WeGotFiles

A draft settlement, annual accounts, a folder of receipts. You're bound by confidentiality, and a forwarded email or a typo in the address can become a case of its own. Here's how to send so the document only ends up where it should, and so you can show what happened afterwards.

Before you send a sensitive document

You choose these on the send page before you tap Send. Verify recipient and burn on delivery require Pro.

Verify recipient. The recipient has to confirm their email address with a one-time code before downloading. Choose exact email, and a forwarded link opens nothing for anyone else. Choose domain if someone in the client's finance department should be able to open it.
Password. Give it by phone or text message, never in the same email as the link.
Burn on delivery. The file is removed once it's been collected, and the link stops working.
Short expiry. One to three days covers most cases.

Don't write confidential information in the message field. That text appears in plain text in the email.

When not even we should be able to read it

Turn on End-to-end encryption (E2E) under Options. The files are then encrypted in your browser before they're uploaded, and only the recipient can open them. Both you and the client must have set up keys with your phones, and such files can't be virus-scanned. Read End-to-end encryption before you start using it.

Receive documents from clients

With Request files in Share folders (Pro) you send the client a link, and the client uploads without an account. Each sender gets their own subfolder, so receipts from different clients don't get mixed up.

Sent the wrong thing?

With Pro, open the transfer under Account → Track and choose Revoke. The files are deleted right away. Before you confirm, the dialog shows who, if anyone, has already downloaded.

Secure the account

Turn on two-factor under Account → Profile → Two-factor. If you own the workspace, you can require it of everyone in the office.

What you can see yourself

The BitSeal badge next to the file on the download page shows that the content hasn't changed since upload.
Account → Track shows when the document was downloaded, and by whom.
The "Stored in the EU" check on each file after upload, and "Encrypted on this device" when you send end-to-end encrypted.
In a shared folder, as the owner, you see every upload and download with name and time, under Activity and Transfers.