The attachment sent to the wrong Sarah
A consultant finishes a grievance outcome letter and an investigation report, and emails both to the client's HR contact. Outlook autocompletes the address. It is a different Sarah, at a different client. The consultant notices a minute later and spends the afternoon on recall requests, apologies and a conversation with a director about whether this needs reporting.
Even when the address is right, the report now sits in the client contact's inbox, gets forwarded to a line manager, then to another manager for an opinion, and eventually a copy exists in places nobody can list.
Why email remains the default
- It is fast, and every client can use it without training.
- Existing file sharing tools are organised around your staff, not around clients and cases.
- Setting up a shared folder per client feels like a job for another day.
- Clients send documents back by email too, so the habit is two-way.
- Nobody owns the question of what should happen to documents after a case closes.
The problem is not that people are careless. It is that the safer route is slower than the risky one.
The cost of living in inboxes
Documents in HR work are among the most sensitive a business holds: health information, allegations, witness accounts, pay details. A misdirected email may need to be assessed under your data protection obligations, and your own advisers will decide what follows. Even without an incident, you cannot answer basic questions: who at the client has seen this report, and does anyone still have a copy after the case closed?
| Question | Client document area | |
|---|---|---|
| Who can see this report? | Anyone it was forwarded to | Named people only |
| Has the client downloaded it? | Unknown | Recorded with time and person |
| Can we withdraw access? | No | Yes, at any time |
| Where did the client's upload go? | Someone's inbox | Filed against the right case |
How we build the client document area
- Each client has a secure area, with folders created automatically from your case and project records, so a new grievance case gets its own space.
- Documents are shared by consultants from Outlook, SharePoint or your case record with named client contacts, not with an address typed from memory.
- Access can be limited to a case, so a line manager involved in one matter sees that matter only.
- Sensitive items can be view-only, watermarked with the viewer's name, and set to expire.
- Every view and download is recorded, and consultants see when a document has been opened.
- Clients upload documents into the relevant case through the same area, and your consultant is notified.
- When a case closes, access ends and documents follow the retention period you set, which your own advisers decide.
- Sign-in uses email codes or the client's Microsoft account, so there is no new password to forget.
We usually build this on top of Microsoft 365 or SharePoint where you already use it, so documents stay in your own tenancy rather than in another supplier's system.
What consultants and clients notice
It also changes the tone of the relationship with clients. A client HR lead who receives a link to a tidy case area, rather than a chain of forwarded attachments, sees a consultancy that takes their employees' information seriously. That matters in a sector where trust is most of what you sell.
Sharing a document is a couple of clicks from where the consultant already is, so the safer route is also the quicker one. Clients find everything for a case in one place instead of searching their inbox. Directors can answer who has access to what. And closing a case genuinely closes it, rather than leaving copies scattered.
Signs you need this
- Investigation reports and medical documents go out as email attachments.
- You have had, or nearly had, a misdirected email.
- Clients forward your documents to people you have never heard of.
- Client uploads arrive in whichever inbox they choose.
- Nobody could say who still holds copies of a closed case file.