Client Portal to securely SEND & RECEIVE documents
complete
D
Dietrich Von Zittwitz
It would be beneficial for Sub-Accounts to have a client portal that is able to securely Send and Receive documents and files.
This can also be another profit center. The idea here would be to include an amount of “base” storage and have an upgrade available for more storage space if needed.
The type of service to model could be from one of these websites:
Use Cases:
I have accountants and financial advisors that need to get files from their clients. Their clients do not feel comfortable using dropbox, google drive, or onedrive.
Types of files are typically: personal documents, bank statements, tax returns, account statements, etc.
Other markets that could have a use for this with similar types of files:
Attorney, Healthcare, real estate agents, mortgage brokers, title companies, business to business file transfers (larger files), Financial services (CPA, Bookkeeping, Financial Advisors)
Based on the sample companies I provided I believe this would be a great addition to the software and potentially an additional profit center for all.
Log In
C
Chris Forsey
Ahhhhh was so excited about this feature… but alas, it’s still unusable for our clients 😩
We’ve got a bunch of accounting clients who were pumped to finally have a way to securely send and receive documents, but although you have to log into the portal, the files are on a public link and anyone with the file link can access files outside the portal. This makes it a a no-go for anything confidential. Kinda like locking the front door but leaving the window wide open.
🔒 Recommended Fix: Please lock file access behind authenticated sessions. No public URLs. Ideally, follow the same approach as systems like TaxDome:
- Require login for all document access
- Eliminate public links
- Include audit trails of views/downloads
- Optional password protection or expiring links
Right now, this feature just isn’t secure enough for handling truly confidential info.
Z
Zaka Ullah
Chris Forsey Very True. Shivani Gera I hope this point is noted and corrected and we don't have to create another countless threads and votes to correct those :(
For those of you who think this is not a public link and gets expired, it is a public link with a front end token signature which is generated and renewed from the front end and hence you don't need sign in to access any file, if you have the URL.
I even recreated the tokens/sign from front end even after they expire.
Z
Zaka Ullah
@everyone this is marked complete but i don't think it is truly a "SECURE" file sharing, as the files are shared via public URL and are accessible without the need to sign in.
Is it just me OR that is how it is done?
Shouldn't it require a sign in to view the files? Only then will it be "SECURE".
K
Keith Besherse
Zaka Ullah, I think it would help you prove your point if you give us the link to the “?” file in your screenshot.
Z
Zaka Ullah
Keith Besherse I created a quick URL Redirect as it doesn't let me share links here directly.
zakau . com/files
S
Shivani Gera
complete
Z
Zaka Ullah
Shivani Gera How is this a "SECURE" file sharing? The files are shared on a public url and can be viewed from the URL without the need for a sign in.
K
Keith Besherse
Shivani Gera, could we get a link to the changelog &/o help article? Please. Thank you!
P
Paul Kunad
Shivani Gera How do we as the sub-account owner download the files? I can't find a way to access them.
P
Pamela Brewer
Shivani Gera What do you mean they don't have to sign in? They do have to sign into the client portal. What am I missing here?
Z
Zaka Ullah
Pamela Brewer Create a quick client portal, and try sharing file from both sides (client & admin) then click view file, it will give you a public url to the file and can be opened without the need to sign in. Share that link with anyone and they can view it even in inconito, no need to sign in. I tested it, see my screenshot, its a public link, not secure/private.
P
Pamela Brewer
Zaka Ullah I tested it with a word document and it didn't do that. When you select view it has you download it to your local computer. I tested again with a PNG file and it did give open it with a public url file link. But I was logged in. Now of course you could copy that URL and share it. But why would a client share a URL they just uploaded?
Z
Zaka Ullah
Pamela Brewer That's the whole idea of a secure file sharing. This current system is only a file sharing and NOT secure file sharing. Check all the references apps in the idea we voted on, the link has to be private. Now its not a matter of why would a client share but rather what if someone has the link. That defeats the purpose of it being secure/private sharing. If you clients understand that the links are public, they wont want to use it for liability reasons.
J
Jay Martin
Zaka Ullah Shivani Gera Chase Buckner - comments above, not secure?
Z
Zaka Ullah
Jay Martin That's right, if you have link to the file uploaded in the portal, you can view it without sign in, just open/download it in the browser.
M
Michael Washington
Paul Kunad As the sub-account owner, you don’t access the files in the client portal directly. You have to go Contacts, then go to that particular contact, next go to documents on the right side bar to view any files that was uploaded.
P
Paul Kunad
Michael Washington Thanks!
P
Pamela Brewer
@everyone It looks like this may be live now. I checked mine and It was there .
Q
Quentinus Robinson
Team I need this. I have Lenders that need this. I am ready to redesign there portals I hope next week
D
Deep Shah
Hi Shreyas Birajdar, if you see comments below, everyone is getting impatient now. Proper roll out date would be really beneficial. People are ready to leave this platform of this feature is not available. Please don't give us wrong hopes
S
Shreyas Birajdar
Deep Shah Hi Deep, I totally hear your concern, and I know the wait has been frustrating.
The news is that the feature is in the final stage of rigorous QA testing right now. The team is pushing hard to ensure everything works perfectly across both web and mobile.
We're aiming for a release before this weekend, pending final sign-off. I truly appreciate your patience, and I’ll make sure to keep you posted on any updates.
D
Deep Shah
Shreyas Birajdar Thanks a lot man ! I appreciate your efforts.
S
Shreyas Birajdar
Hi Deep Shah this feature is live!
D
Deep Shah
Shreyas Birajdar Amazing ! Thank you so much !
P
Pamela Brewer
Shreyas Birajdar. Any word on when this is rolling out. I have very impatient clients waiting for this and are wanting to leave the platform because this was something I sold them on that would be coming. Thanks.
D
Deep Shah
Pamela Brewer Same here
S
Shreyas Birajdar
Pamela Brewer Hi Pamela, I completely understand the urgency - especially since you’ve set expectations with your clients.
We’re in the final stretch of QA, and the team is testing thoroughly to make sure the rollout is smooth and secure.
We’re planning to go live before the weekend. I’ll keep you informed every step of the way -thank you so much for your continued trust.
D
Deep Shah
Hi Shreyas Birajdar, can we expect this to roll out in April month itself? We have 3 days left in April. It's difficult to explain this delay to my clients.
N
Nicole B Fischer
Very relevant and vital functionality for many use cases. Top suggestion for enhancement of the client portal document management function. This in combination with e-signing contracts and proposals is a power combination!!
D
Deep Shah
Hi Shreyas Birajdar, Can you please share any update please?
Load More
→