assert access.default == "deny" PASS

Your clients get one secure place to work with you

We build client portals for onboarding, document exchange, e-signature, secure messaging and self-service. Each portal ships with single sign-on, multi-factor authentication, per-document permissions and a full audit trail.

Talk to an engineer See the security defaults

// Signatures go through your chosen e-signature provider.
// Every view, download and signature is recorded.

Client portal

SSO AB

Overview Documents Messages Requests Team access Settings

Requests New request

ACTION REQUIRED Sign the account opening form

Review and sign

REQUESTOWNERSTATUS

Change of addressYouIn review

Annual statementYour adviserReady

Add a team memberYouApproved

SSO · PASSKEY VERIFIED · SESSION LOGGED
ILLUSTRATION

I check every sign-in.

What a portal includes

Every portal includes eight standard modules.

We connect each module to the systems you already run, such as your CRM and document management system.

Identity

Clients sign in with single sign-on, passkeys or multi-factor authentication.

Permissions

Access is set per client, per role and per document. Anything not granted is denied.

Document vault

Documents are versioned, watermarked on download and kept for the retention period you set.

E-signature

Clients sign agreements inside the portal through your chosen e-signature provider.

Secure messaging

Messages stay inside the portal and are filed against the right client and case.

Onboarding

New clients complete forms and identity checks in one guided flow.

Self-service

Clients raise requests, track each request and download statements themselves.

Audit and reporting

Every view, download, signature and permission change is recorded and can be exported.

Security defaults

These settings are on before your security review starts.

Your information security team gets this list, with evidence for each item, in our supplier assurance pack.

What the assurance pack contains

I deny access unless a rule grants it.

// Turning a default off needs a written change request from you.

ENCRYPTION Data is encrypted in transit with TLS 1.2 or higher, and at rest with AES-256. ON

HOSTING The portal runs in your cloud tenancy or ours, in the UK, EU or US region you choose. ON

IDENTITY We connect to your identity provider, such as Microsoft Entra ID or Okta. Clients without one use passkeys or multi-factor authentication. ON

PERMISSIONS Access is denied unless a rule grants it. Rules are set per client, per role and per document. ON

LOGGING Audit logs are append-only, kept for the period you set and exported to your SIEM. ON

TESTING An independent penetration test runs before every major release. ON

ACCESSIBILITY Portals are built and tested against WCAG 2.2 level AA. ON

Who uses portals

Portals replace email attachments between you and your clients.

Wealth and asset managers Client reporting, statements and document exchange.

Insurers and brokers Policy documents, claims submissions and renewals.

Law firms Matter updates, document review and e-signature.

Healthcare providers Referrals, appointments and results.

Public bodies Applications, casework updates and secure correspondence.

Tell us what your clients need to do online.

A senior engineer will read your message and reply with questions or a proposed next step.

Talk to an engineer