Shared access

Open Shared access in the sidebar to choose which protected records or documents another Swish user
can see. Invitations must be accepted before access starts.

Before you share

The recipient needs an active Swish account and must have set up their encryption passphrase. Swish
looks them up by their exact email address. If they cannot be found, check the address or ask them to
finish setting up their passphrase.

Shared access needs an internet connection. It is not available offline.

Sending an invitation

1. Under Choose what to share, select one or more eligible register items or documents.
2. Under Choose who to share with, enter the recipient's exact email address and find them.
3. Compare the safety number or QR fingerprint with the recipient through a trusted channel. Tick the
   acknowledgement each time you send an invitation, even if you have shared with them before.
4. Choose the access offered by the screen, set an expiry where available, and send the invitation.

The recipient cannot read anything until they accept. Pending invitations show their accept-by date and
can be cancelled while they are still valid.

What each person can do

A view-only recipient can read only the exact items and document versions covered by the accepted
invitation. Modify access can allow changes, but it does not transfer ownership and does not allow the
recipient to delete the item or manage your other shares.

Items shared with you are labelled Shared with you. They do not feed your own totals, automated bank
linking, or bank synchronisation. This keeps another person's records separate from your financial
position.

An adviser invitation is also explicit and time-limited. Adviser views are read-only and cannot be
delegated to somebody else. New attachments or replacement encrypted versions are not silently added to
an existing adviser grant; they need current access of their own.

Managing and revoking access

Select an item to see Who has access and the actions currently available. Depending on your
permissions, you can change a role, renew an adviser invitation, revoke access, or replace encryption
keys. Sensitive changes ask you to confirm and may require your encryption passphrase.

Revoking access removes future access in Swish, but it cannot recall files or exports the recipient has
already downloaded. If the other person's identity key changes, Swish asks you to compare the new safety
number before sharing again.

You can also start from a register or Document Vault row using Share / Manage access, or select
several eligible rows and manage them together.

Invitations you receive

Incoming invitations appear near the top of Shared access. Review the covered items and sender details,
then accept or decline while the invitation is valid. An expired pending invitation cannot be accepted;
ask the sender for a new one.