Client portals powered by your Notion databases

Client portals for Notion, without exposing your workspace

Turn your Notion databases into secure, branded portals where clients can view project updates, submit requests, review files, and comment. Your team keeps working in Notion while each client only sees what you approve.

No credit card. Full Pro features for 7 days. Cancel anytime.

  • Row-level access — clients see only the rows you allow
  • No client Notion account — passwordless magic-link login
  • Clients approve, sign off, and update — inline, no Notion access
  • Free 7-day Pro trial · no credit card required
Client portal
Filtered
Homepage QAIn review
Launch notesReady
Campaign assetsWaiting
01 / Workflow4 steps

Turn one Notion database into private views for every client

Keep your team working from the same Notion database. Quelvo turns it into a clean client portal where each client only sees the records, fields, and forms meant for them.

  1. 01
    SOURCE

    Connect your Notion database

    Authorize only the databases you want to expose. Other pages, databases, and properties remain unreachable.

    Approved databases only
    Source: Notion workspace
    ProjectsExposed
    RequestsExposed
    InvoicesPrivate
    Internal notesPrivate
  2. 02
    SCOPE

    Create client-specific views

    Pick visible fields, client rows, editable forms, and portal tabs. Internal fields stay private.

    Rows, fields, forms, tabs
    Fields: db_projects
    nameVisible
    statusVisible
    cost_usdHidden
    internal_notesHidden
  3. 03
    INVITE

    Invite clients with magic links

    Send a signed link. Clients open the portal without a Notion account, password setup, or raw workspace access.

    Signed, scoped, passwordless
    Invite: acme@example.com
    https://acme.quelvo.co?t=eyJhbGci...
    ScopedExpires 30dSigned
  4. 04
    SYNC

    Keep managing everything in Notion

    Update statuses, deadlines, files, and records in Notion as usual. With inline editing turned on, clients can update specific cells, drag cards between board columns, and submit forms — every change writes straight back to your Notion database.

    Notion remains source
    Notion

    Status: Review

    updated 2s ago

    BIDIRECTIONAL
    ◀····▶
    audit-logged
    Client Portal

    Status: Review

    client edited 4s ago

02 / Controls12 surfaces

Control what every client can see, edit, and submit.

Published portals never expose internal notes, costs, priorities, hidden fields, other client records, or the rest of your Notion workspace.

F-01

Row-level access

Show only the rows assigned to a given client. Other client records never reach the browser — enforced server-side, not on the client.

Scope: client_id = ACME
P-0921ACME
P-1102ACME
P-1140NORTH
P-1188MERID
F-02

Hidden internal fields

Strip costs, priorities, internal notes, and any private property at the API boundary — never serialized to the client.

API response
"name"Returned
"status"Returned
"cost_usd"Stripped
"internal_notes"Stripped
F-03

Portal tabs

Expose Projects, Requests, Files, and Updates as simple client-facing tabs.

Portal tabs
ProjectsRequestsFilesUpdates

Projects: db_projects

Requests: db_requests

Files: db_files

F-04

Read-only or form-based access

Let clients submit requests, comments, or updates through forms without raw write access.

Form: requests/new
Title

Add a homepage section

LowMedHigh
F-05

Branded client experience

Use your logo, palette, domain, and portal styling so clients see your studio.

AAcme Co.

portal.acme.com

MMeridian

clients.meridian.studio

F-06

Magic link login

Signed, scoped, expiring links let clients open the portal in one click.

Signed link
eyJhbGciOiJIUzI1NiJ9.eyJjbGllbnRfaWQiOiJhY21lIiwiZXhwIjox...
ExpiringOne tapRevocable
F-07

Five layouts per view

Show records as a table, gallery, kanban board, calendar, or Gantt timeline. Each saved view picks its own.

LAYOUTS · ONE DATABASE / FIVE LENSES
TABLE
GALLERY
BOARD
CAL
GANTT
F-08

Multiple saved views

Curate one view per audience or workflow — "Active projects", "Archived", "This quarter" — all from the same database.

SAVED VIEWS · db_projects
DefaultActiveArchivedBacklogQ2 priority
SAME DB · DIFFERENT FILTERS, SORTS, COLUMNS
F-09

Inline cell editing

Toggle on per column. Whitelisted clients click a cell, change the value, and the edit writes straight back to Notion.

