The portal stays simple. Your other tools can still reach it.

Droplana is a client document portal: each client gets one private portal where you send documents and they upload files back, with no account to create. Client portal integrations sit behind that exchange, for businesses that want them. An AI assistant or automation tool can connect to your account through Droplana's MCP server, outgoing webhooks tell your own systems when something happens, and you and your clients can sign in with Google or Microsoft. None of it is needed to use the portal, your clients' portal looks the same either way, and all of it is included on every plan.

What connects to your client portal

What an AI assistant can do in your account

MCP is an open standard that AI assistants and automation tools use to call other services. Once connected, the assistant can answer questions about your clients' documents and act on the answer, within the permissions you gave it.

Take an accounting firm at month-end. You ask your assistant which clients still owe their March bank statements. It checks each client's checklist for missing items, lists the four clients who have not sent them, and, if you allowed it to email clients, sends those four a reminder that names what is still open. Later you ask what the Novak family commented on their draft return, and it reads the comments on that file.

The assistant has nine tools:

• list clients
• search documents
• list checklists
• find missing checklist items
• read comments on a document
• upload a document to a client
• add a comment
• update a checklist item, for example its due date
• remind clients who still have open checklist items

Everything happens in the same client portals your clients already use. A document the assistant uploads appears in that client's files, and a comment it adds appears on the file like any other.

What the assistant sees, and what it does not

An assistant works on metadata: filenames, client names, dates, checklist state and comments. No tool returns a document's contents, so the payslip or contract itself never passes through the connection. Filenames, client names and comment text do reach the assistant, and from there the AI service you chose. Check that service's data terms before you connect it, as you would for any tool you give client information to.

When you want to open a document the assistant found, the link depends on your portal security level. On Strict, the default, a search result carries no link. On Controlled or Relaxed, it carries a link that works for one hour and opens only for someone signed in to your business account.

Permissions you choose

You decide what each connection may do. The permissions are: read documents, checklists, comments and clients; write documents, checklists and comments; and, separately, email your clients. A token without write permissions can read, but cannot upload, comment or change a due date. Whatever you choose, no token reaches billing, team management, the business address or account deletion.

Each connection belongs to the person who made it, owner or team member. Tokens are listed on Account, API tokens, and applications you approved by signing in are listed on Connected applications. Revoking either stops it at once.

Webhooks: tell your systems when a client sends something

The account owner adds up to 5 HTTPS endpoints on Account, Webhooks. Droplana then sends an event when a document is uploaded, a comment is added, a checklist item is completed, a checklist is completed, a document is signed or a client is created. Each request is signed with HMAC-SHA256 using a secret shown once, when you add the endpoint, so your system can check that the request came from Droplana.

The events carry ids and metadata, such as a filename and size, a client's name, a checklist item's name and whether the business or the client acted. They never carry file contents, comment text or a signer's name or email. If your endpoint does not answer, Droplana retries for about 20 hours, then turns the endpoint off and emails the owner. You can turn it back on, and the events that were waiting go out.

Sign in with Google or Microsoft

Businesses sign in with an emailed link or with a Google or Microsoft account, personal, work or school. Clients can sign in with Google, matched against an email address you already added for them, or with a Microsoft account they connected once by confirming that address with an emailed code. Sign-in never creates a client account, and the method never changes what a person can open: the same address reaches the same business and client portals whichever way it signs in.

What does not connect

You connect tools yourself, with the server address, rather than installing Droplana from an app store or directory. There is no native connector to a named product, which means documents do not sync into your accounting, practice management or storage software by themselves. The app's internal API is not documented for public use, and there is no workflow builder with rules and branches. What you can connect is any tool that speaks MCP or can receive a webhook, and you set that up yourself in a few minutes.

Included on every plan

Integration questions

Can a connected AI assistant read my clients' documents?

No tool returns a document's contents. The assistant works on metadata: filenames, client names, dates, checklist state and comments. Filenames, client names and comment text do reach the assistant, so choose an assistant whose data terms suit that.

Which plans include the MCP server and webhooks?

Every plan, Free included. Free has up to 3 clients, 2 GB of storage and files up to 100 MB, kept for up to 180 days after upload. There is no add-on to buy for integrations.

Can I connect Droplana to ChatGPT, Claude, Zapier or Make?

Yes, if the tool speaks MCP or can receive a webhook. You add the MCP server address yourself and either sign in or use an access token. There is no install button to click in an app store.

Can a connected tool change billing or delete my account?

No. Whatever permissions you give it, no token reaches billing, team management, the business address or account deletion. You can revoke a token or disconnect an application at any time, and it stops working at once.

Connect your first tool

The setup guide walks through each AI client, the access token, and a webhook receiver step by step. If you are still choosing a portal, start with what client portal software does and come back when the exchange is running.