How the Magic-Link Portal Works

The client portal is a view-only window into the documents, proposals, and invoices you've sent a specific client. There's no password; access is granted by a signed, time-limited magic link.

The flow

  1. You send a portal invite from the client's workspace.

  2. Loyva generates a signed token tied to that client and emails the link.

  3. The client clicks the link and lands on their portal. No signup, no password.

  4. The token authorizes read access for a limited window. After it expires, the client requests a fresh link.

What the token guarantees

  • It is scoped to one client only. Clients cannot see anyone else's data.

  • It is read-only. The portal cannot modify records.

  • It is time-limited. Old links stop working after the window closes.

Note: Portal access is completely separate from your team's authenticated login. Clients are never added to your auth.users table and never count toward seats.

Security model

All portal data is fetched through dedicated edge functions that verify the token and explicitly bypass RLS with the service role; so even if a token leaks, the blast radius is one client's view-only data.