Who can see a document

This is simpler than most portals, and the simplicity is worth understanding exactly, because it is the whole access model.

There is no public link

A document link is useless to anybody outside your firm. Every time a file is opened the portal checks who is asking and which firm they belong to before sending any of it. A document URL pasted into an email to somebody outside is refused.

There is no “anyone with the link” mode to turn on by accident. That is the reason to use the portal rather than an email attachment.

Inside the firm: two rules

Your own people see the firm’s work. An attorney or admin can reach every document belonging to your firm. There is no per-colleague restriction, no “only my clients” mode. If somebody at the firm should not see a client’s papers, the portal will not stop them — that has to be a matter of who you employ, not of a setting.

A client sees two things, and only two: documents assigned to them, and documents they uploaded themselves. Nothing else exists as far as their account is concerned.

That is the entire rule. A client’s request is narrowed to those two conditions before it reaches the database, so another client’s documents are not hidden from the screen — they are never fetched.

So: to give a client a document, assign it

Assignment is not an organisational nicety in this product. It is the mechanism. A document nobody has assigned to a client is a document that client cannot see, however it is filed.

Set the assignment while uploading, or afterwards from the document’s row in Documents. See Document assignments.

What folders do not do

Folders organise the firm’s own filing. They do not grant a client access to anything, and clients cannot reach the Folders screen at all — it is not in their sidebar.

Putting a client’s papers in a folder named after them is good practice for your staff and invisible to the client. See Organizing with folders.

What a client can do with what they can see

• Read and download it. There is no view-only level; if a client can see a document, they can take a copy.
• Upload their own. Which may need approving first — see Document status and approvals.
• Edit or delete their own uploads, but only if an admin has turned that on. Both are off by default.
• Sign it, when a signature has been requested from them.

Taking access back

Reassign the document to somebody else, and it leaves the client’s account at once.

What that does not do is retrieve a copy they have already downloaded. Plan on the basis that anything a client has been able to open, they may still have.