Zillow Retires Ombud for Files.com to Send KYC Documents Across Six Countries

Zillow Group runs the most visited real estate website in the United States. Its marketplace spans renting, buying, selling, and financing a home, and its apps and sites average 220 million monthly unique users. The market is American. The corporation is not entirely: Zillow maintains legal entities in Serbia, Mexico, Australia, India, Canada, and Germany, and every one of them has to be registered with local authorities, opened for banking, and kept current with Ultimate Beneficial Owner and KYC filings.

That work belongs to Corporate Legal Services, and it runs on some of the most sensitive documents a company holds. Registering an entity or opening a bank account abroad means getting passports, social security numbers, marriage certificates, and government registration forms into the hands of law firms, banks, and government registries in each country. For a couple of years, the team had no compliant way to send them.

Zillow's Corporate Legal Services team put the workload on Files.com share links, retiring Ombud from the job entirely. With each browser-based link, the team could decide, document by document, whether its recipient could keep a copy.

Barred From Email and Blocked by the Banks

Zillow's privacy policy prohibited ordinary email for documents containing personal information, and the company had no secure email alternative to offer in its place.

Consumer cloud drives were not an option either, and not because of anything Zillow decided. Partner banks block their own employees from Google Drive and OneDrive, so a document parked on either one never reaches the person who needs it.

The tool the team did have was Ombud, an appliance-based secure document transfer product. It failed at both ends of every exchange.

“The setup was a nightmare, and then I had problems with the user on the other end picking up the stuff too.”

When a recipient abroad gave up on retrieving a file, the registration or account opening that file supported stalled with them. And giving up was common, because the people on the other end could not be trained. They are bank clerks, law-firm staff, and registry officials in six countries, often working in a second language, connecting from their own networks under their own institutions' security rules. No instruction manual was ever going to reach them.

The requirements also conflicted document by document. A social security number must never be retained: the recipient reads it and keys it into their own system, and no copy can exist on their side. A passport copy is the opposite, because the bank is obligated to keep one on file. Any single channel had to do both. And whatever the answer was, it had to run on a small legal team's spare capacity, not on a dedicated IT project.

Built for Recipients Nobody Could Train

The gap did not stay the same size. Documents in every country refresh a couple of times a year as jobs change, KYC certifications come up for renewal, and local laws move. Six countries turned an occasional headache into a standing operation, and Zillow's international footprint was still growing.

“Any country is on the table at Zillow. I can give you the list of countries I'm going to have to work with today, but tomorrow I could have a list of five more, so this has to be scalable for us.”

So the replacement had a clear specification. The recipient needs nothing but a browser and zero instruction. Whether they can keep a copy is decided per document, not per system. Every link expires and stops working when its job is done. Every access is on the record. And the whole thing is operated by a handful of lawyers, not an infrastructure team.

Share Links That Carry Their Own Rules

For this team, Files.com is not a system either side has to learn. It is a link that carries its own compliance rules to wherever the recipient happens to be.

The retention decision is made document by document. A social security number goes out as a preview-only Files.com share link: the recipient takes the information off the screen, and no downloadable copy ever exists on their end. A passport copy goes out with download enabled, because the recipient must keep one. The same platform satisfies both obligations, one link at a time.

Every link also contains its own end. Links carry expiration dates, passwords, maximum-use limits, and restrictions on which email addresses can open them. A link that has served its purpose stops working, instead of living forever in a foreign inbox.

Inside Zillow, folder and subfolder permissions on Files.com wall off each project team's documents from the others. The person who owns a document uploads it directly, so the most sensitive information passes through as few hands as possible on its way out. And every action against a link lands on the record, so if anything ever needs reviewing, the team can see who touched what.

On the recipient's side there is nothing at all: a web link that opens in any browser, with no account to create, no software to install, and no instructions to follow. That is precisely the bar Ombud could not clear.

Links That Work the First Time on Both Sides

With the workload running on Files.com share links, Zillow's legal team replaced a channel that recipients abandoned, and a compliance gap it had carried for years, with links that work the first time on both ends.

• Documents that privacy policy bars from email now move through a sanctioned channel, with retention, expiry, and access rules enforced by Files.com on every link rather than remembered by a person.
• File retrieval no longer leaves entity registrations and account openings stalled. Banks, law firms, and registries in six countries open a link in a browser and get exactly what they are permitted, with nothing to learn.
• A new country requires no new channel to stand up. A new counterparty means issuing links, so the refresh cycles that come with job changes, KYC renewals, and legal changes run as ordinary work.

“You didn't have to give me any instruction to figure out how to get into that.”

Any Country on the Table

What changed is how Zillow can behave when the next country appears. Expansion used to put a small legal team back into the same fight: an appliance to configure, an internal uploader to walk through the setup, and a recipient abroad to coach through a retrieval they would eventually abandon. Now the same team can extend the working model to another country without building another channel. The person on the other end just opens a browser.

Zillow never deployed a secure email system, and it never asked a foreign bank to trust a consumer drive its own policies block. It made the compliance requirement travel with each document. That is why the model holds for the six countries the team works with today, and for whichever ones turn up tomorrow.