Stop emailing
Start requesting them safely.

Magic-link file collection for Canadian professionals who handle sensitive client documents. Virus-scanned, encrypted, audit-logged, and your clients don’t need an account.

14-day free trial · No charge until day 15 · Cancel anytime

securefiles.yourfirm.ca
Active requests
3 open
+ New request
Smith · Residential Purchase
4 of 5 files received
In progress
Jones · Refinance
5 of 5 files · scanned clean
Complete
Patel · Pre-approval
1 of 4 files received
Awaiting

Built for Canadian mortgage brokers · lawyers · accountants · bookkeepers · financial planners · immigration consultants

Built for the way you actually work

I'm a…

“My client just emailed me their SIN, their T4, and a photo of their passport. In one email.”
  • Send one magic link, collect SINs / T4s / pay stubs / ID in a single intake. No app, no account, no friction for the client.
  • Every file virus-scanned, encrypted at rest, audit-logged with who-sent-what-when.
  • Pre-built request template for residential mortgage purchase and refinance. Start in under a minute.
  • Send commitment letters and closing packages back through the same portal - no second tool, same audit trail.
How it works

Three steps. No software for your client.

1

Create a request

List the files you need. Pick from a starter template (mortgage, refinance, tax return, KYC) or build your own checklist.

2

Your client gets a magic link

One email, one click, no account. They see a tidy checklist on a page branded as your firm, not ours.

3

Files land in your dashboard

Each one is scanned for viruses, encrypted at rest, and added to the audit log so you know who sent what when.

Why pay for this

Email wasn't built for client documents.

You already know the alternatives have problems. Here's how this stacks up against what you're probably doing today.

CapabilityEmailDropbox / WeTransferReceiveVault
Client needs an accountNoOften yesNo
Virus-scanned on arrivalNoNoYes (ClamAV)
Audit log of who-sent-what-whenNoLimitedEvery action
Branded as your firmNoNoYes
Files encrypted at restProvider-dependentYesYes
Optional end-to-end encryptionNoNoYes (Business+)
Send files securely outboundAttachment-onlyYes (separate flow)Yes (same portal)
Canadian-hostedUsually noNoYes
Security

The boring parts, done properly.

Virus scanning

Every upload goes through ClamAV before it lands in your dashboard. Infected files are quarantined and you get an alert.

Encryption at rest

Files live in S3-compatible object storage with server-side encryption. Optional client-side end-to-end encryption on Business+.

Full audit log

Every action gets a timestamped record with the actor: request created, link sent, file uploaded, file downloaded. Exportable.

No-account uploads

Your contact clicks a magic link and uploads. No password, no sign-up, no support email asking how to use Dropbox.

Canadian-hosted

Servers in Canada, TLS everywhere, secrets managed in environment variables, and no third-party trackers on customer-facing pages.

MFA on every account

TOTP, hardware passkeys (YubiKey / iCloud / Windows Hello), and recovery codes. Sudo gate on destructive actions.

FAQ

Common questions

Where are the files stored?+

On a Canadian VPS using S3-compatible object storage with server-side encryption. Files are never copied to third-party clouds.

What happens to files after the request expires?+

Each request has a configurable expiry (default 30 days). After that, the magic link stops working. Files remain in your dashboard until you delete them or your retention policy removes them.

Is this PIPEDA / Quebec Law 25 compliant?+

The product is built with PIPEDA, PHIPA, and Quebec Law 25 expectations in mind: minimum-necessary collection, audit logging, encryption, expiry, and Canadian hosting. Compliance is ultimately your responsibility, but the technical building blocks are here.

Can I cancel during the trial?+

Yes. The 14-day trial is free and we don’t charge your card until day 15. Cancel any time from the billing page in your dashboard.

Can my clients reply to the magic-link email?+

Yes. Invite emails go out with your email address as the reply-to, so your client can ask a question and it lands in your inbox like a normal reply.

Try it on your next intake.

14 days free, every feature included. Cancel before day 15 and your card is never charged.

ReceiveVault - Secure file collection for Canadian professionals