Client Portal¶
The Client Portal gives your clients their own branded, secure space to follow their work with you: track matters, see upcoming renewals and deadlines, upload documents, download completed packages, and request new services. It turns Scroll from an internal tool into your client-facing front door, and the documents clients upload flow straight back into your workflows.
Each of your existing clients becomes a portal user, identified by their email. There are no passwords to manage.
How clients sign in (passwordless)¶
You enable portal access per client, then the client signs in with a one-time code or link, never a password.
1. You turn on Portal access for a client and set their email
→ Scroll emails them a branded invite link
2. The client clicks the link, or visits your portal and enters their email
→ Scroll emails a 6-digit code and a one-tap link (valid 15 minutes)
3. They enter the code (or tap the link) → they are signed in
A client can only sign in after you have enabled them, so access is always yours to grant and revoke.
Security¶
Every session is scoped to exactly one client in one workspace, so a client only ever sees their own matters, and one firm's clients can never see another firm's data. Sign-in codes and links are single-use and expire. Clients see the status of their matters throughout, but can only open or download documents once a matter is completed and approved (sealed in the Provenance Vault), never work in progress.
What the client sees¶
- Messages, a two-way conversation with you, where they reply in plain text and attach documents when needed (see below).
- My matters, their workflow runs with a clear status (In progress, With your firm for review, or Completed), a download button for completed, sealed packages, and a Sign button when you have requested their signature.
- Renewals and deadlines, their upcoming renewals from Renewal Autopilot.
- Request a service, pick one of the workflows you offer (scoped to their jurisdiction) or describe what they need.
The whole portal is fully Arabic and right-to-left, with a built-in English and Arabic switch that each client can set for themselves.
Messages and document requests¶
The portal is a shared conversation, not a one-way tool.
- You post notes to a client from their page in Scroll, for example "please send your passport and trade licence." Each message can carry a Request a document toggle.
- The client sees the thread in their portal and replies with text. When a message was flagged as a document request, that message shows them an Upload document button; otherwise they can still attach files any time with Attach files. They can send several documents at once.
- Every uploaded file lands in your Client documents list, ready to download or run a workflow on, and the whole exchange stays in one timeline.
Both sides are notified by email (and Telegram, if connected) when the other replies, so nothing waits unseen.
E-signature¶
Clients can electronically sign completed work, with the signature bound to the sealed record.
- On a completed, sealed matter you click Request client signature. The client is emailed that a document is ready to sign.
- In the portal, the matter shows a Sign button. The client signs by typing or drawing their signature and confirming consent.
- The signature is stamped with the time and IP, bound to the matter's Vault hash (so any later change breaks verification), and a signature certificate page is appended to the PDF.
- You are notified, the client gets a confirmation, and both can download the signed copy. The matter shows Signed in the portal and a Signed badge in the Provenance Vault.
Signing is a session-plus-consent electronic signature: the already-signed-in client confirms intent, and the record captures who, when, from where, and against which document hash.
What you control (firm side)¶
Everything is managed from Scroll, under the Client Portal section and each client's page.
Per-client access¶
On a client's page, the Client Portal access panel lets you set the client's email and Enable and send invite, see their last sign-in, Resend the invite, or Revoke access (which also ends their active sessions).
Branding¶
Under Client Portal, set your firm name, accent colour, and logo. This is what clients see on the sign-in screen, the dashboard, and every portal email. The shareable sign-in link (your portal address) is shown there to give to clients.
Client documents¶
Every file a client uploads appears under Client documents, where you can:
- Download the original file,
- Run a workflow on it with one click, which starts a run for that client with the document attached and their profile pre-filled, then opens it. The run flows through the normal approval gate and Vault, and the result appears back in the client's portal, and
- Delete a document you no longer need (this also removes the stored file).
Client requests¶
Service requests clients submit appear in the Client requests inbox, with the workflow they asked for and any message, so nothing gets missed. You can mark a request done once you have actioned it, or dismiss it, to keep the inbox tidy, and an unseen-count badge on the sidebar shows how many are still new.
Client activity¶
A single, newest-first Client activity feed shows everything clients do across the portal, signatures, uploads, service requests, and sign-ins, so you can see engagement at a glance.
Jurisdiction¶
Each client has a jurisdiction (UAE, Saudi, or Both), set when you add the client and editable on their page. The topbar UAE / KSA / Both selector then scopes everything consistently: the Clients list, the Client documents, requests, and activity on the Client Portal tab, and the workflows a client sees under Request a service. A UAE client is shown UAE and cross-market workflows, a Saudi client the Saudi and cross-market ones.
How it fits together¶
The portal reuses the rest of Scroll, it does not work around it. Uploads become workflow inputs, requests become matters, renewals come from Autopilot, completed packages come from the Vault, and every run a client triggers still passes the Authorisation Layer approval gate. Clients get visibility and self-service, you keep full control.