Evidence workflow · 5 min

Share board-pack exports with advisers

How adviser share links work, including the 14-day adviser handoff window, revocation, recipient view, and failed-token lockout.

Help baseline: 2026-06-15

adviser share14-day adviserrevocationboard_pack_share.viewedRetry-After

Issue a bounded adviser link

A board-pack export can be shared through a token-scoped adviser link after the export exists. The default expiry is 14 days, and the service rejects any expiry beyond the 14-day adviser handoff window.

Share creation requires board_pack:export permission.
The share page is noindex, uses no-referrer metadata, and responses use Cache-Control: no-store.
The recipient sees export status, recipient name, generated date, blocker count, SHA-256 integrity details, artifact availability, expiry, and blocker reasons.

Revoke or refresh unavailable links

Revoked, expired, invalid, or missing share links are unavailable to the recipient. Ask the workspace owner to revoke the old link or create a fresh adviser link rather than forwarding another recipient's URL.

Share audit events include board_pack_share.created, board_pack_share.email_queued, board_pack_share.viewed, board_pack_share.downloaded, and board_pack_share.revoked.
Failed adviser-share token attempts are rate-limited by token and source.
The default public-token lockout is 5 failed attempts and 15 minutes; 429 responses include a Retry-After value.

Boundary

DefenceFile help explains workflow operation. It does not provide legal advice, create privilege, certify scope, certify reasonable procedures, or guarantee that a statutory defence will succeed.

Request pilot review