If you’ve ever emailed a sensitive document to a client and then spent three days wondering whether they opened it, whether they forwarded it to someone they shouldn’t have, or whether it’s now living in a plain-text folder on their laptop — this post is for you.
Sharing documents with clients shouldn’t require a support ticket, a shared Dropbox password, or a 15-minute onboarding call. It should be instant, secure, and invisible.
Here’s how to do it properly.
The problem with email attachments
Email was not designed for secure document distribution. When you attach a PDF to an email:
- You have no idea who opens it
- You have no way to revoke access once it’s sent
- There’s no audit trail
- The file is copied to every device it passes through
- “Reply All” accidents happen more often than you’d like to admit
For low-stakes documents — the meeting agenda, the event programme — this is fine. For tax returns, legal contracts, HR policies, or anything containing personal data, it’s a problem.
What you actually need
A secure client document portal should do three things well:
- Control who sees what. Access should be tied to a person (or at minimum a device), not a URL that anyone with the link can open.
- Let you see what’s happening. When did they open it? Did they download it? Did they share the link?
- Work without friction. If your client needs to create an account, download an app, or remember a password, they won’t use it. The solution should be simpler than email.
How Sharedocs handles this
Sharedocs gives every library an access mode. On the Personal tier, you use anonymous magic links — your client gets a unique, time-limited link in their invitation email. They click it and they’re in. No account required. If you need to revoke access, you revoke their invitation. The link stops working immediately.
On Professional and Business tiers, you can switch to account-required access, where each collaborator needs to be signed in. This gives you tighter audit trails and enables two-factor authentication enforcement.
For the most sensitive use cases — legal files, financial documents, anything regulated — you can layer on:
- IP country restrictions (only accessible from specific countries)
- 2FA enforcement (every collaborator must use an authenticator app)
- No downloads (view in-browser only; signed URLs expire after a short window)
Setting up your first client library
It takes under two minutes:
- Create a new library and give it your client’s name
- Upload your documents
- In Library Settings, set the access mode (anonymous link or account-required)
- Invite your client by email — they’ll receive a branded invitation with a one-click access link
That’s it. The next time you upload a new document, they’ll see it on their next visit. No re-sending, no “could you resend that?” emails.
What your clients see
Your clients see a clean, branded portal with your logo and colours. On the Professional tier and above, the Sharedocs branding is removed and you can set your brand colours and upload your logo. On Business, you can use your own domain (e.g. docs.yourfirm.com).
The experience is fast, mobile-friendly, and requires no installation. Most clients are pleasantly surprised by how simple it is.
The audit trail
Every document view and download is logged with a timestamp and IP address. You can see exactly who opened what and when. This is useful in its own right, but it’s also useful for demonstrating due diligence — if you ever need to show a regulator that you handled sensitive client data appropriately, the audit log is your evidence.
Getting started
The Free tier is a good place to start — one library, five documents, no credit card required. If you’re a consultant or a small practice, Personal at £2.99/month is almost certainly the right plan. It unlocks anonymous magic link access and lets you invite up to 15 collaborators. Professional at £6.99/month adds branding removal, custom logo, and multiple libraries.
Start your free library today — you’ll have your first client portal set up before your next coffee goes cold.