Every office has a ghost economy of files. A deck leaves the company as an attachment. A spreadsheet becomes three spreadsheets, each with a slightly different truth. A contractor gets a guest account, the contract ends, and the account remains like a key under a flowerpot. Nicholas Stamos has spent three decades making products for this very ordinary mess. His subject is security, but his real material is human behavior: people will share, deadlines will win, and any safeguard that asks too much will eventually be walked around.
Stamos is the founder and chief executive of eSHARE, a Waltham, Massachusetts software company built around secure external collaboration. The modern pitch is compact: let people work from Microsoft 365, keep the authoritative information under the organization’s control, and govern access without manufacturing a new colony of files and identities. Beneath that pitch sits a career that began long before Microsoft Teams, cloud drives, or the cheerful little Share button.
An engineer learns where consequential data lives
At Tufts University, Stamos studied electrical and computer engineering, completing both a bachelor’s degree and a master’s. The graduate chapter had an early-founder flavor: he received a full-tuition scholarship and finished the degree while working full time at Lotus Development. It was an education in parallel processing before anyone used the phrase for a calendar.
His early work passed through The Learning Company and into Phase Forward, a company that built software for clinical trials. The environment made the stakes plain. Research data needs to travel between people and institutions, yet its integrity, access, and history matter. Stamos became a named inventor on a clinical-trial data management system. Years later, Oracle acquired Phase Forward. For Stamos, the larger inheritance was a problem he would keep carrying: valuable information is useful because it moves, and vulnerable for exactly the same reason.
“My passion is starting companies, creating new products people love and building great teams.”Nicholas Stamos, on his personal profile
The quote has the polished proportions of a founder bio, but the word “love” is doing serious work. Security products have traditionally asked users to admire the policy and endure the experience. Stamos’s career points toward a harder standard. Protection must fit the act that a person already came to perform.
Digital Guardian and the 70-hour education
In 2003, Stamos joined the group forming Verdasys, the company whose main product became Digital Guardian. His initial title was vice president of research and development. His contribution included $1,000 in cash, while the more consequential investment was sweat equity. He led the development team and worked more than 70 hours a week as it turned an internal security concept into commercial software.
The system watched how sensitive information was used and could apply policy near the point of action. That sounds commonplace now. At the time, it required deep engineering inside computers, careful event monitoring, and an acceptance that the interesting risk was not simply a villain breaking in. Authorized people could also move data into unauthorized places. A USB drive, a network connection, or an innocent copy could all become an exit.
Stamos eventually became corporate president. His brief crossed product, engineering, and customers. He supplied technical depth in sales conversations and helped turn complicated deployments into commercial relationships. One early European customer was Ferrari’s Formula 1 operation during the Michael Schumacher era. Stamos later remembered learning from a team where milliseconds count. It is hard to imagine a better demonstration of the security designer’s dilemma: the lock must hold, but it cannot make the car slower.
There is a revealing continuity between the engineer and the customer closer. Stamos did not treat selling as a theatrical activity performed after the product was complete. In enterprise software, the sale is often where the product meets reality. The customer describes an ugly edge case, the engineer sees the architecture hiding inside it, and trust forms somewhere between the whiteboard and the contract.
The cloud arrives, carrying everybody’s Dropbox
After leaving Verdasys in 2011, Stamos spent a year leading the Stamos Group, then founded nCrypted Cloud with engineer Igor Odnovorov in July 2012. Consumer cloud storage had made file movement wonderfully easy and enterprise oversight correspondingly anxious. Employees could work from anywhere. The information could wander there too.
nCrypted Cloud added encryption, identity separation, and an audit trail around familiar storage services. By early 2014, the company said users had produced more than 100 million audit events and encrypted more than 10 million files. It had also raised a $3 million seed round. The numbers belonged to the Dropbox era, but Stamos’s explanation was broader. “But with responsibility comes accountability,” he said, comparing data controls to speed limits. Cars are capable of exceeding the posted number; society keeps traffic moving by recording behavior and holding drivers responsible. Enterprise collaboration, he argued, needed a similar balance.
The disappearing-copy problem
The company evolved into eSHARE as the market moved toward Microsoft 365. The name became less cryptographic and more conversational, which suited the product’s destination. The interesting action was no longer merely encrypting a file in a cloud drive. It was managing the full social life of the file: who could see it, which identity they used, when access ended, what policy applied, and whether an auditor could reconstruct the trip.
Build the guardrail where the work already happens
eSHARE’s present strategy is a practical concession to habit. Employees already live in Teams, SharePoint, OneDrive, and Outlook. Asking them to visit a separate secure portal at the precise moment they are busiest is an invitation to improvisation. So the company tries to make governed external sharing feel native to Microsoft 365. The file remains contained, recipients can use an appropriate identity, and activity leaves an audit trail.
This is Stamos’s most portable idea for other builders: the control belongs inside the workflow. A policy document is not a product. A warning banner is not a product either, although enterprise software has occasionally mistaken both for one. The product is the safe action made easier than the unsafe one.
His organization-building follows the same preference for contact with reality. In 2023, eSHARE formed an advisory board divided among CIOs, CISOs, and digital-workplace executives. These roles meet the same collaboration system with different anxieties. The CIO wants it to operate. The security chief wants it controlled. The workplace leader wants people to use it without mutiny. Stamos described the board as essential to eSHARE’s focus on holistic data governance. The arrangement puts competing requirements in the same room before they harden into competing products.
“At eSHARE, we believe that secure collaboration should be effortless.”Nicholas Stamos, 2025
In 2025, eSHARE was named a finalist in the Data Security and Compliance Trailblazer category of the Microsoft Security Excellence Awards. That year Stamos also presented a BostonCISO ORBIE award and published arguments about governed collaboration in the age of AI agents. His thesis is that AI will make the old boundary problem faster. An agent can gather documents, trigger processes, and collaborate across organizations, but speed multiplies the cost of a bad permission or an uncontrolled copy.
The aspiration is not to slow the agent until it resembles a committee. It is to give dynamic work dynamic guardrails: contextual policy, contained data, and enough observability to explain what happened. Stamos calls the broader idea trusted collaboration. The language may be new; the obsession is familiar.
The file remembers where home is
Stamos’s public life is unusually consistent for a repeat founder. The industries and interfaces change, but he keeps returning to the border where information leaves one person, device, or organization for another. Phase Forward handled consequential data in regulated work. Digital Guardian watched what happened at the endpoint. nCrypted Cloud followed files into consumer storage. eSHARE now manages the collaboration around Microsoft 365 and prepares for workflows in which some of the collaborators are software.
The pattern also explains why his résumé mixes engineer, inventor, president, founder, and customer partner. Information security is not solved in one department. The code can be elegant and still fail if the user reaches for email. The policy can be strict and still fail if nobody remembers the guest account. The sale can close and still fail if the customer’s workflow becomes unbearable.
A good security product makes a small behavioral bargain. It allows the person to finish the work, preserves the organization’s claim over the information, and records enough truth for tomorrow. After thirty years, Stamos is still negotiating that bargain. The file may travel. He would simply like it to call home.