# Client portal on your domain

> Put client sign-in, dashboards, share links and reports on your own domain, like reports.youragency.com, with only your brand. Agency and Custom.

Source: https://sporetag.com/docs/client-portal
Section: Clients

Your clients can sign in and see their dashboards on an address you own, like `reports.youragency.com`, instead of Sporetag's. Every page there shows only your name and logo. It comes with Agency and Custom.

## What opens on your domain

- **Client sign-in.** Clients type their email and get a sign-in link. No password.
- **Client dashboards** for each site you shared with them, and their Live view.
- **Share links**, a dashboard's own link and the TV view.
- **Report pages**, the live link in each report email.

Nothing else opens there. Your own dashboards, settings, billing and investor pages stay on `app.sporetag.com`. A share link or site from another account does not open on your domain.

Once the portal is live, new invite emails, report emails and alert emails to clients link to it. Links you sent before keep working on Sporetag's address.

## Set it up

1. Open **Settings**, then **Brand**. In **Client portal on your domain**, type a subdomain you own, like `reports.youragency.com`, and press **Set up**.
2. Where your domain's DNS lives, add one CNAME record. The card shows the name and the target, each with a **Copy** button, and the steps for your DNS host. One-tap setup at DNS hosts that support Domain Connect comes later (when shipped).
3. Wait for **Live**. The card checks the record while it is open, and every 15 minutes after. We get the HTTPS certificate for you, usually within a few minutes of the record being right. **Check now** checks at once.

On Cloudflare, set the record's proxy status to **DNS only** (the gray cloud). With the orange cloud, Cloudflare answers for the address itself and visits never reach your portal.

Use a new subdomain. Pointing an address that already serves something, such as your website, would take that offline.

## Before it is live

Until the card says **Live**, the address shows nothing: every page answers "Not found". Invites and reports keep linking to Sporetag's address.

## Remove it

Press **Remove** in the card. Clients sign in on Sporetag's address again, and links already sent to your domain stop working. If your plan moves below Agency, the portal stops answering until you move back.

## Security

- Signing in on your portal makes a session for that address only. It is never sent to Sporetag's own domains, and theirs is never sent to yours.
- Your portal uses the same protections as the Sporetag app: HTTPS only, with strict transport security for that address alone, a content security policy and no framing.
- Search engines are asked not to index it.