Security

Client data that never has to sit in an inbox

Portalstack moves passports, tax returns and contracts out of email and into a portal where you control who sees each file, and every important step is recorded.

14-day free trial · No credit card · Clients are always free

Email was the weak link.A portal closes the gaps.

One forward away

Attachments can be forwarded, misaddressed or left in a mailbox for years.

Reused passwords

Clients pick weak passwords for tools they rarely use, then reuse them everywhere.

No record of who saw what

When a client asks who opened a document, email can’t give you an answer.

For your team

Protect the accounts that hold everything

Two-factor authentication

Team members can protect their sign-in with codes from an authenticator app.

Permissions by area

Decide which settings areas each team member can access.

Notifications as it happens

Get notified when clients log in, open documents, submit forms or upload files.

For your clients

Easy sign-in without weak passwords

Passwordless one-time codes

Clients sign in with a code sent by SMS or email, so there’s no password to guess or reuse.

Google or LinkedIn sign-in

Clients who prefer it can sign in with an account they already secure.

Identity verification

Confirm who a client is with a government ID document check powered by Stripe Identity.

For shared data

Files stored privately, shared deliberately

Encrypted in transit

Every connection to Portalstack is encrypted with TLS.

Private storage on AWS

Files are stored privately on Amazon Web Services and served through short-lived signed links.

Passwords and expiry on links

Signing, form and document links can carry a password and an expiry date.

Per-file visibility

Hide files from a client until they’re ready, and switch downloads off file by file.

NDA gating for data rooms

Data room visitors accept your NDA before they see anything.

Watermarks in data rooms

Add a watermark to PDFs and images shared in a data room.

Audit trail

A record of every step that matters

When a client approves a proposal, signs a document, submits a form or accepts an NDA, Portalstack stamps it with the time and IP address.

  • Signing certificates list sent, viewed, signed and completed times in UTC
  • Activity feeds show opens, previews, downloads and uploads
  • Form input history shows who changed an answer, and when
  • A downloadable register of every signed data room NDA

Our approach

What we hold ourselves to

Less sensitive data in email

Everything we build is meant to keep client documents in one controlled place instead of scattered across inboxes.

You stay in control

You decide who sees each folder, file and room, and you can change it at any time.

Clear about how it works

Our security policy sets out how we handle and protect your data.

FAQ

Security questions

For the full detail, read our security policy or get in touch.

Where are files stored?
Files are stored privately on Amazon Web Services and are only served through short-lived signed links.
How do clients sign in?
With a one-time code sent by SMS or email, or with Google or LinkedIn. Clients never have to create a password.
Can my team use two-factor authentication?
Yes. Team members can add an authenticator app to their account for a second sign-in step.
Can I see who accessed a file?
Yes. Activity feeds record when files are opened, previewed, downloaded and uploaded. In data rooms, the feed includes logins, link clicks and IP addresses.
Can I share files with people who aren’t clients?
Yes. A virtual data room lets you share with investors, buyers or advisors behind an NDA, with group-based folder access and watermarks.

Get started

Take sensitive work out of email this week

Set up your portal, invite a client and see the activity feed fill in.

Start free trial

14-day free trial · No credit card · Clients are always free