Sending Contracts and Quotes by iCloud Link? Apple Will Soon Check Every Public Link and Can Disable the Whole Account

On November 3, 2026, Apple published an official support page saying that any file or photo you share from iCloud with the Anyone with the Link option will be made accessible to Apple to check for harmful content, starting with version 27.3 of 4 systems: iOS, iPadOS, macOS and visionOS. An item shared this way loses end-to-end encryption even if you turned on Advanced Data Protection, and if Apple judges the content harmful it can delete it and disable the whole Apple Account. The practical move for a business owner: share work files only with People you choose, stop old public links, and move company files off personal Apple accounts into storage the company owns.

What Apple actually announced

When you share a file from iCloud Drive or a photo from iCloud Photos, Apple gives you two link options: People you choose, meaning only people you invite or approve, or Anyone with the link. The support page says plainly that the second option makes the content accessible to anyone who has the link, including Apple, and that items shared this way will be checked for harmful content from version 27.3.

• What is checked: items shared with Anyone with the Link, according to the page's own wording.
• Encryption: to facilitate sharing, the item is no longer end-to-end encrypted, even if the owner or participants have turned on Advanced Data Protection.
• Timing: the 27.3 releases are in developer beta, and MacRumors expects the public release in December.

Why this matters to a business owner

Many small Saudi businesses have no central file system, so the manager or an employee sends a quote, a contract or a photo of an ID through an iCloud link from a personal phone because it is faster. This announcement exposes 3 risks in that habit:

• The whole account is at stake: Apple says it can move, refuse, modify, remove or delete flagged content at any time, and take action against the Apple Account itself, including blocking or disabling it, blocking a new account with the same email or phone number, and involving law enforcement if necessary. If that account holds your work files and document scans, disabling it cuts off your access to them.
• The criteria are not published: the page does not define harmful content or explain how the check works, and does not say whether links created before 27.3 will be checked, as MacRumors notes.
• A public link was never private: anyone who receives the link, even forwarded in a group chat, can open the file. Apple's check is a reminder of an old fact: Anyone with the link really means anyone.

Encryption: 15 categories by default, 25 with Advanced Data Protection, and public links outside both

According to Apple's official iCloud data security page, Standard Data Protection is the default, and under it 15 data categories are end-to-end encrypted, such as Health and passwords in iCloud Keychain. Turning on Advanced Data Protection raises that to 25 categories, including iCloud Backup, Photos and Notes. But the November 3 announcement is clear: an item you share through a public link leaves that end-to-end protection. So do not count on Advanced Data Protection to protect a document you sent through an open link.

6 steps for your company's files before the update lands

1. Find out who shares by iCloud link: ask your team directly who sends work files or document photos through iCloud links from their devices.
2. Change the default: when sharing, choose People you choose for any file with customer, employee or pricing data.
3. Stop old public file links: in the Files app, touch and hold the file, tap Manage Shared File, then Stop Sharing, as Apple's official iPhone guide explains.
4. Review photo links: iCloud Links for photos expire automatically after 30 days, and you can stop them sooner at icloud.com/photos, under iCloud Links, then Edit, then Stop Sharing.
5. Never send IDs, contracts or payroll through a public link: from any service, not just iCloud.
6. Move company files to company-owned storage: an account run by an administrator in the business, with permissions you can revoke when an employee leaves, instead of personal Apple accounts.

If your team also shares AI chats by link, we covered a similar risk in the ChatGPT share link flaw.

The Origami view

The decision itself makes sense: Apple does not want its servers to become a channel for malware or prohibited content through open links. The problem, as we see it, is not the check but the fact that many businesses keep their files on one personal account belonging to the owner, so an automated decision with unpublished criteria can cut a company off from its own documents.

When we build internal systems for our clients, we keep documents inside a system the business owns, with share links limited by time and recipient, and a log of who opened what. If you want a review of how your team exchanges files, or an internal system that keeps your documents with you, get in touch or see our services.

Conclusion

Once the 27.3 update arrives, every file you share with Anyone with the Link is readable by a third party, Apple, loses end-to-end encryption, and can expose the whole account to being disabled. This week: stop old public links, make People you choose the team rule, and start moving work files into storage the company owns.