The customer portal: everything they hold, and nothing they can break.
Your policyholders get a login to their own records — the policies you have shared, how long each cover has left, and the original documents to download. A customer account holds no write permission anywhere in the system, so there is nothing in it that could alter a policy.
- Seven screens, all read-only
- Days remaining read from the schedule
- Their own documents, downloadable
- They see only policies shared with them
On this page
The central rule
There is no write permission in a customer account
Not a hidden button, not a disabled form. The permission does not exist on the role.
A customer account can enter its own portal, read the policies assigned to it, and manage its own subscription. That is the complete list. It holds no upload, no edit, no assign, no delete and no export permission anywhere in the system, and every page and every request re-checks that on the server rather than relying on what the interface offered.
This is why the portal is safe to hand out widely. The usual worry about giving customers access — that one of them will change something, or see something that is not theirs — is answered structurally: a policyholder can only ever see policies assigned to them, never another customer's, and there is no action available that could modify a record.
The cost of that design is real and worth stating: a customer who spots a wrong detail cannot fix it. They have to contact you, and the portal says so on the screen where they found it.
- Read their own policies, download their own documents, manage their own subscription
- No upload, edit, assign, delete or export — the permissions are absent, not hidden
- A customer never sees another customer's records
What it does not do
A policyholder cannot renew, pay a premium, raise a claim, endorse a policy or correct a detail. Everything that changes a policy is still a conversation with their agent.
What it looks like
Three of the seven screens
Drawn with an invented policyholder. The other four are a dashboard, their subscription, their profile, and a help page.
My Policies
Everything their agent has shared, newest cover first, stacked by year with each year's document.
Renewals & Alerts
How long each cover has left, read from the policy schedule, with what needs attention first.
On a phone
Where most policyholders will actually open it, which is the screen the portal has to work on.
How a customer gets in
From your record to their login
Four steps, and the mobile number does most of the work.
- 1
You hold their mobile number
The number on the customer record is the key to everything that follows. It is also what an uploaded policy is matched against to find its customer, so a current number serves both purposes. - 2
You share the policies
A policy becomes visible to a policyholder when it is shared with them. Until then it is visible only to your agency — which is why "not yet shared" is one of the three alert counts in the agent portal. - 3
They register, or you create the login
A policyholder can register on the customer portal using the mobile number their agent already holds on record, which is how the login finds the right book of policies. An agent can also create the account. - 4
They sign in and see their own cover
A dashboard of what they hold, the policies by year with documents, how long each has left, and a help page telling them who to contact — which is you.
All seven destinations
Everything in a policyholder's sidebar
Named as the portal names them. There are no others, and none of them can change a policy.
Dashboard
An overview of their cover: what they hold, what is in force, and what needs attention.
My Policies
Everything shared with them, filterable by in force, expiring within thirty days, expired, or no expiry recorded.
Renewals & Alerts
Days remaining on each cover, taken from the expiry date on the policy document itself.
Documents
Their policy PDFs, downloadable — the screen that stops them ringing you for a copy.
My Subscription
Their own plan and payments. A customer plan is separate from an agent's and cannot be used to buy upload credits.
Profile and Help & Support
Their details and password, and a page of answers that ends by telling them to contact their agent.
The case for inviting customers
What a portal actually changes for an agent
The obvious gain is the one everybody names: fewer calls asking for a copy of a policy. That is real, and for a solo agent it is hours.
The less obvious gain is better. A customer who can see that forty-five days remain on their car policy is a customer who contacts you about renewing instead of being contacted. Renewal chasing is a conversation you have to start because the other person does not know the clock is running; a portal moves some of those conversations to the other end.
The third gain is the quietest. Once a customer has seen their own records laid out by year, with the documents, the gaps become visible to them too — the year nobody has a document for, the policy they thought they still had. That is a conversation worth having, and it is not one a spreadsheet of your own ever starts.
And the case against
A portal is a surface. Giving four hundred people logins means four hundred accounts that can be forgotten, shared or left signed in on a family laptop, and there is no multi-factor authentication on accounts yet.
It also sets an expectation. A customer who can see their records will notice when they are wrong or incomplete, and the only person who can fix either is you. A portal makes your record-keeping visible, which is an argument for it and a reason to get the records right first.
Before you promise your customers anything
Four things to know first
The first one is material and is not the kind of thing a page like this usually volunteers.
Document downloads depend on an active customer subscription
If a policyholder's own subscription is not active, their policy records all remain visible and nothing is deleted, but the documents cannot be opened until it is renewed. The portal says so plainly on the screen. No customer prices are published on this website, so confirm the current terms before you invite anyone.
They see only what you shared
A policy you have not shared is invisible to the policyholder it belongs to. If a customer says a policy is missing, the likely answer is that it was never shared rather than never uploaded.
No notifications leave the platform
The portal shows a policyholder how long their cover has left. It does not email, text or message them about it — there is no outbound messaging anywhere in the product.
No multi-factor authentication yet
Accounts are protected by a password over HTTPS. There is no second factor on any account type, no security certification and no penetration test. That is stated here rather than implied away.
Frequently asked questions
Questions this page should answer
Keep reading
Where to go next
The pages that cover the next part of this, with what each one adds.
Share a policy with one customer and look at their view.
It is the fastest way to decide whether to offer it to the rest of your book.