The client portal

What your client sees: the private link, the consent gate, uploads, and link expiry.

Your client never creates an account. They receive one private link — <your site>/portal/<token> — and that link is their access. No signup, no app, no password.

Before anything else, the client sees a plain-language privacy notice:

Dossia processes the documents they share to fulfil their file with their broker.
Files are stored encrypted in the EU.
They have rights to a copy of their data and to deletion, exercised via you (their broker).
A link to the full privacy policy.

The client ticks the checkbox and clicks I agree, continue. The consent timestamp, IP address, and terms version are recorded. No upload is possible before consent.

The checklist

After consenting, the client sees the document checklist in the case language, with for each document:

The name and description (exactly as frozen at compose time).
The current status: Awaiting upload, Uploaded, or Rejected — with your rejection note when applicable.
An upload button.

Progress is saved against the link: the client can close the page and come back later, and the portal reminds them of that ("You can come back later — your progress is saved").

Languages

The portal displays automatically in the case language — English, French, or Portuguese — regardless of the language you use in the app. See languages for the full model.

Link security and expiry

Note: Anyone with the URL can access the list — treat it like a password. Share it only with your client, through a channel you trust.

Expiry: the link expires after 30 days of inactivity. Every upload slides the window forward, so an active client never hits it.
Expired links: the client sees a clear message telling them to contact their broker for a fresh link — nothing is lost, the case and its files remain intact on your side.
Regenerating: on the case page, the Regenerate link button rotates the token. The new URL works immediately and the old one is instantly invalidated. Use this if a link expired, was shared too widely, or you simply want to rotate it.

What the client cannot do

The portal is upload-only by design. Your client can see statuses, read your rejection notes, and upload files — they cannot see your internal label, your notes beyond rejection messages, other clients, or anything else in your workspace.