Client portal access

What clients can do#

When a client is linked to the portal, they sign in with the email and password you (or they) set up. Their experience is intentionally narrow:

• View their own projects, including the current stage and the history of state transitions.
• Open files marked as visible to clients.
• Approve or request changes on stages explicitly marked as client-review steps.
• See events they were added to as an attendee.

What clients cannot do#

What clients cannot do:

• See your other clients or their projects.
• See your team's calendar except for events they were attending.
• Edit project metadata, dates, or assignments.
• Upload files (only your team can; clients react to what's there).
• Access billing, employees, or admin pages.

Portal users are also rate-limited at the auth layer (5–10 requests per minute) to prevent automated probing of the sign-in endpoint.