DRM vs Document Tracking: Which One Do You Actually Need?
Oleh Tsyupa · Founder, PDFTrackr
9 min read1. What each category does
DRM is enforcement. A PDF DRM product wraps the document so it opens only in a viewer the publisher controls, usually one the reader installs, which checks a licence with the publisher's server before a page appears. Because the publisher owns that viewer, the publisher decides what it permits: printing, copying text, expiry, offline use. Revoke the licence and the document stops opening — including copies already delivered.
Document tracking is measurement. Instead of wrapping the file you host it and send a link. The page serving the document records the session: which pages rendered, in what order, and how long each held the screen. Nothing is added to the PDF and nothing is installed, which is also the limit — a browser will show a document and report on it, but it will not refuse to show it, and it cannot reach a copy the reader has saved.
The two get sold as rival answers to one question. They are not: they answer two different questions asked by the same person on the same afternoon, which is why what PDF tracking is and what DRM is get conflated in this category.
If it turns out to be the measurement half you want, you can create a free tracked link and read one of your own documents page by page before deciding — 50 files, 50 live links and 12 months of history on the free plan. The rest of this page is the comparison.
2. Six questions, side by side
Start from the question you actually have. Six cover almost every reason somebody searches for this, and two answer the way most people do not expect.
| The question you have | PDF DRM | Document tracking | Which one answers it |
|---|---|---|---|
| Was the document printed, and by whom? | Yes — print requests are logged through the licensed viewer | No — PDFTrackr writes no print event at all | DRM |
| Can I stop a copy being forwarded or opened after I change my mind? | Yes — the licence can be revoked, including on delivered copies | You can switch the link off, which ends access to the hosted copy only | DRM |
| Which pages did they reach, and for how long? | No per-page reading data appeared in any Locklizard material we have read | Yes — page by page, with time per page, on the free plan | Document tracking |
| Was that a person or an automated scanner? | The reader authenticates first, so a licensed open is a person | Automated sessions are classified at session close and excluded from the counts | Either |
| Can I send it to somebody who will not install anything? | No — the licensed viewer is the mechanism | Yes — the reader opens a link in the browser they already have | Document tracking |
| Can I stop them photographing the screen? | No | No | Neither |
Read the first two rows for the honest shape of this comparison. DRM wins the control half outright, and it wins it on the worry that sells this category: a document that keeps travelling after the deal is dead. A tracked link cannot do that, ours included — switching the link off ends access to the hosted copy and nothing else. What the last four rows establish is that the reverse is equally true, and that the friction DRM charges for its control is paid by your reader.
3. Where DRM wins
Printing is the cleanest example, and worth stating precisely rather than waving at DRM in general. Locklizard's Safeguard documentation markets print logging as a headline capability — “Track print use – see how often PDFs are printed, when and where” — and goes further on identity: “Print requests can be logged so you can see who has printed a document, when this took place and from what location.” That identity comes free with the mechanism, because the licensed viewer has already checked who the reader is before the first page appears.
Print logging is a genuine capability PDFTrackr does not have and is not built for. We write no print event at all — not a weak one, none — and that is a product decision rather than a browser limitation, since a browser can signal that a print dialog opened but never that paper came out of a printer. The longer argument is on whether you can tell if someone printed a PDF.
Revocation is the second win, and commercially the bigger one. If your real worry is a price list circulating inside a competitor six months from now, a hosted link you can switch off is not the same protection as a licence you can withdraw from copies already sitting on other people's machines. That is the category to buy, and it is not the category we are in.
4. Where document tracking wins
The trade runs the other way on reading detail. What we did not find anywhere in the Locklizard material we read is the other half of the picture — which pages a reader looked at, or how long any one of them held attention. Read that as our observation about material we have seen rather than as the vendor asserting the absence; a vendor being silent about a capability is not a vendor denying it.
The second win is adoption, and it decides most purchases. DRM asks your reader to install software and authenticate before they can look at your proposal. A tracked link asks them to click. For a document going to a prospect rather than to a licensee, that difference decides whether it gets read at all.
