5 min de lecture

Client portal: your data doesn't belong to us (and that's the point)

The client portal is a transit tool, not storage. Security, lawyer control, and data sovereignty: everything you need to know.

  • client portal security
  • lawyer data GDPR
  • data sovereignty law firm
  • lawyer document storage
  • client document security
  • lawyer data control
  • secure document transit

A transit tool, not a vault

The client portal is not an archive. It's a temporary collection gateway, designed to facilitate document reception.

The Avocachet portal is designed for a specific purpose: allowing your clients to transmit documents to you securely. Once files are uploaded, it's your responsibility to download them and integrate them into your own management system.

Your firm's server, your DMS, your sovereign cloud: that's where documents should live. The portal is a gateway, not a destination.

Avocachet is not meant to replace your firm's storage infrastructure. We facilitate the transfer, you handle the retention.

  • The portal is designed for temporary collection, not archiving
  • Documents should be downloaded and filed in your own system
  • Avocachet facilitates transit, retention remains your responsibility

The lawyer keeps full control

You decide who can upload documents, when, and how long files remain accessible. The portal is your tool, not the platform's.

Enable or disable a portal in one click. Set an expiry date for one-off collections. Once you've retrieved the documents, delete the files from the platform.

You set the rules. Avocachet executes, you control.

  • Enable and disable the portal at any time
  • Configurable expiry date for each portal
  • File deletion at your initiative
  • The lawyer decides who uploads, when, and for how long

Security at every step

Each portal is protected by a unique token. Without the full link, nobody can access the upload space. There is no public page listing existing portals.

Uploaded documents are stored in an encrypted private space, physically separate from public files. No search engine, no third-party user can access them.

The portal creates no client account. No email stored, no password, no superfluous personal data. Less data collected means less risk. GDPR-compliant by design.

  • Unique token per portal: no access without the full link
  • Encrypted private storage, separate from public files
  • No client account created: zero superfluous personal data
  • GDPR-compliant by design

Best practices to adopt

Download and file documents as soon as they arrive. The longer a document stays on the platform, the further it drifts from your reference system.

Delete documents from the portal once they're integrated into your case file. The portal should remain empty between collections.

Use expiry dates for one-off collections. A portal that expires automatically is a portal you don't forget to close.

Never treat the portal as an archive. It's a transit tool, and this distinction is essential to meeting your professional obligations.

  • Download and file documents upon receipt
  • Delete portal documents once integrated into the case file
  • Use expiry dates for one-off collections
  • Never treat the portal as an archive

Create a client portal

Collect your clients' documents securely.

Create a client portal

Data control is a professional obligation

As a lawyer, you are responsible for retaining your clients' documents. The portal facilitates collection, but the responsibility for storage is yours.

A well-used tool is one whose limits you understand. The portal is there to simplify transit, not to replace your infrastructure. Keep control — that's your job.

← Retour aux articles