Client portal security
Plain-language facts about how your client area is protected. We only list safeguards that are in place today.
Signing in
- No passwords: you sign in with an 8-digit code sent to your email or mobile.
- Codes expire after 10 minutes and stop working after 5 wrong tries.
- You can only request a new code about once a minute.
- Client and staff areas are separate; creating a client account never gives staff access.
Keeping records private
- Each client can only see their own business records, messages and files.
- Only authorized Averon staff can see records across clients.
- Files sit in private storage; download links expire.
- Uploads are limited to common document and image types, up to 20 MB each.
Activity records
We log uploads, downloads, deletions, document status changes and changes to staff access, so we can see who did what and when.
What you can do
- Keep your email and phone secure — they are how you sign in.
- Sign out on shared computers.
- Tell us right away if you get a sign-in code you didn't ask for.