Questions about client portals and deal rooms

A client portal is a private web page for a firm's clients. They sign in to see where their work stands, trade documents, answer the firm's requests, send messages and collect finished work. Accountants, bookkeepers, law practices and consultants use one when clients send and receive documents over months and an email thread can no longer say which file is current. The guide to setting up a client portal for a small firm covers the five jobs a portal does and the three ways to get one.

Email holds up for a firm with a few clients and nothing sensitive. It strains once clients keep asking where their work stands, or nobody can tell which copy of a file is current. Tax professionals also carry a written duty: federal law requires them to keep a written information security plan, as the Internal Revenue Service reminded them in August 2026. The setup guide links that release.

Five parts cover the work between a firm and a client: status, documents in both directions, requests for what the firm still needs, messages, and deliverables. The setup guide has a table of what each part looks like while it still runs through email. A label on each folder says who can see it, and each person on the client's side has a separate sign-in. The client portal access plan sets a level for each of the five parts, person by person.

A first-year count of fees and the firm's own hours settles it. A bought portal leaves sign-in and security updates to the vendor. Assembling one from a shared drive and a request form costs little in fees and more in upkeep hours, and building leaves every bug and security update with the firm for as long as the portal runs. Made up for the setup guide: a four-person firm's first year costs $5,000 to buy, $8,280 to assemble and $27,920 to build. The setup guide has the full table.

A shared drive works as a small portal when each client has one folder, each person is invited by name, and no file goes out through an open link that works without signing in. A drive tracks neither status nor requests. Each client folder therefore also holds a request list and a status note. The access plan sets a quarterly read of every folder's sharing, and who sees what in a client portal covers Google Drive's own expiry and link settings.

In the setup guide, a client's first visit is short: an invitation from the firm naming one item inside, and one small task, such as approving a statement. After that, a client who emails a document gets a reply with a portal link in place of an attachment. That guide also runs one organized client through a full cycle first, and the trial client's emails show which part of the portal is missing.

The two names overlap. Both describe a private, organized set of documents a seller shares with buyers during a sale. Under either name the room has the same four parts: an index of every file, a naming rule, access in stages and a log of what each buyer could see. The deal room guide covers each part.

A seller shares documents through a private room that opens in stages, the first only after a buyer signs the confidentiality agreement from the seller's broker or attorney. Each buyer's people are invited by name, each buyer's access stays separate from every other buyer's, and employee Social Security numbers stay out of the early stages. A dated log records what each buyer could see and when. The deal room guide covers the index and the stage gates.

Each person gets the least access their task needs, the principle the National Institute of Standards and Technology calls least privilege. In a portal, every client sits in a separate space. Staff see only the clients they work on, each person on the client's side has a separate sign-in, and each outside guest, such as an attorney or a lender, has an end date. Who sees what in a client portal takes each of those choices in turn, with the standard's own definition.

AI tools can generate working screens and small apps from a written description, and they help with drafts and internal tools. A portal that holds client files depends on parts a demo skips: which person can open which client, how people sign in, where the files are stored and who maintains it after launch. Before any client signs in to a generated portal, someone who understands access control signs in with a test account at each level, the same test the access plan runs.

Heirloom Acquisitions LLC publishes Portalbender and sells services. The guides and the worksheet are free to read, and nothing on the site asks for an account or an email address. The booking button opens a 30-minute call with the company. The about page says what the company does and how each page is drafted and checked.