Customer portal

The customer portal lets clients do the few things they need to — approve an agreement, respond to a change request, check a project — without an account to create or a password to forget.

What clients can do

• Contracts — review and approve or decline an agreement. The terms are frozen into a snapshot when you send it, so the figures can’t shift underneath them. See Contracts.
• Change requests — approve or decline a project change; approval applies the cost and schedule deltas to the project. See Projects.
• Project status — a read-only page showing progress, phases and milestones.
• Reports — read-only client reports such as SLA and activity.

How it stays secure

Token-based, no login

Each portal link carries a random UUID-v4 token (122 bits of CSPRNG entropy — not a guessable sequential id) and expires after 30 days. Approvals capture the client’s IP address and user-agent for the audit trail, and portal actions are rate-limited.

Because there’s no login, the portal is safe to send straight to a client’s inbox — the token is the credential, it’s scoped to that one contract, change request or project, and it ages out on its own.