Use the correct workspace, appropriate access, and your firm's approved sharing process when working with client information in Gemifi.

Use your own account. Keep passwords, magic links, reset links, and one-time codes private. Use account recovery if you cannot sign in; do not ask a colleague to share their credentials.

Review workspace membership when someone joins, changes roles, or leaves the firm. An admin should remove access that is no longer needed. See Manage workspace users.

Confirm the client and workspace before importing a file. Upload the documents needed for the task through the supported import workflow and your firm's approved process. Review extracted data before applying it.

The client creation workflow asks for a client email. Do not rely on a general claim that every identifying field is optional; review the requirements of the feature you are using.

Review PDF and spreadsheet exports before sending them. Check client details, included sections, assumptions, and the recipient. Use your firm's approved delivery channel.

For the portal, confirm the invitation email and enabled sections, then preview the client's access.

Use Gemifi support to report unexpected access or request current security/privacy documentation. Include enough context to identify the issue, but do not send credentials or unnecessary client documents in an initial message.

This guide describes operational steps. Contact Gemifi for current statements about hosting, encryption, retention, authentication enforcement, or independent certifications needed for your firm's review.