Portal security and limits
How portal links are scoped and expire, and the boundaries of what the portal can be used for.
How links are scoped
- A portal link is tied to one employee and grants access only to their own submission flow.
- Every link carries an expiration date, shown on the employee's profile.
- The profile also shows when the link was last used.
Managing links
- Regenerate — issues a fresh link. Use this when an employee cannot find the original.
- Revoke — invalidates the active link immediately. Use this the moment a link goes to the wrong person.
Limits
- Submissions are never auto-approved.
- Employees cannot see other employees, reports, or company-wide data.
- Employees cannot change requirements, roles, locations, or settings.
- Document upload can be turned off entirely, restricting employees to entering details only.
What not to collect
The portal is for credential documents — licenses, certificates, and training records. It is not a channel for medical or patient information.