Client portal: exchanging accounting documents securely

Quick answer. An accountant client portal is a secure online space where you drop your accounting documents (invoices, statements, supporting documents) instead of using email or paper. Well configured, it structures the drop by document type, traces every action and complies with the GDPR. It is not mandatory under the law, but it reduces risk, streamlines collection and saves time on both sides. Expect, in most cases, a monthly subscription ranging from a few dozen to a few hundred euros depending on scope.

Collecting documents is one of the most common friction points between a firm and its client: invoices sent in bulk, statements forgotten, supporting documents lost in an inbox, an unreadable scan received the day before the close. This disorder is not trivial: it delays accounting production, multiplies reminders and weakens the quality of the file. The client portal answers this problem by organising the exchange in a single, secure space. Since this data is covered by professional secrecy and by the GDPR, its transmission is a genuine security requirement: article 32 of the GDPR requires the data controller to put in place appropriate technical measures (encryption, controlled hosting), which France's data protection authority (CNIL) details in its guide to personal data security. Here is how to set it up effectively, how to choose the tool, and where the real trade-offs lie, whether you are a director or a firm.

Email was never designed to carry accounting documents. It scatters files across threads, mixes document types, exposes you to loss and wrong-recipient errors, and offers no real security for sensitive data. At the close, finding a specific invoice in twelve months of exchanges is often archaeology.

The portal, on the contrary, centralises all documents in a single, structured and traced space. You drop, the firm collects, with no disorderly back-and-forth. The benefit is not only technical: it makes the information flow reliable. Fewer oversights, faster accounting production, and security suited to data covered by professional secrecy, a subject we connect to AI and data pseudonymisation when a tool automatically processes your documents. The portal is part of the wider digitalisation of the finance function and of business digitalisation.

One frequent confusion should be avoided, however: a portal is not an archiving vault. It serves to exchange and file over time; legal retention follows its own durations, covered below.

To decide with full knowledge, it helps to compare the three transmission modes on the criteria that matter to both the firm and the client.

The table does not argue for technology in itself: it shows that each line removes a concrete cause of friction seen in real files. It is this accumulation of small gains that makes the difference over an accounting year.

Most firms now offer a portal built into their production software (Pennylane, Cegid, ACD, MyUnisoft, and others), or a dedicated document space linked to a document management system. Our conviction: the vendor's name matters less than how well the portal fits your accounting software and your habits. Rather than comparing brands, compare criteria. Here are the ones we check in real files, and what they mean in practice.

A point of method: do not choose the portal in isolation. It is part of an accounting production software suite. Choosing that tool is a subject in its own right, which we cover in our guide on choosing accounting software. In practice, the firm often provides the portal attached to its own production, which simplifies the decision: you adopt your firm's space rather than arbitrating between vendors.

Trade-offs and decisions#

Two useful clarifications before investing. First, no text imposes a portal: it is not a legal obligation, but a good security and organisation practice, strongly recommended to reduce risk on sensitive data. Second, the right level of equipment depends on your situation.

• Very small structure, few documents: a well-organised shared space, with clear access rules, may be enough at first, provided security is handled carefully (rights, two-factor authentication).
• Growing or multi-entity company: from several files or a regular document volume onward, a structured portal becomes clearly more profitable than email management, because it removes hours of reminders each month.
• Flow first, not the tool: whatever the choice, it is the regularity of the drop that creates the value, far more than the software's feature richness.

A portal's effectiveness rests on two things: its filing structure and its rights management.

The drop must be organised by document type: purchase invoices, sales invoices, bank statements, expense claims, contracts, payroll documents. A clear tree allows immediate filing and avoids mixing documents, the first source of entry errors. Access, in turn, must be defined carefully: each user sees only what concerns them. In a company, the director, the in-house bookkeeper and the firm do not have the same needs; segmenting rights reduces leak risk and clarifies responsibilities.

Traceability completes the setup. Knowing who dropped which document and when is valuable in case of a query on a supporting item, but also in case of an audit or dispute. Security, finally, rests on encrypted exchanges and GDPR-compliant hosting, a point where responsibility stays shared between the software vendor, the firm and the business.

