Guest Policy

External recipients currently use confirmed-email PIN verification or an explicitly created anyone-with-link share. They do not receive normal member access or guest passkeys.

Overview

Use confirmed-email access where the share should be tied to a named email address. Use anyone-with-link only when that broader access model is appropriate. Set an expiry when access should be time-limited, and revoke or reissue the share when the recipient or scope changes.

Revocation prevents future access through that share. It cannot erase or recall a file already downloaded or copied.

Share-management records retain limited operational details, but a complete customer-facing access ledger or audit export is not implemented.