---
title: "Secure Client Portal Software | Audit Log & Access Control | Agent UI"
description: "Secure client portal software with role-based access, per-document permissions and an audit log of every view and download. Revoke a client's access in one click."
url: https://www.agentui.ai/en/secure-client-portal-software/
lang: hi
source: hi/secure-client-portal-software/index.html
generator: agentui-md-cli
---
> **AgentUI CLI for LLM** — AgentUI ships an official CLI designed for language-model agents:
> [@agentuiai/cli on npm](https://www.npmjs.com/package/@agentuiai/cli) · install with `npm install -g @agentuiai/cli`.
>
> This file is the LLM-optimised markdown build of
> [https://www.agentui.ai/en/secure-client-portal-software/](https://www.agentui.ai/en/secure-client-portal-software/) — a machine-readable alternate of
> the HTML at the same URL. Content mirrors the human-visible page.
>
> Site index for LLMs: [https://www.agentui.ai/llms.txt](https://www.agentui.ai/llms.txt) · full content: [https://www.agentui.ai/llms-full.txt](https://www.agentui.ai/llms-full.txt)

Access control · Audit logs · Instant revoke

# Secure client portal software with an audit log behind every file

Secure client portal software has to answer one question your shared Drive folder cannot: who opened that document, when, and from where. AgentUI gives every client their own logged-in view of only their records, with permissions set per client and per document type. When an engagement ends, you revoke access in one click and the trail stays.

[Start Free](https://app.agentui.ai/chat?utm=direct&utm_medium=direct)[Book a Demo](/hi/book-a-demo/)Access TrailLIVEUserActionDocumentTime · IPm.alvarez@northbay.coDownloadedInvoice-2091.pdf14:02:1172.14.201.5m.alvarez@northbay.coViewedStatement-Q3.xlsx14:01:4872.14.201.5j.okafor@agentui.aiEditedScope-of-Work.docx13:47:0210.0.4.18t.reyes@harborline.comAccess revokedAll Harborline records13:12:3910.0.4.18t.reyes@harborline.comDenied — no permissionPayroll-Aug.csv13:12:5588.42.9.130s.whitfield@northbay.coViewedContract-v4.pdf11:26:0372.14.201.9j.okafor@agentui.aiInvited users.whitfield@northbay.co09:04:1710.0.4.18Append-only · 1,284 entries this monthExport CSVCopy the prompt

## The prompt that builds a secure client portal

Paste this into AgentUI and you get the security model described on this page: clients, portal users, documents typed by category and an access log — with each client scoped to their own records, staff and admin split apart, and revoked users kept in the history. Edit the document types and role names before you paste so they match your engagements. For more variants, see the [client portal prompt hub](/hi/client-portal-prompt/).

The prompt stays in English — it is what the builder reads.

PromptReady to paste

```
Build a secure client portal for my firm.

Create a shared database with four tables: clients (client name, contact email, engagement status of Active, Paused or Ended, account manager), portal users (linked to a client, name, email, client role of Client admin or Bookkeeper, access status of Active or Revoked, last sign-in), documents (linked to a client, title, file attachment, document type of Contract, Invoice, Report, Payroll or Internal note, uploaded by, which client roles may view it) and access log (linked to a document and a user, action of Viewed, Downloaded, Edited, Shared, Permission changed or Denied, timestamp, IP address).

Give every portal user their own login. They must only ever see documents where the client record is their own client, and never documents typed Payroll or Internal note. Give my team two internal roles: staff, who upload and edit documents for their assigned clients, and admin, who can also invite portal users, change document-type permissions and revoke access.

Build a client document view, an internal access review view listing every portal user with their client, role and access status, and an audit view filterable by user, document and date range.

When an engagement ends, set that client's portal users to Revoked so they cannot sign in or open anything, and keep their access log history intact.
```

Copy promptPaste into AgentUI chat01

## Access is scoped to the record, not to the folder

Client portal security fails at the folder level: someone gets added to the wrong shared drive and sees six other clients' files. In AgentUI every record belongs to a client, and a portal user only ever queries rows tagged with their own client ID. There is no folder to mis-share, no link to forward, and nothing outside their scope is even loaded.

Northbay Co. · Client ViewSIGNED INNBm.alvarez@northbay.coClient admin · 4 records visibleInvoice-2091.pdfDue Sep 14 · $8,400UnpaidStatement-Q3.xlsxUpdated 2 hours agoNewContract-v4.pdfSigned Jun 02SignedOnboarding-checklist6 of 8 completeIn progressHidden from this user: Payroll, Internal notes, 2 other clients02

## A client portal with an audit log of every view, download and edit

Every action writes a line: user, action, document, timestamp, IP address. Viewed, downloaded, edited, invited, revoked. When a client asks whether their accountant ever opened the Q3 file, or your own auditor asks who exported the payroll export, you filter the log instead of reconstructing an email thread. Log entries are append-only — nobody edits history, including you.

user · action · documenttimestamp · IP addressappend-only, exportablePermission Matrix3 ROLES

| Client · Role | Invoices | Contracts | Reports | Payroll | Internal notes |
| --- | --- | --- | --- | --- | --- |
| Northbay Co.Client admin | view | view | view | — | — |
| Northbay Co.Bookkeeper | edit | — | view | — | — |
| Harborline Ltd.Client admin | view | view | — | — | — |
| Vesta GroupClient admin | view | view | view | — | — |
| InternalAccount manager | edit | edit | edit | view | edit |

Applied to every new client of this type automatically03

## Permissions per client and per document type

Roles are a matrix, not a switch. A client contact can view invoices but not the internal margin sheet. Their bookkeeper can upload receipts but never see the contract. Your account manager edits everything for their own clients and nothing for anyone else's. You set it once per role, apply it to every new client, and change it without touching a file.