INLINE EDIT · column.editable = true
RECORDSTATUS
Brief revision
Review · EDITED
Homepage v2
In progress
WRITE · audit logged · conflict-detected
F-10

Comments & threads

Clients leave comments on specific records. You get notified, can reply, and resolve threads — all from your dashboard.

THREAD · record P-1102
P
Can we push the launch by a week?
S
Done — moved to May 22. ✓
F-11

File-upload form fields

Clients attach PDFs, images, or documents through forms. Files land in Notion as native attachments.

UPLOAD → Notion attachments
brief-v3.pdf1.2 MB
moodboard.zip8.4 MB
logo-source.ai3.1 MB
F-12

Embed in your site

Drop a portal into your existing website with an iframe. Origin-allowlisted, fully branded, no Quelvo chrome.

EMBED · iframe origin-allowlisted
◆ acmeagency.com / clients
<iframe src="…/embed/acme" />
Acme · Active projects
No Quelvo chrome
03 / Layouts5 lenses

One database, five lenses.

Pick the right view for the kind of work you're sharing — and let clients switch on the fly. Each saved view picks its own layout.

VIEW · acme · BOARDPRO + AGENCY

Queued

Onboarding kit
Style guide

In progress

Brand refresh
Email sequence
Homepage v2

Review

Pricing page

← DRAG TO MOVE

Delivered

Logo update
Hero banner

Best for

Pipelines, intake queues, sprints

About

Kanban columns by status. Drag cards to update.

04 / EditBidirectional

Clients approve, sign off, and update Notion without ever opening Notion.

Toggle inline editing on for any column. Clients approve deliverables, mark invoices paid, update statuses, push due dates — every change writes straight back to your database. You stay in Notion. They get a portal.

Quelvo turns your Notion database into a two-way collaboration tool. Whitelisted clients approve deliverables, mark invoices paid, update statuses, push project dates, edit notes, and attach files — all from a clean branded interface that doesn't require a Notion account.

You decide what's editable. Per column. With one toggle. Everything else stays read-only.

Every change is logged with the client's email, the property, the old value, and the new value. Conflicts with concurrent Notion edits are detected and surfaced as a friendly toast — never silent data loss.

  • Per-column opt-in — never accidentally writable
  • Drag cards between status columns on board view
  • Optimistic UI with conflict detection
  • Audit-logged on every save (Pro+)
See how it works·· Available on Pro & Agency
EDIT MODE · column.status.editable = trueWHITELISTED
ProjectStatusDue
Brand refresh
In review|
Jun 03
Homepage v2
Delivered· SAVED
May 22
Email sequence
In progress
Jun 14

AUDIT

15:42priya@acme.coUPDATED statusQueuedIn review
15:41priya@acme.coUPDATED statusIn progressDelivered
05 / OperationsPro & Agency

Built for teams that take client work seriously.

Visibility, automation, and accountability — the operations layer your agency needs once you're past one or two clients.

OPS-01PRO+

Owner analytics

Logins, page views, form submits, comments, edits — broken down by portal, by client, by week. See what's actually getting used.

M
T
W
T
F
S
S
LOGINS 38EDITS 91FORMS 12
OPS-02PRO+

Searchable audit log

Every login, every form submit, every comment, every edit — timestamped, attributable, exportable to CSV.

15:42priya@acme.coUPDATEDstatus
15:31liam@meridianSUBMITTEDrequest
14:08jordan@nw.comVIEWEDP-1102
13:55anya@acme.coCOMMENTP-0921
OPS-03PRO+

Outgoing webhooks

HMAC-signed events fire to your stack on form submits, comments, and inline edits. Built-in retries, replay queue, dedupe across providers.

X-Quelvo-Signature: t=1715..,v1=4f8c..Content-Type: application/json{ "event": "form.submitted","portal": "acme","row_id": "P-1102" }
RETRY · 3xHMACDEDUP
OPS-04PRO+

Daily & weekly digests

Summaries of every client activity across every portal land in your inbox at 9 AM. Skip the dashboard, run from email.

Yesterday · all portals3 portals

· 4 new requests from Acme Co.

· 2 status edits across Meridian

· 1 new comment thread (Northwind)

OPEN DASHBOARD →
06 / White-labelInvisible

Make Quelvo invisible.

Run portals on your own domain, embed them inside your own product, strip the Quelvo badge entirely. Your brand. Their experience. Our infrastructure.

