Sometimes the safest extra copy is the one you never need to make. If a colleague only needs to check a figure or read a page, downloading a confidential PDF can create another file to track. Google Drive's latest preview update gives eligible teams a more direct reading route, without turning every review into an export.
What Google announced
On 15 October 2026, Google announced general availability of previews for client-side encrypted PDFs and images in Drive. Authorised users can view those files in their browser instead of downloading them solely to see the contents.
The preview feature is on by default, with no separate administrator control. Availability is limited to Enterprise Plus, Education Standard and Plus, Frontline Plus, Assured Controls and Assured Controls Plus. The extended rollout began on 15 October for both Rapid Release and Scheduled Release domains and may take longer than 15 days. General availability therefore does not mean every eligible account can see it immediately.
Preview is not an editing permission
This announcement concerns viewing encrypted PDFs and images inside Drive. It should not be interpreted as a new PDF editor, a universal preview for every encrypted format, or permission to move confidential material into another service.
Google's encrypted-file guidance explains that creating encrypted files requires a Workspace account, administrator enablement and identity verification. The new default-on preview does not remove the underlying organisation's encryption setup and access requirements.
A practical read-first workflow
For a team reviewing a document pack, try separating the job into three decisions before choosing a tool.
1. Do you only need to read? Open the approved Drive copy and use its preview when available. Confirm the filename, revision and relevant page before replying. This avoids creating a working copy for a task that never required one. 2. Do you need to change the document? Ask the owner which editing route is approved. A request to reorder pages, add a signature or extract an appendix is a different task from checking the contents. Keep the original intact until the replacement has been reviewed. 3. Does someone else need access? Use the organisation's approved sharing process. Do not assume that sending a downloaded attachment is equivalent to sharing the controlled original.
For example, a reviewer checking whether a training pack contains the latest contact number can record the page and correction needed without first making a separate PDF. The document owner can then make the authorised change and identify the new revision.
Encryption still has limits
Google warns that applications with sufficient permissions, including browser extensions, may access and exfiltrate content, and that encryption does not protect a file from someone viewing the screen. Use an approved device and browser profile, and follow workplace handling rules. A preview also does not prove that a document is accurate, accessible or compliant with your organisation's requirements.
FileStation fits a different part of the workflow: ordinary PDFs that you are authorised to process outside the controlled environment. Use PDF Reader for visual review or Organize PDF for supported page arrangement. FileStation does not provide Google Workspace client-side encryption integration, and moving a copy here does not carry Drive's access controls with it. Choose the approved environment first; choose the tool second.