Our view: the tool is only worth its use#

In our files, the client portal is one of the most profitable investments in back-office digitalisation: inexpensive, quickly deployed, and beneficial on both sides. But we also observe that the value never comes from the tool alone. A perfectly configured portal, fed once a year in bulk, is no better than an inbox. Conversely, a modest portal fed over time transforms the quality of the file. Our priority is therefore not the choice of vendor, but the installation of a habit: a regular drop, at a sustainable pace. It is this support work, built into our bookkeeping and review mission, that separates a useful portal from a gadget.

The portal is only worthwhile if it serves both parties, and it does. On the firm's side, it makes production reliable, reduces reminders and streamlines the close. But the director wondering whether to adopt their accountant's portal gains just as much, and is right to ask the question before committing.

Our advice to the director who hesitates: adopt the portal offered by your firm rather than resisting it. The return on the time invested in building the habit is quick, usually a few hours saved each month on exchanges and reminders.

The best portal fails if you keep sending documents by email or if you drop them in one block at the close. Adoption is worked on: understanding the value, building the habit of a regular drop, simplifying the action as much as possible (mobile app, scan from the phone, bank connection for statements).

A drop over time has three concrete advantages. It smooths the load across the year rather than concentrating it at the close. It improves quality: a document dropped in the month it is issued is easier to reconcile and understand than one found a year later. It finally makes VAT and cash-flow monitoring more reliable, both of which depend on up-to-date entry. Change management is decisive here: a portal is, above all, a new habit to install.

A portal eases the exchange, but it does not replace your retention obligations. Accounting records and supporting documents must be kept for ten years from the close of the financial year, under article L123-22 of the French Commercial Code. Other durations coexist depending on the document type (payroll, tax, contractual), which justifies an archiving policy distinct from mere exchange.

The portal therefore works alongside two complementary devices: organised archiving that respects these durations, and a reliable backup policy. On this last point, we refer to our article on the 3-2-1 backup rule, because a portal is no guarantee of recovery in case of an incident. When a change of tool occurs, the question of data migration also arises, a subject close to migrating accounting software and recovering balances.

A director of a small services company used to send us documents by email, in bulk, often a few weeks before the close: repeated reminders, missing supporting documents identified too late, delayed production. We set up a portal structured by document type, with distinct rights for the director and their assistant. The decisive point was not the configuration, done in half a day, but the support, which unfolded in three steps over two to three months:

• Step 1, training. A short session to understand the value and get to grips with the drop, without overload.
• Step 2, cadence. A monthly drop frequency agreed together, realistic rather than ideal.
• Step 3, mobile scan. Scanning expense claims from the phone, to lift the last everyday barrier.

Within two or three months, the habit settled. Documents arrived over time, bank reconciliation became regular, and the close was done without a last-minute rush. The most visible gain was not entry time, but the end of reminders and renewed peace of mind on deadlines, on both sides.

In practice: deploying a portal that truly serves#

• Define the filing tree by document type before opening access, to avoid the catch-all drop.
• Segment rights per user: director, in-house bookkeeper, firm, each on their scope.
• Activate the automations that remove email: bank connection for statements, mobile app to scan supporting documents.
• Agree on a realistic drop pace (monthly for most files) rather than an ideal target never met.
• Check hosting conditions and data reversibility: can you recover everything if you change tool?
• Connect the portal to your ten-year legal archiving and your backup, which remain distinct devices.

• The portal is not an archiving vault: legal retention (ten years, art. L123-22) requires a dedicated, durable device.
• A bulk drop once a year cancels the tool's value: regularity, not technology, creates the benefit.
• Poorly segmented access rights expose sensitive data: apply the least-necessary principle.
• Security also rests on your practices: strong passwords, two-factor authentication, vigilance on phishing.
• Reversibility is an often-forgotten selection criterion: make sure you can export all your documents.
• The portal does not replace backup: plan a copy along a 3-2-1 logic.