One space per client
Each client sees their own file and nothing else. No guessable link, no share open to anyone who has the address.
The firm says what it needs, the client uploads, the system chases. Nobody sends a payslip as an attachment any more.
Status : In preparation. It deliberately overlaps the files module of the sovereign workspace, with a clear line: this one is for outside parties, that one is for staff. Sheet updated 11 September 2026.
Payslips, tax returns and tenancy files travel today by email and through foreign transfer services. That is the most ordinary weakness in the sector, and the best documented.
But a firm that changes transfer service has fixed only half of it. The other half, the half that actually costs money, is the time spent reminding people who has not sent what. Nobody is billed for that time.
A portal that only stores is therefore useless. It has to hold the list of what is missing, and move it along on its own.
The list of expected documents is the central object. Uploading is only a consequence of it, and chasing is what drives it.
Each client sees their own file and nothing else. No guessable link, no share open to anyone who has the address.
The firm ticks what it needs, the client sees what is missing, and both sides look at the same state of play.
Spaced reminders, stopped on receipt, with an alert to the firm when a missing document is about to breach a deadline. This is the function that saves time, not the storage.
The client photographs a receipt, the app straightens the page and produces a readable document. That is how documents actually arrive.
Each type of document gets its retention period when the file is opened, not on the day somebody notices everything is still there.
The client receives timestamped proof of what was handed over and when. That ends arguments about a document supposedly sent.
Platforms
A counter is a door, not a vault. It carries and it tracks, it does not archive in the legal sense.
Not for a one-off upload: a named, time-limited link is enough. A regular client is better off with a permanent account, which gives them the history of what they have already handed over.
On Swiss infrastructure only. No foreign transfer service is involved anywhere in the chain, notifications included.
That is the intended use. The question to ask any provider is what rights the operator holds over the content, and the answer belongs in the contract rather than on a presentation page.
Early access goes to organisations willing to be involved in getting it right. Tell us which one concerns you and what you do instead today.
Write to us