OverviewUpdated Sept 2026

External links: share, collect, and sign

Counterparties never need a ComplyWise account to work with you. Instead, you send them a secure link, and the link itself is the access. This article explains the three kinds of external link and the safeguards behind all of them.

  • Share links let a recipient read your KYB package: a permissioned, read-only view of the documents you chose to share. Use them instead of emailing ZIP files to a bank or PSP. A share link can be open, require the recipient's email ID, or require an emailed one-time code. See Share your KYB package.
  • Collection links let a recipient upload documents to you: a vendor or counterparty opens the link and drops files straight into the request, no account needed. See Request documents from a counterparty.
  • Signing links let a recipient sign: each party to an e-sign envelope receives their own private link that opens the signing ceremony, records consent, and captures their signature.
  • Possession is the access. Anyone holding the link can use it, so treat links like keys: send them over a channel you trust, and revoke them when they are no longer needed.
  • Everything is logged. Opens, uploads, and signing events are recorded with time and connection details, so you always know when and how a link was used. See Audit and accountability.
  • Rate limits protect you. Each link carries daily usage caps, so a leaked or abused link cannot be hammered indefinitely.
  • They carry your branding. The pages a recipient sees show your workspace's logo, accent color, and support contact once you set them up in Workspace Settings. See Brand your external surfaces.

Revoking and reissuing

  • Share and collection links can be revoked at any time; the link dies immediately for everyone holding it. Emailing a share link again issues a fresh link, and the earlier one stops working.
  • Signing links can be reissued: copying a fresh link for a recipient invalidates the old one, and a signer who ends up holding a dead link can request a replacement, which is delivered only to the email address you recorded for them.
  • A dead link always shows an honest message rather than leaking anything about your workspace or the deal.