Drive (via API) and provides the interface without moving your files. Firma is a non-custodial portal: files stay in your Google Drive, Firma adds the access control and delivery layer on top. The practical difference: with custodial, you're dependent on the vendor for file access; with non-custodial, the vendor is replaceable and your files are always yours.