If you've received a link asking you to upload personal documents, being cautious is the right instinct. Here's what docEvault is and how to check that the request you received is genuine.
What docEvault is
docEvault is a document-collection service used by professional firms — law firms, accountants, lenders and similar — to collect documents from their clients. The firm you're working with is the customer. docEvault is the tool they use to ask you for files.
How your documents are protected
Every document is encrypted in transit and in storage. Firms can also turn on end-to-end encryption, so that only the firm can open its documents; not even docEvault can read them.
Uploads travel over an encrypted connection, and your portal link is unique to your request — it doesn't give access to anyone else's documents.
For the technical detail, see how docEvault protects your data.
Why there's no password
Some people find the absence of a login suspicious, so it's worth explaining. The link itself is the credential. It was sent to the email address or phone number your firm has on file for you.
A genuine docEvault link always starts with https://www.docevault.com/. If the address in your browser shows any other site, don't upload.
Two practical consequences:
- Don't forward the link to anyone you don't want seeing your documents.
- If you think someone else has your link, tell the firm and ask them to send a new request.
How to check the request is genuine
The most reliable check has nothing to do with the website: contact the firm directly, using contact details you already have — the phone number on their website, or an email thread you started. Don't use the contact details in the message you're unsure about.
Ask them whether they sent you a document request. It takes a minute and it's the answer to every version of this question.
Other things worth noticing:
- Were you expecting it? A request from a firm you're actively working with is very different from one out of nowhere.
- Does it name the firm and your matter? Genuine requests are specific.
- Is anyone rushing you? Real firms follow up; they don't threaten.
docEvault will never ask you for your password, your bank login, your card details, or a payment in order to upload documents. If a page asks for any of that, stop and contact your firm.
Who can see what you upload
The firm that sent you the request. Their staff members with access to your file can see your documents; other docEvault customers cannot. If the firm has turned on end-to-end encryption, docEvault itself cannot read them either.
Still unsure
Don't upload. Call the firm on a number you trust and ask. Nobody at a legitimate firm will mind you checking.