Not one portal · three
Who's looking decides what exists
The account holder, the tenant in one of their flats, and the firm you outsourced Tuesday to are three different readers. They get three different portals — and the middle one deliberately shows less.
For the account holder
Everything you've ever issued them, across every property on the account, with your logo on it.
Sees
- Certificates, all properties
- Upcoming renewals and expiry dates
- Quotes, with a question thread
- Invoices, instalment plans and card payment
- Appointments, past and booked
- Any credit on their account
For the tenant
Scoped to one property. A landlord can send the tenant of Flat 3 that flat's gas certificate without handing over the rest of the business.
Sees
- This property's certificates
- This property's visits
Never sees
- The landlord's other properties
- Quotes and invoices
- Account credit and payment history
- The landlord's personal details
That's the difference between “here is your certificate” and “here is my whole business”.
For a partner firm
A firm you outsource to works the job through their own link. It never touches your customer records.
- 1Gets the job offer
- 2Accepts or declines it
- 3Marks itself on site
- 4Uploads progress and evidence photos
- 5Submits completion
- 6Sees the payout
Eleven things they can do
Most customer portals are somewhere to look. This one is somewhere to act.
Each of these is a decision the customer makes without emailing you or waiting for you to pick up.
Accept or reject a quote
On the spot, from the document itself.
Ask a question on it
A two-way thread attached to that quote. You reply from inside the quote in OnPoint.
Sign a certificate
On their own phone or laptop, wherever they are.
Pay an invoice by card
Without you chasing a bank transfer.
Follow an instalment plan
If the invoice is on one — what's paid, what's next, when.
Book an appointment
When you've enabled booking on your account.
Reschedule or cancel a visit
Themselves, rather than by voicemail at 7am.
Watch the ETA on the day
Live engineer location and arrival time.
Update the tenant's details
Name and phone number on a property. You're notified — and their edit still saves even if that notification fails.
Download a PDF
Any certificate, quote or invoice, for their own records.
See every property on the account
One link for a landlord with fourteen flats.
And one for your side
OnPoint records when a customer opens a quote — so “did they get it?” has an answer.
Their side of the link
Click through what they see
Five tabs, one account, no login screen in front of any of it. This is the customer portal — the tenant's version of the same screen has only the first and the last.
Every certificate you've issued them
Rendered as the real document · all 39 UK typesSuperseded versions stay on the record, so the history of a property reads correctly years later. See the certificate range.
The question thread
The email chain that never happens
A question asked on a quote stays attached to that quote. You answer from inside it. Nobody ever types “which quote is this about?”
Does the £2,480 include taking the old cylinder away, or is that extra?
Removal and disposal are included. I've added a line so it's on the paperwork rather than just in this thread.
Perfect — accepting now.
Quote accepted · 19:06
The day of the job
Tue 8 Sep · 14 Aspen Way“Sometime Tuesday” is what your competitors' customers get.
The arrival window narrows to a live ETA as the engineer travels, and the customer watches it from the same link they already have. No tracking app, no “he's on his way” text you have to remember to send.
08:46
Dan · 4.2 miles · 15 min
The same link they used yesterday to read a certificate. Nothing new to open.
How the link is treated
A link is a credential. We designed it like one.
Whoever holds a portal link can read that customer's documents, with no second factor in front of it. Everything below is a design decision you could verify by using the product — not a certification, a standard or a badge.
No account, by design
There is no password for the customer to forget, reuse across sites or have breached somewhere else, and no app to install. The link is the credential — which is precisely why the rest of this list exists.
Links age out, live ones don't break
A portal link lasts 24 months, and every time you share it the clock resets. A customer you're still working with keeps working access indefinitely; one you stopped dealing with three years ago ages out on its own, without you having to remember them.
A link sent to the wrong person can be withdrawn
Revoking deactivates every link that contact holds and immediately mints a replacement. The old tenant loses access; the current customer isn't locked out waiting for you to sort it out.
The address comes from the record, never the request
When you send a customer their link, the email address or mobile number is read from their contact record on the server. It cannot be redirected by whatever happens to be in the request.
The browser never receives the raw record
Every portal read is proxied server-side and stripped before it reaches the customer's browser. Internal notes, payment processor IDs, reminder and audit configuration, deletion metadata — none of it is sent at all.
This matters more than it sounds. Filtering in the browser would still have shipped the full row in the response, where anyone can read it in developer tools. OnPoint filters before it leaves the server.
The tenant's view is scoped to the property
Property-portal access reads through property-scoped functions, so a tenant link cannot reach the landlord's account even if someone goes looking for it.
You'll notice there are no certification marks on this page. We haven't got any, and inventing them would be the least trustworthy thing on it.
What's here instead is six decisions you can check: send a link, revoke it, open the network tab, look at what actually arrives.
If you'd rather walk through it with someone, book a demo and we'll do exactly that.
Straight answers
The eleven we get asked before anyone signs up.
01Does my customer need an account or a password?
No. They get one private link, and that link is the credential — there's nothing to register, no password to set and nothing for them to forget or reuse elsewhere.
02Do they need to install an app?
No. It opens in whatever browser they already have, on a phone, tablet or computer.
03What can they actually do in it?
Accept or reject a quote, ask a question on it in a two-way thread, sign a certificate on their own device, pay an invoice by card, follow an instalment plan, book an appointment where you've enabled booking, reschedule or cancel a booked visit, watch the engineer's live location and ETA on the day, update the tenant's name and phone number on a property, and download any certificate, quote or invoice as a PDF. They can also see every certificate you've issued, upcoming renewals with expiry dates, current document statuses and any credit on their account.
04Can a tenant see the landlord's other properties?
No. The property portal is scoped to one property: that property's visits and certificates, and nothing else. No other properties, no quotes or invoices, no account credit, no landlord's personal details. Access reads through property-scoped functions, so a tenant link cannot reach the wider account.
05Can I take a link back if it goes to the wrong person?
Yes. Revoking deactivates every link that contact holds and immediately issues a replacement, so the wrong recipient loses access while your actual customer keeps working access.
06How long does a link last?
24 months — and sharing it again resets that clock. Active customers never lose access; dormant ones expire on their own.
07Can customers pay from the portal?
Yes, by card. If the invoice is on an instalment plan they can follow that from the portal too — what's cleared, what's next and when it's due.
08Can they book or move an appointment?
Yes, when you've enabled booking on your account. They can also reschedule or cancel a visit that's already booked, and clash detection still applies — they can't book you into a conflict.
09Can they sign a certificate?
Yes, on their own device, from the certificate itself — no printing, scanning or posting anything back to you.
10Is it branded?
Yes — the customer portal carries your logo, so it reads as your account with them rather than a third party's software.
11What does it cost?
£19 for the first seat and £9 for each seat after. All three portals are on every plan — there is no higher tier to move up to. See pricing.
Send one customer a link and see what they do with it.
14 days free, no card. Issue a certificate, share the portal, then open the link on your own phone as if you were the customer — that's the whole evaluation.
Email us
support@onpointbusiness.co.ukCall us
+44 7884 697405On every plan
£19 + £9 a seat · no higher tier