All articlesDocument collection

Document Upload Portal: Accept Client Files Without Signups

Three ways to accept client files without email: cloud storage, form builders, or purpose-built SaaS—with the real tradeoffs and maintenance cost.

ATArthur TeboulFounder, DokuTrak
Updated 8 min read
On this page

You're asking clients for documents. One sends a screenshot instead of the file you need; another sends only half the checklist. Moving the upload out of email can keep files together, but you still need a way to track what is missing and decide whether each document is usable.

A document upload portal is a web page or link where clients submit files. Here are three ways to set one up, with the account requirements, maintenance work, and limits to check before you choose.

TL;DR: Use a cloud-storage file request when you mainly need files delivered to a folder. Use a website form when you want to control the page and can maintain its security. Choose a document-collection tool when you also need checklists and automatic reminders. DokuTrak handles follow-ups and no-account uploads; you review and approve every file. Its plans include 1, 5, or 25 seats, depending on the tier.


What Are Your Real Setup Options?

Start with the part of the job you need to solve:

  • Receiving files: a file-request link may be enough.
  • Collecting answers alongside files: an upload form lets you design the questions and page.
  • Following up on missing documents: compare dedicated collection tools for reminders and per-document status.

An upload link does not, by itself, confirm that a file is correct. Before sending it to a client, try the workflow with a sample file, check who can access the result, and decide how you will follow up if something is missing. The free document checker shows what a first-pass check reads on a sample pay stub, bank statement or W-2.


Route 1: Cloud Storage File Requests

Dropbox File Requests

Dropbox file requests accept uploads from people without Dropbox accounts. The feature is available on all plans, including Basic, and files use the recipient account's storage.

  • Basic, Plus, and Family accept files up to 2 GB each.
  • Professional, Essentials, Business, Business Plus, Standard, Advanced, and Enterprise accept up to 250 GB each.
  • The destination folder is private by default; review its sharing settings if you change that.

To start, open File requests, create a request, choose the destination folder, and share the link. Check that your account has enough storage for the files you expect.

A folder collects the uploads. You still need to check the requested document list against what arrived and decide what to ask for next.

OneDrive / SharePoint Request Files

Microsoft's Request files feature lets people upload to a chosen folder without a OneDrive account. Uploaders cannot browse, edit, delete, or download the folder's contents.

Your administrator must enable the feature. It is not available in OneDrive for home; check your organization's eligibility and sharing settings before promising it to clients (see document sharing services compared).

Select a folder, choose Request files, describe what you need, and send the generated link. A person who is not signed in supplies a name, but Microsoft says that name is not verified. Do not treat it as proof of identity.

Google Drive and Google Forms: Check the Access Flow

Google Forms requires a Google Account sign-in for file-upload questions.

Google Workspace also supports visitor sharing. Invited visitors verify with an emailed PIN and can upload into shared-drive folders when given appropriate access. They cannot upload to My Drive as visitors. This is a shared-folder workflow, not an anonymous upload-only link: check the permissions and what else the visitor can see.


Route 2: Form Builders and WordPress Plugins

An upload form can live on your website and collect answers alongside files. Budget for the plugin license, hosting, maintenance, and any extra access controls. Check the current plan and renewal price rather than assuming every upload form has the same annual cost.

WPForms

The WPForms file-upload field lets you set allowed file extensions, maximum size, and upload options. Server limits still apply.

Its file-access settings can restrict downloads to selected WordPress users or protect them with a password. Enable and test those restrictions for confidential uploads; adding a file field to a form is not the same as configuring who may read its files. Check the current plans for the features you need.

Gravity Forms

Gravity Forms documents an important default: its download links are difficult to guess, but anyone with the correct URL can access the file without extra authentication. Restricting access requires additional configuration.

Before using a website form for client documents, test both upload and download access from a signed-out browser. Assign someone to maintain the plugin, hosting, backups, and file-retention settings.


Route 3: Purpose-Built Document Collection Platforms

Dedicated tools can combine a document checklist, upload links, status tracking, and reminders. Check the specific plan and recipient workflow; a product category does not guarantee any of those features.

Use a sample request to compare:

  • Client access: Does the client need an account, an emailed code, or just the link?
  • Missing documents: Can you see which requested items have not arrived?
  • Reminders: What triggers them, and when do they stop?
  • File checks: Does the tool restrict formats, flag potential problems, or merely store files? Who makes the final decision?
  • Limits and price: How many seats, files, and checks are included? Is the advertised price monthly or an annual commitment?