EMBED MODE ★★★

Drop a portal into your existing site with one iframe. Origin-allowlisted, no Quelvo chrome, all your branding.

Pro & Agency

CUSTOM DOMAIN ★★★

Run portals on portal.youragency.com instead of quelvo.co/portal/yourslug. SSL handled automatically.

Agency only

REMOVE "POWERED BY QUELVO" ★★

Strip the small Quelvo badge from the portal footer. The portal looks 100% yours.

Agency only
portal.acmeagency.com
EMBED

ACME AGENCY · NAV

WorkAboutClientsContact

<iframe> · acme client portal

Active projects

3 OPEN
Brand refreshIN PROGRESS
Homepage v2IN PROGRESS
Email sequenceIN PROGRESS
portal.acmeagency.com
CUSTOM DOMAIN
AAcme Agency · Client portal

Welcome back, Priya.

· NO QUELVO BADGE · YOUR SSL · YOUR DOMAIN
07 / USE CASES·· 3 SHAPES

Built for client work that already lives in Notion.

Quelvo is most useful when the databases you'd want to expose are already shaping how your team operates.

Run dozens of client portals from one Notion workspace.

Roll out a portal per client without duplicating workflows. Production stays in one Notion, but each client only sees their slice.

  • TEAMS5–80 internal
  • TYPICAL USEProject status, deliverables, approvals, files, requests, plus client-edited statuses and dates
  • WHAT STAYS PRIVATEMargins, timesheets, retros, other clients
  • SETUP8 minutes per client
WORKSPACE · 6 ACTIVE PORTALS
AAcme Co.
MMeridian Studio
NNorthwind
LLumen Labs
BBirchwood
QQuanta
ONE NOTION → SIX PRIVATE VIEWS
08 / SecuritySpec sheet

Client-safe by design.

Quelvo replaces risky Notion sharing with per-client scopes, hidden-field stripping, and signed portal sessions.

Hidden fields

Notion default:Viewers can often inspect shared database properties.

Hidden fields are stripped at the API. The browser never receives them.

Other client records

Notion default:Filters in Notion are advisory and can be changed by viewers.

Quelvo enforces client scope server-side using a signed session token.

Edits

Notion default:Edit access can expose database structure and internal workflows.

Clients can only submit through forms you publish. Writes are validated.

Files

Notion default:Notion file attachments are visible to anyone who can see the page.

Client-uploaded files are validated by mime + magic-byte check. Plan-level monthly upload caps prevent runaway storage.

Internal pages

Notion default:Sharing can expose inherited pages, linked views, or workspace context.

Quelvo only reads from the specific databases you authorize.

Sessions

Notion default:Notion sessions grant whatever access that account can see.

Magic links are signed, scoped to a client, expiring, and revocable.

Audit

Notion default:Notion audit logs are admin-only and not tied to portal use.

Per-client access logs are available from the dashboard. Per record, per request.

Form writes

Notion default:Direct database access exposes every property and row.

Forms publish only the fields you choose, validate inputs, and INSERT only — never UPDATE or DELETE.

09 / ObjectionDirect

Why not just share a Notion page?

Sharing Notion works until clients need a real product surface, your databases hold more than one client, or internal fields should stay private.

If you share Notion directly

Friction
  • Clients need a Notion account, or the page becomes fully public.
  • Filters and view-only links are surface-level, not server-enforced.
  • A shared database can leak schema, including hidden internal fields.
  • One client can see another client record if a shared view is misconfigured.
  • The brand experience belongs to Notion, not your agency.
  • Edit access is all-or-nothing — no per-column write control.

If you publish through Quelvo

Quelvo
  • Clients open a signed link. No account and no Notion login.
  • Access control is enforced server-side on every response.
  • Hidden fields, costs, priorities, and internal notes never leave your workspace.
  • Each client only receives records scoped to their client view.
  • Your domain, logo, and portal styling stay in front.
  • Clients can update designated cells from the portal — writes go straight back to Notion, never to a separate database.
10 / Pricing3 tiers

Start with one portal. Scale as client work grows.

Every signup includes a 7-day free Pro trial — no credit card required. Use Quelvo with real clients first; pick a plan only if you want to keep going.

Save ~17%2 months off with annual

T-S

Starter

For freelancers managing a few active clients in Notion.

