A markup language document is generated and stored within a network, the network including a client, and one or more storage locations. A markup language document is generated, and policy information is accessed, wherein the policy information defines a content-filtering policy, a security policy and a storage location policy for the markup language document. A portion of the markup language document that is subject to security is determined, based on the content-filtering policy as defined in the policy information. A storage location is identified for storage of the markup language document from among the one or more storage locations, based on the storage location policy as defined in the policy information. Security is applied to the determined portion of the markup language document based on the security policy as defined in the policy information. The markup language document is stored on the identified storage location.