Abstract: Systems and methods for secure collaboration enable precise access management. Collaborator permissions are modified in the same manner as a collaborative document. Use of asymmetric keys to encrypt private portion of the collaborative document enable write-only permissions. Permissions may be specified at any granularity allowed by operational analysis. In some implementations, systems and methods detect a change event for an electronic document, and package the change event as an encrypted digital representation of the change event and a cryptographic signature associated with a user identifier. Clients determine whether to accept the change event based on the authenticity of the signature and the permissions allocated to the user identifier.