Sovereign client safe. On your WordPress. Installed in 3 minutes.

Features

Everything Client Vault does for you — quietly, effortlessly.

Ten major categories. Each category broken down into sub-sections. Each sub-section detailed into atomic features. No fluff — every single line was born from a real pain point experienced by firms, freelancers, trainers, or agencies.

Solo

Pro

Solo + Pro

145

native features

61

Solo (the vault)

84

Pro (workflows, LMS, community)

01

Solo

Vault & documents

The bare essentials. Each client has an encrypted space; you decide what they see, and the system tracks everything that happens within it.

Encrypted client space

One vault per client, isolated and AES-256 encrypted on your server.

  • AES-256 vault per client — encryption at rest, keys per space.
  • 4 vault tabs — documents, files, useful links, private notes.
  • File view history — audit log of who accessed what and when, timestamped to the millisecond.
  • Internal private notes — invisible to the client, shared among operators.

Document requests

You check off what the client needs to provide. The system follows up for you.

  • Expected documents checklist — list configurable by template or by client.
  • Client-side upload — multi-file, drag & drop, all formats.
  • Inactive client filter — detection of inactive users (e.g., > 30 days), targeted follow-ups for dormant accounts.
  • Global announcement email broadcast — email backup for an in-app announcement to reach inactive users.

Validation & traceability

You approve or reject. Everything is tracked to the millisecond, admissible in the event of a dispute.

  • One-click validation — millisecond timestamped, identified operator.
  • Refusal with reason — the client receives the reason, can rectify, and resubmit.
  • Timestamped audit — upload, viewing, download, validation, refusal — everything is logged.
  • Consultation tracking — who opens, who downloads, when — traced and journalized.

Protected media player

Your sensitive content is never served via direct URL. Everything is processed through short-lived signed URLs.

  • Streaming via signed URL — media are served via an endpoint that generates short-lived URLs.
  • Download token with expiration — random + HMAC signature + user_id + file_id, short expiration, anti-replay.
  • Rate-limiting by IP + user — bucket of attempts to block massive scraping and bots.
  • Server-side MIME validation — the file type is verified server-side, not just by extension.

Tags & lifecycle

Files, folders, and links live and expire — you keep the record.

  • Cross-functional tags — creation, renaming, attachment to a file / folder / link / embed.
  • Element counter by tag — visualize what is tagged and what is not.
  • Soft archiving (with unarchiving) — move content out of view without deleting it.
  • File expiration date — after this date, the file becomes inaccessible. Can be revoked.

Cards, links & embeds

The vault is more than just a drive. It also hosts notes, links, and rich media.

  • Cards (structured notes) — rich content cards similar to Notion, which can be pinned and tagged.
  • Short links — URL references for the client (Drive, external Notion, shared document).
  • Auto-converted embeds — YouTube, Vimeo, Dailymotion, Spotify, Apple Podcasts — paste to play.
  • Protected media player — streaming via signed URL, no direct download.

02

Pro

Journeys & orchestration

You set up the mission once, the system replays it for the next 100 clients. Never send the same document request email again.

Journey template

A standard mission becomes a template, duplicated and personalized for each client.

  • Reusable scripted journeys — assignment, divorce, training, branding… one template per typology.
  • Client duplication — instantiated in one click, independent of the source template.
  • Workflow variants — same framework, steps adjusted on a case-by-case basis.
  • Import / export — transfer a template between installations.

Steps & sub-steps

Two-level hierarchy, various types, manual or automatic validation.

  • Top-level steps — main milestones of the workflow (Brief, Documents, Review, etc.).
  • Sub-steps — fine granularity under each milestone.
  • Sub-step fields — title, deadline, instruction_url, required_docs, locked_by.
  • Auto / manual validation — choice per step, configurable conditions.

Conditions & unlocking

The client cannot skip a step. You maintain operational order.

  • Progressive locking — step N+1 remains locked as long as N is not validated (locked_by).
  • Multiple prerequisites — a step can depend on several previous ones.
  • Trigger date — a step opens automatically at D+X.
  • Progress view — gauge + milestones visible on both client and operator sides.

Calendar & archiving

All deadlines aligned. The end of the journey managed in one click.