$15/mo
Start with Starter

Limits

  • 1 Notion workspace
  • 3 portals · 2 DBs per portal
  • 10 clients per portal
  • 3 saved views per database
  • 50 form submissions / mo
  • 1 dashboard user

Features

  • Row-level access — clients see only the rows you allow
  • Passwordless magic-link login (no client Notion account)
  • Table + Gallery layouts
  • Comments & discussions
  • Custom logo + accent color
  • Starts as a 7-day Pro trial — no card required

T-P

Most popular

Pro

For small teams running multiple client portals and repeatable workflows.

$35/mo
Choose Pro

Limits

  • 10 portals · 5 DBs per portal
  • 25 clients per portal
  • 10 saved views per database
  • 250 form submissions / mo · 1 GB uploads / mo
  • 5 dashboard users

Client actions & layouts

  • All 5 layouts (Table, Gallery, Board, Calendar, Timeline)
  • Clients approve, update status, or mark items done — inline, no Notion access
  • Forms with file uploads (proposals, briefs, deliverables)

Operations

  • Owner analytics dashboard
  • Searchable audit log
  • Outgoing webhooks (10 endpoints)
  • Email digests (daily + weekly)
  • Embed mode (iframe portals)
  • Custom CSS

T-A

Best for teams

Agency

For agencies managing client work across many projects, clients, and databases.

$79/mo
Choose Agency

Limits

  • 3 Notion workspaces
  • Unlimited portals · DBs · clients · views
  • Unlimited form submissions · 10 GB uploads / mo
  • 10 dashboard users

Everything in Pro, plus

  • Custom domain (portal.youragency.com)
  • Remove "Powered by Quelvo" badge
  • Priority email support
·· All plans7-day Pro trial, no card required · 14-day refund window · cancel anytime
11 / FAQ13 items

Questions teams ask before publishing their first portal.

Concrete answers about access control, edits, embedding, and what stays private.

Only when you explicitly opt in. By default, portals are read-only. You can turn on inline editing per column to let clients change specific values, and you can add forms that create new rows. Everything else is read-only and writes nothing to Notion.

They enter their email and we email them a magic link. One click signs them in — no password, no Notion account needed. Links expire after 15 minutes; sessions last 30 days. You can also make portals fully public if you want anyone with the link to view.

Both — and you decide per column. Toggle "Editable" on any column on the dashboard, and clients can click that cell to update its value. The change writes back to your Notion database. Most columns can be made editable except formulas, rollups, and Notion-managed timestamps. Available on Pro and Agency.

Yes — the audit log records every login, form submit, comment, and inline edit, with the client's email and a timestamp. Searchable, filterable, and exportable to CSV. Available on Pro and Agency.

Yes. Embed mode lets you drop a portal into your existing site with one iframe — origin-allowlisted, fully branded, no Quelvo chrome visible. Available on Pro and Agency.

Yes — run portals on portal.youragency.com instead of quelvo.co/portal/yourslug. SSL is provisioned automatically. Custom domains are available on the Agency plan.

No. You choose which columns are visible (hidden columns are never sent to the browser — not even cached) and you set row-level filters so each client only sees records assigned to them.

Yes — through forms you build from selected database properties. Each submission creates a new Notion row in the database you approved. Pro and Agency also support file uploads (PDFs, images, documents) which become native Notion attachments.

Outgoing webhooks fire HMAC-signed events to your stack on form submits, comments, and inline edits. Built-in retries, replay queue, and a 10-endpoint cap per portal. Available on Pro and Agency.

Yes — instant email notifications on form submits and new comments, plus optional daily and weekly digests that summarize all client activity across all portals. Digests on Pro and Agency.

Notion tokens are encrypted at rest with AES-256-GCM. Portal sessions use signed HTTP-only cookies. Hidden columns are stripped server-side before any data crosses the network. All connections use HTTPS and OAuth 2.0.

Disconnecting Notion pauses affected portals (clients see a friendly unavailable page) until you reconnect. Downgrading takes effect at the end of the billing period — you keep what you paid for until then. Nothing is ever deleted on downgrade; portals above the new limit are just locked until you upgrade again or delete some yourself.

Yes — within 14 days of purchase, no questions asked. Email support@quelvo.co.

12 / Get started

Publish your first portal in an afternoon.

7-day Pro trial — no card required. Bring one Notion database, end the day with a live, branded portal.