SafeGuard LAN Crypt uses fully-automated file encryption to provide effective protection for confidential files. In SafeGuard LAN Crypt the roles of System Administrator and Security Administrator are strictly defined, giving it a unique advantage in handling data security. The System Administrator can still manage the system as usual but has no means to decrypt any files. This is because the keys are managed by the Security Administrator who in turn cannot access the stored, encrypted files.

The Security Administrator defines the individual access rights for working groups or individual users in accordance with the company's security guidelines. These access rights are then bundled in encryption profiles. This means that each user is assigned a unique "key group" based on his profile, with which he can read the released files in plain text in the normal way. Unauthorized persons can only see an enciphered, unreadable string of characters.