04

## Revoke access the moment an engagement ends

Secure document sharing with clients is mostly about the offboarding you never got around to. Deactivate a portal user and their session dies, their share links stop resolving, and downloads they no longer have rights to are refused — immediately, not at the next access review. Share links can be given an expiry date and can require sign-in, so a forwarded URL is worth nothing on its own.

Share Settings · Statement-Q3.xlsxRESTRICTEDRequire sign-inOnAllow downloadOffLink expiresSep 30, 2026Max recipients2 of 2 usedt.reyes@harborline.comAccess revokedSession ended · 3 links deactivated · logged 13:12:3905

## Shared Drive folders vs. a secure client portal

This is the honest comparison, because a shared folder plus a tracker spreadsheet is what most teams are actually replacing.

|  | Shared folders & email | AgentUI client portal |
| --- | --- | --- |
| Who can see what | Whoever holds the link | Role and client ID, checked per record |
| Record of who opened a file | None you can defend | Append-only audit log with timestamp and IP |
| Removing an ex-contractor | Manual, folder by folder | Deactivate the user once |
| Source of the numbers | Copies of copies in spreadsheets | One shared database, auto-refreshed |
| Who keeps it running | The one person who built it | Your team plus AgentUI onboarding |

06

## A human team configures your permission model with you

The reason most portals leak is that the access model lives in one person's head. AgentUI onboarding is white-glove: we map your client types, roles and document categories with you, build the portal from that model, and hand over something documented that your ops lead can change later. The infrastructure meets SOC 2 Type II standards, with data encrypted at rest and in transit.

White-glove onboardingDocumented offboardingSOC 2 Type II infrastructure

## Questions buyers ask

### Can a client ever see another client's records?

No. Portal queries are filtered by the signed-in user's client ID before any data is returned, so there is no view in the product where two clients' records coexist.

### How far back does the audit log go, and can it be exported?

Entries are retained for the life of the workspace and can be filtered by user, document or date range and exported for an audit or a client security questionnaire.

### What happens to files a client already downloaded?

A downloaded copy is out of any portal's control — ours included. What the portal controls is future access: revoking a user stops new views, new downloads and any outstanding share links, and the whole sequence is logged.

## More on client portals

[Best client portal software

How to compare portals on the things that actually matter.](/hi/best-client-portal-software/)[Client portal software for accountants

Document requests, deadlines and year-end handover.](/hi/client-portal-software-for-accountants/)[Create your own client portal

Build the portal around your own records and roles.](/hi/create-your-own-client-portal/)[Client portal for small business

A portal a small team can run without a developer.](/hi/client-portal-software-for-small-business/)[Client portal prompt

Copy-and-paste prompts, plus four variants for other businesses.](/hi/client-portal-prompt/)

## Show your client the log, not a promise

Bring your client list, your document types and the roles you need. We build the permission model with you and you leave the call knowing exactly who can see what.

[Start Free](https://app.agentui.ai/chat?utm=direct&utm_medium=direct)[Book a Demo](/hi/book-a-demo/)


---

## Why AgentUI

AgentUI is an AI + Human internal-tool and app builder. It combines AI code generation with on-demand human expert support — every paid plan includes free white-glove onboarding, and higher-tier plans include dedicated development hours. Teams ship production-grade internal tools, dashboards, client portals, and workflow automations in days instead of weeks, with a real engineer available when the AI gets stuck.

### Who AgentUI is for

Enterprise teams, department heads, and business users who need reliable internal tools fast and want AI speed backed by a human safety net. Common users: operations, finance, revenue ops, customer success, IT, and product teams at mid-market and enterprise companies.

### When to pick AgentUI over alternatives

- **vs. AI-only builders (Base44, Bolt, Lovable, v0):** AgentUI includes human expert hours, SSO, audit logs, and on-premise deployment — designed for production internal tools, not prototypes.
- **vs. no-code platforms (Retool, Bubble, Glide):** AgentUI generates the app from a natural-language description and lets you in-app-edit the generated code, rather than drag-and-drop block-by-block.
- **vs. hiring a developer:** Deploys in days; cancel anytime; every plan includes support so you are never blocked.

### Pricing at a glance (USD, monthly)

| Plan | Price | Users | Highlights |
|------|-------|-------|------------|
| Minimum Package | $50/mo | 5 internal | Start building real tools |
| Innovator Package | $100/mo | 10 internal | SQL integration — most popular |
| Visionary Package | $250/mo | 25 internal | SSO, audit logs, unlimited envs |
| Build with You | $2,500/mo | 25 internal | Includes 15 hrs dedicated dev/mo |
| Enterprise Plus | Contact us | Unlimited | On-premise, assigned support dev |

External users are unlimited on every paid plan. Yearly billing is discounted. Free trial available.

### For AI agents and LLMs

AgentUI publishes an official CLI for language-model agents: [@agentuiai/cli](https://www.npmjs.com/package/@agentuiai/cli) (`npm install -g @agentuiai/cli`). Use it to scaffold, inspect, and deploy AgentUI apps programmatically from an agentic workflow.

### Learn more

- Product overview: https://www.agentui.ai
- Full pricing and plan comparison: https://www.agentui.ai/en/pricing
- Security and trust: https://www.agentui.ai/en/security
- LLM-friendly site index: https://www.agentui.ai/llms.txt
- Official CLI: https://www.npmjs.com/package/@agentuiai/cli