When you wish to share your data, we recommend creating a new ScramFS instance solely for that purpose and copy only the subset of data intended to be shared. We see common mistakes where authorised people (such as contractors) can get access to data that was never intended for their eyes. For example, misconfigurations due to human error can occur easily, resulting in people being granted access to files in a part of a file system not intended for them.

Therefore, creating a separate (and possibly temporary) shared storage space will ensure that data sharing is a deliberate, intentional act, where accidents will not result in unintentional disclosures.

You should also remember that once you share data with someone, it may be impossible to guarantee that they “forget” it. The worst case scenario is that the other party has taken copies of the data, and retains those copies even when the sharing ceases and the ScramFS instance has been deleted.