Show the status in client language
Clients should not have to interpret internal workflow labels. Explain the current status, the last meaningful update, the next milestone, and any action required from the client. Avoid exposing internal notes or draft strategy.
Separate shared and internal records
A portal should use explicit sharing rules. Internal notes, staff-only activity, draft invoices, restricted documents, and AI context must remain inside the firm. Client access should derive from an authenticated portal identity rather than a client identifier in a URL.
Make communication matter-specific
Secure messages are more useful when attached to the relevant file. Preserve participants, attachments, delivery state, read state, and history. Archived conversations should remain available without overwhelming the active inbox.
Make payment state trustworthy
An issued invoice should show amount, currency, due date, payment action, and durable payment status. Payment requests need idempotency and reconciliation so a refresh, retry, or duplicate provider event does not create duplicate transactions.