Shareable Link for Lumo Projects (Secure Collaboration)
Current limitation:
Lumo Projects are confined to a single user’s encrypted workspace; there is no mechanism to generate a shareable URL or invite another Proton user to a Project.
Desired capability:
Ability to create a read‑only or collaborative link that:
Grants another authenticated Proton user access to the Project’s context (chat history, uploaded files, and custom instructions). Maintains end‑to‑end encryption and zero‑access storage, ensuring that only invited users can decrypt the content. Offers granular permission levels (view‑only, comment, edit).
Use case for cannabis‑tech consultants:
Share curated compliance checklists, product‑training modules, and POS‑integration playbooks with multiple dispensary stakeholders. Enable rapid onboarding of new vendors (e.g., Dutchie, Flowhub, Ello Cash) without copying/pasting sensitive data. Preserve audit trails while keeping the underlying data encrypted per Proton’s privacy standards.
Business impact:
Reduces manual effort (estimated 2‑3 hrs/week per consultant), accelerates partner onboarding, and aligns with the industry’s need for secure, collaborative knowledge bases.
Suggested implementation:
Add a “Share Project” button in the Lumo UI.
Generate a signed, time‑limited token tied to the inviter’s account.
Require the invitee to authenticate with a Proton account; upon acceptance, provision the appropriate permission set.
Log sharing events (metadata only) for compliance reporting.
Risks & Mitigations:
Risk: Potential exposure if token is leaked.
Mitigation: Tokens expire after 48 hours (or configurable) and are single‑use; revocation option in the UI.