Your client never sees another client's files.
Capsakey is a private client portal that lives inside your own website. Each client signs in as a member, sees only their own space, and sends you documents back. No shared links, no separate service for them to learn.
Ask me anything — info@capsakey.com
How it is built
Identity, not a link
Access is checked against the member signed in to your site, on the server, on every single request. A download link cannot be forwarded into someone else's hands, because the link is not the permission.
A log that names a person
Every download is recorded: which document, which client, when, how many bytes. When someone asks "who had this?", there is an answer, and it is a name.
Separated by address
Each website gets its own database, addressed by an identifier that can only come from a validated token. Separation is not a filter that a query might forget.
Stored in Europe
Files sit in object storage restricted to the European Union at creation — a restriction that cannot be changed afterwards. The caveats are written down, not buried.
Who it is for
Practices that exchange documents they are accountable for: accountants, solicitors, surveyors, agencies. If "who downloaded this, and when?" is a question with legal weight for you, that is the question this app was built to answer.
If you send three PDFs a year to friendly clients, a plain shared link is honestly simpler, and asking them to hold an account would be a cost with nothing bought.
What it does not do
Said plainly, because a page that claims everything is worth nothing: there is no virus scanning, no certification audit, and no analytics of any kind in the portal. The full list, including the one window where a token passes through the page, is on the security page.
Who I am
I am Alexia, and I build and run this on my own. That means you write to a person and a person answers — and that a promise on this site is one I have to keep myself.