A read-only page with your firm's name on it. No sign-in, no account for the client, and no route back into anything you did not send.
Client sharing
No credit card required
What travels
Protection
View log · also written to the audit register
Opened
client@halcyon-bidco.exampleDownloaded memo.docx
client@halcyon-bidco.exampleFailed passcode attempt
unknownLink created · expires in 7 days
E. VanceThe reader sees your firm's name, the sections you chose, and nothing else. No sign-in, no account, no way back into the workspace.
01
A passcode by default, a hard expiry checked on every open, and an optional email gate: self-identified, not verified, and the product says so. Every open, download, unlock and failed attempt lands in the link's view log and the audit register.
Read the governance page
02
The memo itself always shows. Files, authorities, open questions and activity details are yours to switch on: activity details is off by default, a considered choice rather than an oversight.
See how a run is builtSummary
Clause 9(c), non-competeHigh
The 12-month prohibition on working for any law firm anywhere in the UK, Ireland or EU, in any capacity, is almost certainly wider than reasonably necessary and therefore unlikely to be enforceable.
Tillman v Egon Zehnder Ltd [2019] UKSC 32Clause 11, data and monitoringHigh
Blanket contractual consent is not an adequate basis for general employment processing, special-category data or unrestricted monitoring.
UK GDPR, Arts 6 and 9Clause 4, holiday carry-overHigh
The unconditional five-day cap conflicts with mandatory carry-over rights where sickness, statutory leave or employer failure prevents leave being taken.
Working Time Regulations 1998, regs 13 to 13A03
The URL token is a 32-character random string; only its SHA-256 hash is stored. The passcode is scrypt-hashed against a per-link salt and checked in constant time. A viewer who clears the gate carries an HMAC-signed cookie, not a client-set flag.
Read the security statement| Time | Who | Type | Entry | Matter |
|---|---|---|---|---|
| 09:36 | j.okafor | Document | Disclosure_letter_v4.docx uploaded · 18 pages | HAL-2026-0031 |
| 09:30 | e.vance | Conflict check | Conflict check on open · no matches across 38 matters | RC-2026-0009 |
| 09:12 | admin | Member | p.hartley added · role: Associate · 4 matters | Workspace |
| 08:55 | r.chen | Run | Due Diligence Agent · review grid · 12 documents | HAL-2026-0031 |
| 08:40 | r.chen | Verification | Verify all · 6 authorities · 6 verified | HAL-2026-0031 |
The memo always; files, authorities, questions and activity by choice.
Six digits by default, seven days, checked on every open.
The URL and the passcode travel by different channels.
Every open, download and failed attempt lands on the matter's register.
It takes about a minute, and it is the fastest way to see what your client will see.
