Inviting a Client
Assessors invite clients to the portal from the Evidence Requests tab on any assessment or from the Engagement Hub client detail page.Open the Invite Dialog
Click the Invite Client button in the Evidence Requests panel. The invite dialog appears.
Enter Client Details
Fill in the required fields:
| Field | Description |
|---|---|
| The client’s email address (required) | |
| Name | Full name of the contact person |
| Company | Company name — auto-filled and read-only when inviting from within a client engagement |
| Job Title | Role at the company (e.g., Security Engineer, IT Manager) |
When inviting from a client engagement page, the Company field is pre-filled with the client’s name and cannot be changed.
Managing Invites
Active invites are listed with the client’s name, email, job title, company, invite date, and last access time. You can:- Revoke an invite to immediately remove the client’s portal access
- Copy Portal URL to share the login link manually
Client Authentication
The Client Portal uses magic link authentication — no passwords required.Click the Magic Link
A one-time login link is sent to their email. Clicking the link authenticates the client and redirects to the portal dashboard.
Portal Dashboard
After authentication, the client sees a dashboard summarizing their evidence request status across all assessments they have been invited to.Summary Cards
Four cards at the top provide an at-a-glance overview:| Card | Description |
|---|---|
| Total Requests | Number of evidence requests assigned to the client |
| Open | Requests that still need attention |
| Accepted | Requests the assessor has approved |
| Changes Requested | Requests that need revisions |
Assessment List
Each assessment the client has been invited to appears as a card showing:- Assessment name, type, and organization
- Per-assessment request counts (open, submitted, accepted, changes requested)
- Invitation date
Evidence Requests List
The requests page shows all evidence requests for a specific assessment in a sortable, filterable table.Table Columns
| Column | Description |
|---|---|
| Req # | PCI DSS requirement number (e.g., 1.2.1) |
| Title | Evidence request title |
| Priority | Color-coded badge (Critical, High, Medium, Low) |
| Status | Current workflow status (Open, Submitted, Under Review, Changes Requested, Accepted, Waived) |
| Due Date | Deadline with overdue highlighting |
| Files | Number of uploaded files |
Filtering and Sorting
- Status filter — filter requests by status using the filter dropdown
- Sort by requirement — click the sort button to cycle through default order, ascending by requirement number (1.1 → 12.10), or descending. Uses natural numeric sorting so 1.10 comes after 1.9
Request Detail Page
Clicking a request opens the detail page where the client can:View Request Details
- Full description of what evidence is needed
- Priority level and due date
- Requirement number and tags
- Assessor’s reviewer notes (if any)
Upload Evidence Files
Clients have three ways to attach evidence to a request:- Local file upload
- Google Drive
- Confluence
Upload
Files are uploaded with a progress indicator. Once complete, they appear in the files list below.
Managing Uploaded Files
- Clients can delete any unsubmitted file on their request — not just files they uploaded themselves. This helps when multiple client-side contributors upload to the same request.
- Files render inline where possible:
- PDF — preview via blob URL (works cross-origin with the portal domain)
- CSV/spreadsheets — rendered as a formatted table with column headers
- Images — inline preview
- Other file types — downloadable with a file icon
Messaging
A built-in messaging thread allows the client and assessor to communicate about the specific request:- View messages from the assessor with timestamps
- Send replies with context about the uploaded evidence
- Messages are scoped to the individual request
Dark Mode Support
The Client Portal fully supports dark mode, matching the user’s system preference. All pages — login, verification, dashboard, request list, and request detail — use semantic color tokens for consistent appearance in both light and dark themes. The theme can be toggled via the theme switch in the portal navigation bar.Mobile Responsive
The full portal works on mobile screens. Specifically:- Tables collapse to stacked cards on the requests list so each request remains fully readable without horizontal scrolling
- Action bars move to overflow menus on narrow viewports to keep primary content visible
- Touch targets meet accessibility minimums for tap precision
- Messaging and file upload flows work the same on mobile and desktop — drag-and-drop still works on touch devices that support it