Securing files

1. A method comprising:

selecting data to be protected via a user device;

applying at least one policy to the data;

storing the at least one policy in a data record identifying the data, wherein the data record is stored in a databank that is separate from a storage location where the data is stored;

tagging the data to identify the data is to be secured, and to limit access to the data to user profiles which are assigned a right to access the data, wherein a type of data tag assigned to the data, designates which of the user profiles may access the data according to the at least one policy;

responsive to tagging the data, modifying a data format of the data to create a modified data, wherein the modified data is stored in a different file format than a file format of the data;

encrypting the data responsive to applying the at least one policy;

wrapping the modified data in a file wrapper after encrypting the modified data;

storing the modified data in memory;

identifying a data, access command attempting to access the modified data;

intercepting the data access command via an audit agent;

retrieving the at least one policy linked to the user profiles; and

determining, via the at least one policy, whether one or more of the user profiles which submitted the data access command are authorized to perform the data access command.

2. The method of claim 1 , wherein the data selected is stored in a document file format.

3. The method of claim 1 , wherein the data record is stored on a policy server.

4. The method of claim 3 , further comprising:

updating the modified data via the user device; and

transmitting periodic messages to the policy server to update the data record to include the updates to the modified data.

5. The method of claim 4 , wherein the update to the data record comprises metadata including at least one of user identification and a policy associated with the update.

6. The method of claim 1 , wherein the different file format of the modified data is a web browser compatible format.

7. The method of claim 6 , wherein the different file format is a hyper-text markup language (HTML) format.

8. An apparatus comprising:

a processor configured

to select data to be protected via a user device;

apply at least one policy to the data; and

a memory configured to store the at least one policy in a data record identifying the data, wherein the data record is stored in a separate location from a storage location where the data is stored; and

wherein the processor is further configured to

tag the data to identify the data is to be secured, and to limit access to the data to user profiles which are assigned a right to access the data, wherein a type of data tag assigned to the data designates which of the user profiles may access the data according to the at least one policy;

responsive to the data being tagged, modify a data format of the data to create a modified data, wherein the modified data is stored in a different file format than a file format of the data;

encrypt the data responsive to applying the at least one policy;

wrap the modified data in a file wrapper after encrypting the modified data, and wherein the memory is configured to store the modified data in memory;

identify a data access command attempting to access the modified data;

intercept the data access command via an audit agent;

retrieve the at least one policy linked to the user profiles; and

determine, via the at least one policy, whether one or more of the user profiles which submitted the data access command are authorized to perform the data access command.

9. The apparatus of claim 8 , wherein the data selected is stored in a document file format.

10. The apparatus of claim 8 , wherein the data record is stored on a policy server.

11. The apparatus of claim 10 , wherein the processor is further configured to update the modified data via the user device, and a transmitter is configured to transmit periodic messages to the policy server to update the data record to include the updates to the modified data.

12. The apparatus of claim 11 , wherein the update to the data record comprises metadata including at least one of user identification and a policy associated with the update.

13. The apparatus of claim 8 , wherein the different file format of the modified data is a web browser compatible format.

14. The apparatus of claim 13 , wherein the different file format is a hyper-text markup language (HTML) format.

15. A non-transitory computer readable storage medium configured to store instructions that when executed causes a processor to perform:

selecting data to be protected via a user device;

applying at least one policy to the data;

storing the at least one policy in a data record identifying the data, wherein the data record is stored in a databank that is separate from a storage location where the data is stored;

tagging the data to identify the data is to be secured, and to limit access to the data to user profiles which are assigned a right to access the data, wherein a type of data tag assigned to the data designates which of the user profiles may access the data according to the at least one policy;

responsive to tagging the data, modifying a data format of the data to create a modified data, wherein the modified data is stored in a different file format than a file format of the data;

encrypting the data responsive to applying the at least one policy;

wrapping the modified data in a file wrapper after encrypting the modified data;

storing the modified data in memory,

identifying a data access command attempting to access the modified data;

intercepting the data access command via an audit agent;

retrieving the at least one policy linked to the user profiles; and

determining, via the at least one policy, whether one or more of the user profiles which submitted the data access command are authorized to perform the data access command.

16. The non-transitory computer readable storage medium of claim 15 , wherein the data selected is stored in a document file format.

17. The non-transitory computer readable storage medium of claim 15 , wherein the data record is stored on a policy server.

18. The non-transitory computer readable storage medium of claim 17 , wherein the processor is further configured to perform:

updating the modified data via the user device; and

transmitting periodic messages to the policy server to update the data record to include the updates to the modified data.

19. The non-transitory computer readable storage medium of claim 18 , wherein the update to the data record comprises metadata including at least one of user identification and a policy associated with the update.

20. The non-transitory computer readable storage medium of claim 15 , wherein the different file format is a web browser compatible format.