Skip to main content
Not everyone in a transaction needs an account. A seller has three questions to answer and two documents to upload. A notary needs to see the summary. A share link gives them exactly that: a secure page showing only what you chose, where they can do only what you allowed.

​
What you can share

Alternatively, choose Share entire space for an overview link: the whole space on one page, with Summary, Documents and Matters tabs. This requires that you have view access to the whole space yourself.
A link can never exceed your own access. Edit applies only where you can edit. Everything else stays view-only, and the preview shows the result. Any accepted member of a Shared Space can create links.
1

Choose Share

In a Shared Space, choose Share → Generate new link. The space enters selection mode.
2

Select what to share

Move between the tabs and select summary fields, documents, appointments or matters. Chips show what is selected, for example “4 summary fields selected”. Then choose Proceed.
3

Set the options

The dialog shows the form alongside a live preview. The preview is exactly what the recipient will see.
4

Generate, and copy at once

“Your link is ready. Copy it now — it is shown only once.” The Security section explains why.

​
Options

For anything sensitive, turn on Require an access code and send the code through a different channel from the link. If the link goes by email, send the code by text message or give it by phone.

​
What the recipient sees

The recipient opens the link and lands on a page greeting them by name, showing only what you selected. They need no account.
  • Questionnaire. Fields you shared with Edit. Answers save automatically as the recipient moves from field to field. If a value cannot be saved, it stays in the form so that they can try again.
  • Documents. View opens a document in a new tab. With Edit, Upload and Replace accept the same file types as the vault, up to 50 MB, and every upload is scanned for malware. Download all delivers everything as one zip file.
  • Vote on appointment. Yes or Maybe for each proposed time, then Submit votes.
  • Progress. The status of any matters you shared.
The page is available in English and Spanish. If a link is no longer valid, whether it expired, was replaced or was revoked, the recipient always sees the same message: “This link is not available. It may have expired, been replaced or been revoked. Ask the person who shared it for a new link.” The page never reveals which of these happened. Share opens your Active links and Expired links, with each link’s name, recipient, permission, expiry and when it was last opened. You see and manage the links you created.

​
Activity

Each link keeps a record of what happened: Link opened, Access code entered, Summary submitted, Document uploaded, Document viewed, Votes submitted, Previewed by you and Invalid link attempt. Changes made through a link are attributed to the link, not to a member of the space.

​
Security

Share links are built to be safe to send by email, which is not a safe channel.
When the link is opened, the secret is exchanged on the server for a session held in a secure, HTTP-only cookie, and the browser is redirected to an address that contains no secret. The secret does not linger in browser history, and the page’s own scripts never see the session.
Codes are six digits, generated by Casa Conect (obvious patterns such as 111111 and 123456 are never issued), and stored only as a strong, slow one-way hash. Repeated wrong attempts from one network address lock that address out for a while, and too many wrong attempts in total revoke the link.
A recipient’s session lasts an hour from their last activity, and twelve hours at most. Revoking, regenerating, resending, or changing the recipient’s email address ends every open session at once.
Opening, validating, code entry, changes, uploads and bulk downloads each have their own limit. For code entry, changes and uploads, if the limiter itself is unavailable the request is refused, not allowed through.
Documents open through links that are valid for five minutes. Uploads go directly to encrypted storage with a single-purpose ticket bound to that link and that document type, and they are verified and malware-scanned before they are accepted.
Share pages carry a strict content security policy, cannot be embedded in other sites, send no referrer, and are hidden from search engines. Their content is excluded from our analytics and session replay.
Every access is logged with its time and network address. After 365 days addresses are replaced by a keyed hash, and the key is rotated, so old entries can no longer be tied to an address.
A share link is a bearer link. Anyone who has the URL, and the access code if you set one, can use it. Casa Conect does not verify the recipient’s email address when the link is opened. Use short expiry periods and access codes for anything sensitive, and revoke links you no longer need.

​
Send everything by email instead

Email everything prepares an email in your own mail program containing the summary, appointments and matters, and downloads the documents as a zip file for you to attach. Use it when the recipient needs the material itself and not a link to it.