PingtailClient portal or upload link: which do clients use?
Portals ask clients to remember a password. Links ask them to tap. When each one is the right choice for your firm, and what clients actually use.
Every firm that collects documents from clients uses one of three channels: email attachments, a client portal with accounts, or an upload link that belongs to one request. Most firms use a mix without having chosen it.
This is a client portal vs upload link comparison for accounting and bookkeeping firms, with email as the baseline. None of the three is right for every client. The useful question is not "which is best" but "which one will this client really use, and what does my firm have to do around it".
The three options
Email attachments
You write an email that lists what you need. The client replies with files attached, often over several days. Nothing to set up, and every client knows how to do it. The cost is on your side: someone has to save each attachment, rename it, note what is still missing, and write the follow-up.
A client portal with accounts
Each client gets a login to a private area on your firm's system. They sign in, see their folders or tasks, and upload there. A portal is a permanent place that can hold years of documents and messages, and it usually comes as part of a practice management suite. The cost is on the client's side: an account to create, a password to remember, sometimes an app to install.
A request-specific upload link
You create a request, for example "Bright Dental, August bookkeeping, nine items". The client receives a link that opens that one list, with no account and no password. They upload against each item and leave. The cost is that it is not a library: the client cannot browse everything they ever sent you.
Client portal vs upload link, side by side
The table describes typical products. Check the one you are looking at against it.
| Question | Email attachments | Client portal with accounts | Request-specific upload link |
|---|---|---|---|
| Effort for the client | Lowest. Reply and attach. | Highest. Create an account, remember the password, find the right folder or task. | Low. Tap the link, upload against each item. |
| Setup effort for the firm | None. | Most. Invite every client, answer login questions. | Small. Create the client and the request. |
| Tracking what is missing | Manual. A spreadsheet or your memory. | Folder-style portals do not track. Task-style portals show open tasks. | Built in. Each item is either in or not. |
| Reminders | You write them. | Often a general "you have tasks" message. | Usually automatic. Better tools list only the items still missing. |
| Checking what arrives | You open each attachment. | You open each file. Few portals look inside the file. | Some tools compare the file with what was asked for, at upload. |
| Security of the channel | Weakest. Copies stay in two inboxes. | Strong if passwords are. Clients reuse and forget them. | Depends on the link staying private. |
| Best fit | One-off items from clients who respond well. | Clients who want to see history and messages. | Recurring checklists for clients who do not want another login. |
Is an upload link as secure as a client portal?
It depends on the link, and on how the portal is used. Each channel has a different weak point.
Email: the copies
The problem with email is that the attachment stays. A bank statement sent in March is still in the client's sent folder, in your inbox and on two phones. If either mailbox is broken into a year later, the statement is there, and you cannot take it back.
Portals: the passwords
A portal with a strong, unique password and a second sign-in step is a well protected place. The weakness is human. A client who logs in once a month forgets the password, resets it, and picks one they use elsewhere. Some share one login between two people. And a client who cannot get in sends the file by email anyway.
Links: the link itself
An upload link with no password relies on the link staying private. Anyone who holds it can open the page. That is a real limitation, and what matters is how the product limits the damage. Look for three things:
- A code on a new device. On a device that has not used the link before, the page asks for a short code sent to the contact's email. A forwarded link then needs the mailbox as well.
- One link, one request. The link opens one checklist for one period, not the client's whole history. A link that leaks shows little.
- The firm can revoke it. If the email went to the wrong person, you turn the link off at once.
Also ask what a person with the link can do: uploading is low risk, downloading earlier files is not.
For all three channels, ask the same storage questions: are files encrypted, who holds the keys, how long are files kept, and can you delete them. Ask about certifications such as SOC 2 too. Many small vendors hold none, and should say so plainly.
Four scenarios, four recommendations
1. A monthly bookkeeping client who is not technical
Tom Reed runs Harbour Cafe and sends the same five documents every month, mostly from his phone. He has reset his portal password three times this year and now emails photos of statements instead. Recommendation: an upload link. The list is fixed and every extra step loses him. What to put on the list is in the monthly collection checklist.
2. A client who wants one place for years of documents and messages
Mira Chen is the finance manager at Bright Dental. She wants to look up last year's return, see what she sent in the spring, and read your messages in one place. Recommendation: a portal. An upload link is built to finish a request, not to be a library. Mira will also keep a proper password, because she uses the portal every week.
3. A one-off request from a new contact
A prospect wants a quote and you need two prior returns. Asking someone who is not yet a client to create an account is a poor first impression. Recommendation: a link, or plain email if your firm allows it for this kind of document. If the returns contain tax identification numbers or bank details, prefer the link, so the files do not stay in two inboxes. If the prospect signs, the onboarding checklist is the next step.
4. A firm already paying for a suite with a portal its clients really use
Moore Books pays for a practice management suite. Most clients log in without being asked, files arrive in the right folders, and staff are happy. Recommendation: keep it. A second tool would add cost and solve a problem this firm does not have. The test is usage: if most documents in the last three months arrived through the portal and not around it, it is working.
Many firms end up with two channels: a portal for the clients who use it, and a link for those who never will. That is a fine result.
Questions to ask any vendor
A vague answer to any of these is an answer.
- What exactly does my client have to do the first time? Can I try it as a client, on my own phone?
- What happens if a link or an invitation is forwarded to the wrong person?
- Do reminders say which items are missing, or only that something is?
- Does anything check the file when it arrives, or do I find the wrong month myself?
- Are files encrypted in storage, who holds the keys, how long are files kept, and can I delete one client's files?
- How do I get files out, with what names, and does that work if I stop paying?
- Which security certifications do you hold, and which do you not?
Questions
Is an upload link without a password safe enough for tax documents?
It can be, if the link is long and random, opens only one request, asks for a code on a new device and can be revoked by the firm. Then ask about storage: encryption, who holds the keys, retention. Compare it with what your clients do today. If they email attachments, a well-built link is an improvement.
Do clients really dislike client portals?
Some do and some do not, and there are no reliable figures. Clients who use a portal weekly tend to be fine with it. Clients who visit once a month or once a year forget the password and email the file instead. Count how many of your documents came through the portal last month and how many came around it.
Can you use a client portal and upload links at the same time?
Yes, and many firms do. Decide per client, write the choice on the client record, and make sure files from both channels end up in the same client folder with the same naming. The one thing to avoid is one client receiving both a portal task and a link for the same request; they will do neither.
Should you stop accepting email attachments completely?
For sensitive documents that is a good goal, but a strict ban usually fails with the clients who are hardest to reach. A practical rule: never ask for documents by email, and when one arrives anyway, save it to the client file, mark the item received and delete the email.
What is the difference between a permanent upload link and a request-specific one?
A permanent link is one address per client that always accepts files, like a letterbox. Files arrive without saying what they are for, so someone still has to sort them, and a leaked link stays useful to whoever holds it. A request-specific link opens one checklist for one period, so every file lands against an item.
Doing this with Pingtail
Pingtail is the third option: a request-specific upload link. The client needs no account, no password and no app, the link belongs to one request, and opening it on a new device asks for a 6-digit code sent to the contact's email. Each upload is checked against what you asked for while the client is still on the page, and reminders list only the required items still missing. It is not a portal: there is no client library and no client chat, so for a client like Mira, keep your portal. We hold no security certifications such as SOC 2. The client side is shown on the client upload page. You can try it on yourself first: send a test request to your own email and upload the wrong file on purpose.