Tax documents, ID copies, signed contracts, bank statements - the files people routinely push through email are exactly the ones that should never live there. An emailed passport scan exists in the sender's outbox, your inbox, both providers' backups, and every synced device, indefinitely, with no access control and no delete button that actually deletes.
A secure upload link is the alternative: a protected page that accepts the files, holds them briefly, and then ceases to exist.
What "secure" concretely means here
Four properties do the work, and you should expect all four from any tool you pick:
- Password on the page. Whoever stumbles on the URL sees a password prompt, not your client's document list.
- Expiration by default. The page stops accepting files at a set date and the files are deleted a few days after. Temporary is not a limitation here - it is the security control. Nothing lingers, nothing needs remembering to clean up, access cannot outlive the job.
- HTTPS in transit. Table stakes; everything serious has it.
- No uploader accounts. The sender never creates credentials, so there is nothing of theirs to leak from the tool later.
Send the link and the password through different channels: link by email, password by text or phone. If either channel is compromised, the attacker holds half a key. This single habit does more for real-world safety than any feature list.
Choosing the expiration
Match it to the job, and keep it short: documents due Friday - expire Saturday. Default is 7 days if you set nothing, and a new page can run at most 10 days ahead - deliberately. For a longer window (a month-long collection round), extend the page as the date approaches rather than opening a long exposure up front; each extension adds 10 days. The shorter the window, the smaller the exposure, and you can always create a fresh link if something arrives late.
Download the ZIP as soon as the last file arrives and move it into your own encrypted storage, then let the page expire. An upload link is a collection point, not an archive - the less time files spend on any intermediate system, including ours, the better.
Why email specifically fails for sensitive files
- No expiration: attachments persist until every copy is manually deleted, which is never.
- No access control: one forward and the file is somewhere you have never heard of.
- Storage you do not control: mail servers keep data at rest on their terms, not yours.
- No overview: you cannot see what arrived where without excavating threads.
None of this is fixable with discipline, because the sender's habits are outside your control. Changing the channel is the fix.
Who this is for - and one honest exclusion
Accountants collecting tax packets, lawyers collecting case documents, HR collecting ID copies, financial advisors collecting statements, landlords collecting application documents - anywhere a professional repeatedly requests sensitive paperwork from people outside their systems.
Regulated healthcare data is the exception: HIPAA requires a signed business associate agreement with every tool touching patient data, and a general-purpose upload service does not offer one. For patient records, use a tool that signs a BAA. For everything below that bar, the checklist on this page applies.
GDPR posture
If your uploaders are EU residents, the same properties map cleanly onto GDPR duties: checklists collect only what you asked for (data minimization), expiration enforces storage limitation, deletion after expiry covers erasure of the collection copy. This helps your compliance story; it does not replace it - your retention rules apply to the ZIP you downloaded, and that part is on you and your DPO.
Setup, concretely
Title the page for the job ("Tax Documents 2026 - Ivanov"), set password and expiration, restrict file types to documents, add a checklist of exactly what you need ("Passport scan", "Bank statement - last 3 months", "Signed engagement letter"). Share the link one way, the password another. On getfiles.app all of the above is on the create form, free, and the uploader never makes an account.