1. A method comprising: receiving a request to transition an electronic document from a state of a process-driven security policy to an additional state of the process-driven security policy; decrypting the electronic document with a private state decryption key assigned to the state of the process-driven security policy, wherein the private state decryption key is accessible by a plurality of authorized users; and re-encrypting the electronic document with a public state encryption key assigned to the additional state.