  • Audience / Appointment Calendar — shared between operator and client.
  • D+3 / D+7 / D+14 reminders — configurable by template, by journey, by client.
  • Timestamped PDF / ZIP export — complete chain of evidence at the end of the mission.
  • Long-term archiving — stored on your premises, no cloud rental fees.

Step Guardrails (Unlock Gates)

The client only proceeds to the next step if YOU have decided what to verify.

  • Photo guardrail — uploaded proof + admin validation.
  • Quiz guardrail — score ≥ threshold to validate the step.
  • External LMS completion guardrail — lesson or course marked as complete in the connected LMS.
  • Appointment guardrail — Amelia / FluentBooking / Tribe: appointment booked or held.
  • Event attendance guardrail — check-in validated for the journey event.
  • Self-assessment guardrail — the client ticks / rates before moving forward.
  • Checklist guardrail — list of tasks to be checked before proceeding.
  • Third-party validation guardrail — coach or peer validates instead of the admin.

Quiz, certificates & assessment

Measure learning outcomes and formalize achievements.

  • Question types — Multiple choice, true/false, open-ended, ordering, matching.
  • Scoring & notation — Pass thresholds, retakes allowed or restricted.
  • External sources — Quizzes imported from the connected LMS.
  • Certificate lifecycle — Automatic generation at the end of the course, revocation possible.

Events & replays

Live sessions, workshops, group meetings — planned, tracked, and recorded.

  • Event creation — Video calls, in-person workshops, masterclasses, summaries.
  • RSVP & reminders — Registrations, confirmations, automated follow-ups.
  • Replays / recordings — Attached to the event, accessible afterward.
  • Replay viewing tracking — Who watched, how far, and when.

03

Solo + Pro

Client communication

No more “did you receive it?” calls. The client knows where they stand, you know what they have seen, and the system records everything.

Transactional emails

Every event triggers an email in your brand identity, without touching the code.

  • Premium templates — responsive HTML design, logo, colors.
  • Template by event — submission, validation, rejection, validated step, quota alert…
  • Variables / placeholders — {site_name}, {client_name}, {file_name}… to customize each mailing.
  • A/B testing & history — set up an A/B test on subject/body + complete mailing history.

Notifications dashboard

The notification center ensures you don’t discover information “by chance”.

  • Operator notifications — client submission, validation request, delay.
  • Client Vault menu in WP admin bar — counter at the top of the back-office, accessible everywhere.
  • Sidebar indicators — badges on admin menus (Clients, Journeys, Community).
  • Real-time heartbeat — live updates without reloading the page.

In-app discussions

Exchanges remain in the vault, attached to the document or the step.

  • Discussion thread by step — compartmentalized, timestamped, accessible to both parties.
  • Pinned announcements — persistent message at the top of a folder or journey.
  • Private internal discussions — between operators, never visible to the client.
  • Read receipt — who read it, when — record kept.

Retractable document request

Changed your mind? The request can be cancelled or modified after sending.

  • Post-send modification — add, remove, or adjust a request.
  • Clean cancellation — the client is notified without confusion.
  • Revision history — we keep track of changes.
  • Archived obsolete documents — never lost, just set aside.

04

Solo + Pro

Management & dashboard

A glance in the morning: who is where, who is late, who is finishing today. The project manager’s daily routine without shared spreadsheets.

Operator view

Your day’s home screen.

  • Global dashboard — who is where, who is late, who is finishing today.
  • Quick filters — by workflow, by status, by operator.
  • Sortable/searchable client list — configurable columns, instant ajax search.
  • 1-click access to the vault — one line, one button, the client space is open.

KPI per client

Measure engagement rather than assuming it.

  • Health score (Health ring %) — SVG ring visualization of the overall portfolio score at a glance.
  • Active client counter (7 days) — with ratio against the total — global alert signal.
  • Top 5 most active clients — ranking by activity score — targeted recognition / upsell.
  • Inactive detection — filter clients without recent activity, base for targeted follow-ups.

Activity log

Every client-side action is recorded — what, when, from where.

  • Engagement log — logins, views, downloads, uploads.
  • Time filters — today, week, month, custom range.
  • CSV export — raw data for time-based billing.
  • GDPR anonymization — controlled erasure upon client request.

Enforceable audit

If a dispute arises, you have the complete chain of evidence.