DokuTrak sends document requests, tracks outstanding files, and runs automatic reminders. Clients upload without creating an account. Optional AI first-pass checks can flag potential issues when enabled; they do not approve documents (see the ShareFile alternative). You review every file.

DokuTrak Pricing and Limits

The monthly plans, checked on September 17, 2026, include:

PlanMonthly price (USD)Included seats
Solo$791
Team$1995
Agency$44925

The price is not independent of team size. Choose a tier with enough seats, and check its storage and AI usage allowances. Files are limited to 25 MB each; supported formats are PDF, JPEG, PNG, HEIC, HEIF, and DOCX. If your work requires large video files or spreadsheets in XLSX format, check those requirements before choosing DokuTrak.


When to Pick Each Route

Pick cloud-storage file requests if you already use an eligible service, mainly need a place to receive files, and can manage the checklist and follow-ups yourself.

Pick a website form if the intake needs custom questions or presentation and you have someone responsible for configuring and maintaining file access.

Pick a collection tool if the recurring work is checking what is missing and sending reminders. Test the workflow with a representative document set and compare the features included in your plan.

There is no universal client-count threshold at which you must switch. The useful question is which task you need help with: receiving files, following up, or reviewing the documents.


The Security Baseline

OWASP's File Upload Cheat Sheet recommends using multiple safeguards: allow only required file types, validate uploads, set size limits, scan for malware where available, and protect stored files from unauthorized access. An extension filter alone is not enough.

For any provider, check its published security documentation for encryption in transit and at rest, access permissions, retention, and subprocessors. Do not assume every SaaS uses the same encryption protocol or automatically meets your compliance obligations. End-to-end encryption is a separate property: establish who can decrypt the files and how that affects processing features.

For DokuTrak's stated controls, read the security page. For a broader evaluation checklist, see the secure document upload guide.


Where to Go From Here

Choose the route that fits the work you need to remove. Cloud storage gives you a destination for files. A website form gives you control over the intake page. A collection tool can take scheduled follow-ups off your plate while you review the documents.

Get started with DokuTrak · See plans and trial conditions

For the rest of the workflow, browse the document collection hub, the guide to collecting documents from clients, or What Is Document Collection Software?.


Sources

Official documentation checked September 17, 2026:

Frequently asked questions

How do I set up a document upload portal for clients?

Choose between a cloud-storage file request, a form on your website, or a document-collection tool. Dropbox and eligible Microsoft business accounts support upload links without an uploader account. Forms give you control over the page but need security configuration. Collection tools can add checklists and reminders; verify the features and limits of the plan you choose.

Can clients upload files to a portal without creating an account?

Yes. Dropbox file requests, Microsoft business file requests, and DokuTrak support uploads without creating a client account. Google Forms file uploads require a Google sign-in. Google Workspace has a separate visitor-sharing option for shared-drive folders, using an emailed PIN. Test the actual upload flow before choosing a tool.

Should we use Dropbox File Requests instead of building a portal?

Use a file request if receiving files in a folder is enough and you can track missing documents yourself. Dropbox Basic, Plus, and Family allow file requests up to 2 GB per file; several higher plans support 250 GB. If the recurring work is chasing individual missing documents, compare tools with checklists and automatic reminders.

How much does a document upload portal cost?

A file-request feature may already be included in your cloud-storage plan. Website forms add license, hosting, and maintenance costs. DokuTrak monthly plans are Solo at $79 for 1 seat, Team at $199 for 5 seats, and Agency at $449 for 25 seats. Compare included seats, storage, usage limits, and billing period rather than the headline price alone.

What file types should we allow clients to upload?

Allow only the formats your workflow needs and your tool supports, and tell clients the size limit before they upload. DokuTrak supports PDF, JPEG, PNG, HEIC, HEIF, and DOCX files up to 25 MB each. Restricting extensions is only one safeguard; access controls and malware checks also matter.

Do I need end-to-end encryption for client uploads?

The right setup depends on the documents and who must be able to read them. Encryption in transit and at rest is different from end-to-end encryption. Check who holds the keys, who can access files, and which processing the provider performs. A certification alone does not establish that a workflow meets your requirements.