5 min de lecture
Client portal: your data doesn't belong to us (and that's the point)
The client portal is a transit tool, not storage. Security, lawyer control, and data sovereignty: everything you need to know.
- client portal security
- lawyer data GDPR
- data sovereignty law firm
- lawyer document storage
- client document security
- lawyer data control
- secure document transit
A transit tool, not a vault
The client portal is not an archive. It's a temporary collection gateway, designed to facilitate document reception.
The Avocachet portal is designed for a specific purpose: allowing your clients to transmit documents to you securely. Once files are uploaded, it's your responsibility to download them and integrate them into your own management system.
Your firm's server, your DMS, your sovereign cloud: that's where documents should live. The portal is a gateway, not a destination.
Avocachet is not meant to replace your firm's storage infrastructure. We facilitate the transfer, you handle the retention.
- The portal is designed for temporary collection, not archiving
- Documents should be downloaded and filed in your own system
- Avocachet facilitates transit, retention remains your responsibility
The lawyer keeps full control
You decide who can upload documents, when, and how long files remain accessible. The portal is your tool, not the platform's.
Enable or disable a portal in one click. Set an expiry date for one-off collections. Once you've retrieved the documents, delete the files from the platform.
You set the rules. Avocachet executes, you control.
- Enable and disable the portal at any time
- Configurable expiry date for each portal
- File deletion at your initiative
- The lawyer decides who uploads, when, and for how long
Security at every step
Each portal is protected by a unique token. Without the full link, nobody can access the upload space. There is no public page listing existing portals.
Uploaded documents are stored in an encrypted private space, physically separate from public files. No search engine, no third-party user can access them.
The portal creates no client account. No email stored, no password, no superfluous personal data. Less data collected means less risk. GDPR-compliant by design.
- Unique token per portal: no access without the full link
- Encrypted private storage, separate from public files
- No client account created: zero superfluous personal data
- GDPR-compliant by design
Best practices to adopt
Download and file documents as soon as they arrive. The longer a document stays on the platform, the further it drifts from your reference system.
Delete documents from the portal once they're integrated into your case file. The portal should remain empty between collections.
Use expiry dates for one-off collections. A portal that expires automatically is a portal you don't forget to close.
Never treat the portal as an archive. It's a transit tool, and this distinction is essential to meeting your professional obligations.
- Download and file documents upon receipt
- Delete portal documents once integrated into the case file
- Use expiry dates for one-off collections
- Never treat the portal as an archive
Create a client portal