The tracking category is not uniform here, and two products mark its edges. Peony shows how far a tracker can go without becoming DRM — its Business plan “Business gives you security on shared files — email authentication, allow/block visitor lists, Simple NDA (view and acknowledge only, logged in analytics), screenshot protection, and download prevention” — and two of those, screenshot protection and the view-and-acknowledge NDA step, are ones we do not ship on any plan. Adobe marks the other edge: “When a recipient views a file you shared, you receive a notification in Adobe Acrobat and via email. … View your shared files with the following details: Name: File name shared for review. Sharing: Names of people with whom you shared the file. Status: Number of people who viewed the file. Last Activity: Timestamp of the last file activity.” The fields that documentation lists are the file, the people you invited, how many viewed it and when activity last happened — the document as a unit rather than its pages, which is the line a reading session crosses.
Turning downloading off on a share link is the mildest control in this whole comparison — it is not DRM, it stops nothing once a copy exists, and it is one checkbox. So it is worth knowing how often senders reach for even that.
29% of senders have turned downloading off on at least one link — 56 of 193 accounts with a link on record. On the links where it is off, 40.4% of reading sessions reach the last page, against 30.8% where downloading is available.
Read this as who turns the switch on, never as its effect: different senders, different documents, different audiences, not the same link measured twice. The obvious objection is that locked-down documents are shorter. The medians say otherwise — 16 pages in both groups — but a median settles a group's middle, not its shape, and completion is not monotonic in length, so the confound is not ruled out. Per link rather than per sender the rate is 33.3%, concentrated enough to distrust: three senders hold 53 of the 147 links.
Based on 441 share links from 193 senders across 362 documents, created 20 Aug 2025 – 4 Aug 2026, extracted 10 Aug 2026; the 446 and 2,479 reading sessions inside it run 22 Sep 2025 – 4 Aug 2026. The per-link rate is 33.3% — 147 of 441, and Apr 2026 alone accounts for 65 of them, 73.9% of that month's 88 new links against a 0–36.7% band across every other month, the zero being Sep 2025, whose nine links all left downloading on. One visit is excluded, the same one Set G drops: a single visitor on a single link produced 210 sessions and 180 download clicks on 29 Jul 2026, a pre-deploy test burst rather than a reader. Validated means at least one page rendered and the session was not classified as automated. The two completion figures are measured on MULTI-PAGE DOCUMENTS ONLY, because a one-page document is finished by being opened: that restriction gives 438 of the 446 sessions on download-off links and 2,434 of the 2,479 on the rest, of which 177 and 750 reached the end — finished meaning the furthest page rendered is at least the document's page count. The median document is 16 pages in both groups, which matches their middles and does NOT control for the length confound: completion is not monotonic in length.
So roughly seven senders in ten never touch even the mildest control. That is not evidence that nobody needs DRM; it is evidence that the control instinct and the measurement need are separate, and that most people sending a business document are shopping in the second category while reading marketing written for the first. The full derivation lives on how to disable downloads on a shared PDF link, its canonical home; this page uses the same extract and the same methodology string, not a second cut.
5. What neither one can do
Neither category can tell you a document was understood. Reading behaviour is observable and comprehension is not, and a product sold as measuring the second is measuring the first under a better name.
Neither stops a camera either. A reader who can see a page can photograph it, and no software on either side of this comparison changes that. Watermarking is the honest answer in both categories: it does not prevent the copy, it makes the copy traceable to whoever took it. Ours is a client-side overlay drawn over the page rather than a stamp written into the file, so it does not survive a download.
And each has a horizon: measurement ends at the download in the tracking category, exactly as reporting ends at the revoked licence in the DRM one.
6. Which one to buy
Buy DRM when the document is the asset. Training material you sell, research you licence, engineering drawings — anything where a leaked copy is the loss itself. You are paying for enforcement, and the price is that your reader installs something and authenticates first.
Buy document tracking when the reading is the answer. A proposal, a deck, a report, a price list — anything you send to persuade somebody, where the loss is not a leak but a deal you followed up blind. You are paying for evidence, and the price is that you cannot stop anything.
Buy both when the document is confidential and the reading matters: they do not overlap, so one of each is not duplication — though for most senders of most business documents the honest answer is that they only ever needed the second.
