Vendor upload links
Every vendor has a permanent upload page at a tokenized URL. Anyone with the link — the vendor, their office manager, their insurance agent — can submit a certificate without creating an account. Most compliance friction is login friction; this removes it.
Using the links
- Find the link on the vendor's page (Copy upload link).
- It's included automatically in every chase email and manual reminder.
- Put it in vendor onboarding packets and contracts — it never expires.
- Uploads land as that vendor's certificate and are extracted immediately, exactly like an in-app upload.
Safety properties
Links carry a 128-bit random token — unguessable, and they identify a single vendor only. Upload pages accept PDFs only (verified by content, not filename), cap file size at 8 MB, and are rate-limited per IP. A paused account pauses its upload links. Deleting a vendor invalidates their link.
Questions the docs don't answer? Email coi@vcorp.co — a human reads it.