Send a safe link to a survivor
Advocates who are sending a secure link for intake, messages or a visit
Purpose and safe contact check
This guide is for advocates, case managers and supervisors who are sending a secure link for intake, messages, a visit, forms or status. You will be able to create a single-purpose link, set expiry and uses, send it safely and confirm the survivor can open it.
Your role needs links.view and links.edit permission. The link is single purpose only. It does not open other pages. The address, page title and notification carry no survivor detail.
Before you send, confirm the safe contact method on the case. Do not send a message, reminder or referral to an unsafe channel. Ask the survivor which phone, email or device is safe, and what times are safe. Default to no voicemail and no detail in text where the survivor asks for discreet use.
- Each link serves one purpose only and expires after a set time
- Only a hash of the token is stored, and staff can revoke the link at any time
- Device possession alone never opens confidential information, a PIN or access code is required each session
- Recovery is discreet and does not send a reset link to a shared email account by default, and repeated wrong attempts lock access
Numbered steps
Follow the steps in order.
Choose purpose and open the case
Open the case folder, select Secure links, select New link. Choose one purpose: intake, messages, visit, forms or status.
Set expiry and number of uses
Set expiry date and time, set uses left if needed, and set language if the survivor needs interpretation or translation. Review purpose, expiry and uses before sending.
Set access code and recovery
Set the survivor PIN or access code, set recovery method. Do not use a shared email as the only recovery path. Test that the PIN step appears before any private detail is shown.
Send and copy once
Send the link through the safe contact method with neutral wording only. Copy the link once when you create it. Do not place survivor detail in the link, in the page title or in the notification.
Confirm the survivor can open it
Open the link on a phone, check that the landing page explains what the link does and when it expires, check language choice and quick exit are visible, and confirm the survivor reached the PIN step.
Quick exit and discreet notification steps
These settings keep the link discreet on shared devices and in notifications.
Every survivor facing page has a quick exit button and Escape key exit with history-safe navigation. Choosing quick exit replaces the current page with a neutral page and clears on-screen text. The survivor can return with the same secure link and access code until the link expires.
Set notification choices with the survivor: channel, safe times, preview on or off, neutral wording preview, quiet hours and shared device flag. The survivor can pause or stop notifications at any time without closing the case. A notice says only that a message is waiting. It carries no name, program, service or topic.
- Quick exit is visible on the link landing page, PIN step and every later page
- Shared device use clears the view on sign-out and asks for the PIN again next time
- Link list shows status, last used time and generic activity with no survivor detail in the label
Next guides
Learn how to leave a page safely and how to join a visit by link.