← Help

The links you send clients

Every client link is short, expires, can be revoked, and is protected in proportion to what it can actually do.

Every plan Your account and your data

Every link this product sends your client is a credential: whoever holds it is treated as that client. Those links look alike and carry very different risk — one is meant to be posted publicly, another can execute a legally binding signature — so they are not all protected the same way.

Every client-facing link is issued by one short-link service. Short is not cosmetic: a referral link used to be 166 characters, which pushed every share-prompt text into a second billed segment. Shortening them halved that cost.

It also means expiry, revocation and usage are properties of a record rather than facts baked into the link itself — which is what makes the rest of this page possible.

The security level is decided per link, according to what holding it actually lets somebody do:

  • A referral link grants nothing and is designed to be shared. It is not hardened, because hardening a link meant for a public post would break the thing it is for.
  • An invoice link shows a bill and offers payment.
  • A proposal link can sign a contract. It is the most protected, and signing it requires a verification code sent to the contact already on the client’s record.

The important half is that the link meant to be shared is not locked down, and the one that signs contracts is not under-protected.

Previously a proposal link expired only if somebody had happened to set a validity date on that particular proposal. Otherwise it could sign contracts indefinitely — through a forwarded email, a shared laptop, or the browser history on a phone that was later sold.

Now expiry is a property of every link, so a link that has outlived its purpose stops working whether or not anybody remembered to think about it.

A link that went to the wrong person can be revoked, which stops it immediately. On an invoice that is the Revoke link button in the send panel — see Invoices.

Revoking does not affect the invoice or the proposal itself. It stops that particular link, and you can send a fresh one.

This page describes Secure Links & Client Verification. It is written from that feature’s record and covers what has shipped, never what is planned.