On the tracking side, free is the product here rather than a taste of it, and it is worth being exact about where it stops. Page-by-page reading and time per page, the email gate, password, expiry and the download switch are all on the free plan, with 50 files, 50 live share links and 12 months of history — and so is the plain-English verdict on each reader of your first document. Pro, at $9 a month, is what you buy when the sending stops being one document at a time: when you are pasting a separate link per recipient by hand and want bulk personalised links and a folder per client, when you pass 50 files or 50 live links, or when something is worth chasing the same afternoon and the open alert has to reach you within the hour rather than in tomorrow morning's digest. The ceilings move with it, and the full breakdown is on the pricing page. You can also open the dashboard on sample data without an account first.
Find out whether the proposal was read before you chase it
Send the document as a tracked link and read the session rather than guessing: which pages rendered, in what order, and for how long, with automated opens excluded from the counts. Free plan: 50 files, 50 links, 12 months of history.
Start tracking freeFrequently asked questions
Is document tracking the same as DRM?
No. DRM restricts what a reader may do with a document — open it, print it, copy from it — by making them use a viewer the publisher controls. Document tracking restricts nothing; it hosts the document behind a link and records which pages rendered and for how long. One prevents, the other measures.
Do I need DRM or document tracking?
Start from the loss you are trying to avoid. If a copy escaping is itself the damage — licensed research, paid training, drawings — you need DRM, because only enforcement stops it. If the damage is following up blind on a proposal nobody read, you need document tracking.
Does DRM tell you which pages someone read?
Not in the Locklizard material we have read, which markets tracking at the level of the document, the view and the print request — "Print logging: how often a document was printed, when and where". We did not find per-page reading detail in it. Read that as our observation about what we read on 17 Aug 2026 rather than as the vendor stating an absence.
Can either one stop a screenshot?
Not reliably, and "no" is too strong for either category. Products on both sides market screen-capture blocking: this page quotes Peony's Business tier offering screenshot protection, and Locklizard markets Print Screen and screen-capture blocking for Safeguard on Windows, Mac and Android. Treat that as a deterrent rather than a guarantee, and note that PDFTrackr ships none of it at any tier. What no product on either side can touch is a camera: a reader who can see a page can photograph it. Watermarking is the honest answer in both categories: it makes the copy traceable rather than preventing it. PDFTrackr's watermark is a client-side overlay drawn over the page, not a stamp written into the file, so it does not survive a download.
How many senders actually turn document controls on?
Fewer than you would guess. In our own production data, 29% of accounts with a share link on record have turned downloading off on at least one — 56 of 193. Per link the rate is 33.3%, concentrated in a few heavy senders, which is why the per-sender rate is the more reliable one. (441 share links, 20 Aug 2025 – 4 Aug 2026.)
Sources
- Locklizard — PDF Document Tracking (Safeguard logs document views and print requests — how often, by which licensed user, when and where; no per-page reading detail appeared in the material we read). Channel: the print-identity sentence and the per-page absence were read through search retrieval, because locklizard.com refuses connections from our network; the print-use sentence was captured directly. (accessed 2026-08-17)
- Locklizard — Safeguard screenshot protection: Print Screen and screen-capture blocking on Windows, Mac and Android (read via search retrieval; the host is unreachable from this network). Already cited, with this date, on /disable-download-on-a-shared-pdf. (accessed 2026-08-10)
- Peony — Pricing, Business tier (security controls on shared files: email authentication, allow/block visitor lists, a view-and-acknowledge NDA step, screenshot protection and download prevention). Read from raw HTML. (accessed 2026-08-12)
- Adobe — Manage shared documents in Acrobat on the web (the documented fields for a shared file: its name, the people you shared it with, the number who viewed it, and the timestamp of the last activity, plus a notification per view). Read in a browser. (accessed 2026-08-12)
- PDFTrackr — Pricing (our own product; free-plan limits and Pro features) (accessed 2026-08-19)
Keep reading: what PDF tracking is and how it works, how the download switch behaves, and how free PDF tracking works.
Oleh Tsyupa
Founder, PDFTrackr
Has analysed over 3,000 tracked document-viewing sessions on PDFTrackr.