If you've received a link asking you to upload personal documents, being cautious is the right instinct. Here's what docEvault is and how to check that the request you received is genuine.
What docEvault is
docEvault is a document-collection service used by professional firms — law firms, accountants, lenders and similar — to collect documents from their clients. The firm you're working with is the customer. docEvault is the tool they use to ask you for files.
How your documents are protected
Documents are end-to-end encrypted. The firm's own encryption key is generated in their browser and protected by a passphrase only they hold. docEvault's servers store your documents encrypted and cannot read their contents.
Uploads travel over an encrypted connection, and your portal link is unique to your request — it doesn't give access to anyone else's documents.
Why there's no password
Some people find the absence of a login suspicious, so it's worth explaining. The link itself is the credential. It was sent to the email address or phone number your firm has on file for you.
Two practical consequences:
- Don't forward the link to anyone you don't want seeing your documents.
- If you think someone else has your link, tell the firm and ask them to send a new request.
How to check the request is genuine
The most reliable check has nothing to do with the website: contact the firm directly, using contact details you already have — the phone number on their website, or an email thread you started. Don't use the contact details in the message you're unsure about.
Ask them whether they sent you a document request. It takes a minute and it's the answer to every version of this question.
Other things worth noticing:
- Were you expecting it? A request from a firm you're actively working with is very different from one out of nowhere.
- Does it name the firm and your matter? Genuine requests are specific.
- Is anyone rushing you? Real firms follow up; they don't threaten.
docEvault will never ask you for your password, your bank login, your card details, or a payment in order to upload documents. If a page asks for any of that, stop and contact your firm.
Who can see what you upload
The firm that sent you the request. Their staff members with access to your file can see your documents; other docEvault customers cannot, and docEvault itself cannot read them.
Still unsure
Don't upload. Call the firm on a number you trust and ask. Nobody at a legitimate firm will mind you checking.