QWTN
Sign up free

Client Portal Overview

Give clients a secure self-service view of their waste records, notes, invoices, and upcoming collections.

What is the Client Portal?

The Client Portal is a separate, PIN-protected web application that you share with your clients. Once a client has access they can view all waste transfer notes you have raised for them, sign notes digitally, see upcoming collections, review invoices, and monitor their season ticket — without needing a QWTN account.

How access is granted

You invite a client from their Client Detail page by entering their email address. QWTN generates a unique access link and a 4-digit PIN, then emails both to the client. The client opens the link, enters their PIN, and is issued a session cookie that keeps them logged in for 7 days.

What clients can see

The portal dashboard has tabs for Overview, Collections, Notes, Invoices, and (when applicable) Containers. The Overview tab shows summary statistics and an active season ticket if one exists. All data is scoped exclusively to that client — they cannot see other customers.

Security model

Access tokens never expire — they remain valid until you revoke access from the Client Detail page. PINs are hashed with scrypt and a random salt; the plain-text PIN is never stored. After 5 failed PIN attempts the account is locked for 15 minutes. Sessions last 7 days and are stored as a secure cookie (qwtn_portal_session).

Managing portal access

You can revoke a client's portal access at any time from the Client Detail page. Revocation immediately invalidates the access token and session cookie, preventing further logins.

Portal access is per-client
Each client gets their own unique access link and PIN. Multiple contacts at the same company would each need their own portal invite if they all need access.
Share the PIN securely
The PIN is sent in the invitation email alongside the access link. Advise clients not to forward that email to others, as possession of both the link and PIN grants full portal access for that client account.