Built for child welfare and financial records

Confidential documents, exchanged both ways, without email.

PartnerVault is the private portal where agencies, accountants and the families, clients and partners they work with exchange case files, financial records and signed forms. Every file is scanned before anyone can open it, every action is recorded, and every partner sees only their own.

In production at a licensed child-placing agency. Access is by invitation; there is no public sign-up.

Built for the files you can't email

Encrypted email breaks on large attachments, expires links, and leaves no record of what was actually received. A portal fixes all three — if it is private enough to trust with these documents.

Child welfare and foster care

Case records, home studies, medical and school records, and the financial disclosures resource families must provide — bank statements, tax returns, pay stubs.

  • Home study packet
  • Resource-family financials
  • Court and placement records

Accounting and tax

Collect a client's year from them and send the return back, without a single attachment. Returns, K-1s, brokerage statements and organisers in one place per client.

  • Prior-year returns
  • Bank and brokerage statements
  • Signed engagement letters

Legal, HR and everyone else with a file too sensitive to email

Discovery, signed agreements, background checks, personnel files. Anything you would otherwise encrypt, split, or hand over on a drive.

  • Discovery and exhibits
  • Executed agreements
  • Background and personnel files

How an exchange works

  1. 01

    You invite a partner by name

    A family, a client, an outside agency. They get a named invitation to a private portal that holds only their relationship with you — never anyone else's.

  2. 02

    They see exactly what you need

    A checklist tells them which documents are outstanding. They upload from any browser; you upload back. Large files are fine.

  3. 03

    Every file is checked, every action recorded

    Each upload is quarantined until a malware scan clears it. Who uploaded, viewed or downloaded what, and when, is written to an audit trail you can export.

Security, in plain English

These are the controls that are actually in place today — not a roadmap. The longer version, including what we deliberately do not do, is on the security page.

Two-step verification for every account

Staff and partners alike enrol an authenticator app before they see a single file. There is no setting to turn it off.

Every upload quarantined until scanned

A file is not downloadable until a malware scan clears it. If the scanner is unreachable, the file waits — it is never released unchecked.

Isolation enforced in the database

Organisations and partners are separated by row-level security, not by the application remembering to check. Automated tests prove one agency cannot read another's data on every change.

An audit trail you own

Uploads, views, downloads, invitations and administrative changes are recorded with actor and time, and your administrators can export the whole trail as a spreadsheet.

Documented retention

Trash is purged after 30 days; blocked and abandoned uploads sooner. Sessions end after 30 minutes idle. The schedule is written down, not tribal knowledge.

AI is off until an administrator turns it on

No document is read by an AI model unless your administrator enables it for that specific workspace. When on, the model sees only the text of that workspace's documents, for that request, and its output is treated as untrusted.

Optional, per workspace

When you want it, the portal can read the files for you.

An administrator switches it on for a workspace. Until then no model sees a document. When on, the documents are treated strictly as material to be read — never as instructions — and every answer points back to the file it came from.

Ask a question, get a cited answer

“Which statements are missing from the Rivera file?” Answers come only from that partner's documents, with a link to each source.

Combine and compare

Turn several documents into one brief, a side-by-side comparison, or a single merged PDF.

Draft from the files

Write a memo, invoice or summary from the strongest parts of the documents you pick, and file it straight back into the portal.

“We handle children's files and sensitive information for resource families — financials, bank statements, tax returns, Social Security numbers. We needed a two-way exchange instead of encrypted email, because large files simply could not be sent, even with an encryption service.”
Knotts Family Agency — licensed child-placing agency, first PartnerVault customer

Pricing

Priced per organisation — not per file, per partner or per gigabyte — so nobody on your team hesitates to use it. Every plan includes mandatory two-step verification, malware scanning, the audit trail and unlimited partner invitations.

Tell us about your organisation and we will send a quote and a working demo.

Request a demo and a quote

  • A 30-minute walkthrough on your own documents (redacted samples are fine)
  • The security overview and our review notes, ready for your IT or board
  • A per-organisation monthly price, with no per-partner fees
Email us

Or write to [email protected]. We reply within one business day.

Questions directors ask

Is PartnerVault HIPAA compliant?
PartnerVault is built to HIPAA-grade practice — mandatory two-step verification, encryption in transit and at rest, quarantine scanning, isolation enforced in the database, a full audit trail and a written retention policy — and we are transparent about every control on the security page. We are not a covered entity and do not claim certification; if you need a Business Associate Agreement, ask and we will discuss it.
Where is our data stored?
In the United States, on Supabase (Postgres and encrypted object storage) behind Cloudflare. Files are scanned on infrastructure we operate; they are never sent to a third-party scanning vendor.
Can one partner ever see another partner's files?
No. Each partner is a member of their own portal only. The separation is enforced by database policy and covered by automated tests that run before any change ships.
How do partners sign in? Do they need to install anything?
A browser and an authenticator app on their phone. They receive a named invitation, set a password and enrol two-step verification. There is nothing to install on a computer.
What happens to files when a case or engagement closes?
You move them to trash, and they are permanently deleted 30 days later. You can export the audit trail first. Nothing lingers in a backup of the file store.
Can we take our data with us if we leave?
Yes. Documents download as the original files and the audit trail exports as CSV. We will help with a bulk export on request.

Stop sending confidential files by email.

See PartnerVault on your own documents. Already invited? Sign in instead.