Released features and gated workflows, side by side.

Generate an engagement-scoped magic link so a client can view the requested checklist without creating an account.

• Magic-link access, no password required
• Per-engagement checklist with clear requested items
• Progress indicator showing complete vs missing
• File delivery remains certification-pending

Apply the right checklist to every engagement. Start with built-in templates for monthly bookkeeping, year-end close, and tax prep — then customize as your firm grows.

• Built-in templates for the three most common engagement types
• Custom templates in the current workspace
• Per-item metadata: required, document type, description
• Reusable per-workspace checklist definitions

The engagement UI and reminder history model exist, but provider-authenticated email delivery remains certification-pending.

• Delivery action is disabled while the gate is closed
• Provider authentication must pass before release
• Duplicate and failure behavior requires lifecycle evidence
• Existing reminder records remain visible in engagement history

Generate an on-demand summary of the checklist and activity state currently recorded in DocScoop.

• One-click prep summary per engagement
• Recorded missing / required / complete counts at a glance
• Last recorded client activity timestamp
• Snapshot of existing reminder records

Review the client and engagement state recorded in one workspace, with failed reads separated from genuine empty or zero states.

• Counters: active clients, awaiting client, overdue, ready for prep
• Recent activity feed across the workspace
• Status filters on clients and engagements
• Multi-seat invitation and role lifecycle remains pending

The design uses private object storage, time-limited URLs, staff authentication, and engagement-scoped portal access. The upload lifecycle is not released yet.

• Private object-storage design with time-limited presigned URLs
• JWT-authenticated staff API
• High-entropy portal tokens, scoped per engagement
• Organization and record ownership checks on authenticated requests