  • Enforceable timestamped audit — millisecond, operator, IP, action, target.
  • Timestamped PDF / ZIP export — complete chain of evidence in one click.
  • Storage on your premises — no data retention by a third-party publisher.
  • Cross-sectional statistics — aggregated by firm, by path, by period.

05

Pro

Community & engagement

Connected to FluentCommunity. Each path has its own private space, contextualized widgets, rankings, and trophies. Attention span lasts 6 weeks, not 3 days.

FluentCommunity integrated

Not a new tool to learn. The community lives within FC, managed from Client Vault.

  • N×N path/space mapping — one path can feed multiple spaces, and vice versa.
  • Auto-detection of installation — Client Vault detects FluentCommunity and activates the gateway.
  • Community tab by path — centralized configuration in the path settings.
  • Kill-switch mode — total deactivation in one click, without losing settings.

21 contextualized widgets (8 FC + 13 exclusive)

Enriched right sidebar, per-path data, editable CTAs.

  • Leaderboard (gauge + top 10 + my rank) — the friendly competition that motivates.
  • My trophies — badges renamed as trophies, for a more premium feel.
  • Tip of the day — editable pool of quotes, 1 per day.
  • Need help — Q&A pool configured from the admin panel.
  • 17 other widgets — online status, upcoming events, polls, top contributors, latest files, next appointments, health score, achievements, multi-source search…

Gamification

The client tracks their progress, sees their ranking, and earns trophies.

  • Trophies — triggered by reaching milestones and completing deliverables.
  • Leaderboard — visible to the client, anonymous if desired.
  • Heartbeat presence — who is online in the community right now.
  • Client engagement score — internal view, hidden or displayed depending on the role.

Editorial pools

Sidebar content is editable without touching the code.

  • Tips pool — quote + author + CTA URL, configurable.
  • Need help pool — recurring questions, pre-written answers.
  • Configurable widget links — each widget has its own link (vault, profile, step…), which is editable.
  • Deep-link highlighting — CTA points to a specific area + visual pulse.

06

Pro

LMS & Training

Client Vault is not an LMS — it connects to the ten existing LMS solutions on the market. Your existing training courses are injected into the pathways without the need for re-importing.

10 natively connected LMS

If you already provide training via one of these tools, Client Vault manages it.

  • LearnDash — the most installed WordPress LMS.
  • LifterLMS — geared toward coaches and solo trainers.
  • Sensei LMS — the official Automattic LMS.
  • TutorLMS — popular in French-speaking markets, visual builder.
  • Academy LMS — lightweight, focused on simple pathways.
  • LearnPress — free, with a large community base.
  • MasterStudy LMS — integrated front-end design.
  • WP Courseware — long-standing, sequential courses.
  • Masteriyo LMS — recent, modern builder.
  • Fluent Community (LMS-like) — the integrated option if you are already combining the Vault + the community.

Synchronization & tracking

Lesson / chapter / quiz completion advances the pathway.

  • Course injection — LMS lessons become steps in the journey.
  • Unlock on completion — the next step opens when the lesson is finished.
  • User sync — same accounts for the LMS and the vault, no double entry.
  • Progress tracking — LMS KPIs visible in the Client Vault dashboard.

07

Pro

Cross-functional integrations

Your stack keeps running. Client Vault connects to it, it does not replace it.

Forms

Briefs, onboarding, questionnaires — responses stored in the vault.

  • Form submission — triggers a step, responses stored in the client vault.
  • Native WordPress hooks — any form plugin that exposes its standard WP hooks can be connected.
  • Generic incoming webhook — any external form tool that POSTs to a Client Vault endpoint.
  • REST API cards — submission automatically creates a card (external workflow).

Calendars

The client books from within their journey. The appointment validates a step.

  • Amelia — native WordPress, embedded on the page.
  • Calendly — embed standard, validation via webhook.
  • Tribe — reservations supported by workflow guardrails.
  • FluentBooking — scheduling system from the Fluent stack, natively supported.

Automation

Each event can trigger your downstream stack.

  • FluentCRM — auto-tag, sequences, segments.
  • Make — no-code orchestrator to connect your existing tools.
  • Zapier — to connect 5000+ external apps.
  • Webhooks & API REST — for your custom developments.

08

Pillar · Solo + Pro

Sovereignty & security (the pillar that changes everything)

No other section makes sense if this one is not held. Your data lives with you, in the country of your choice, without any vendor oversight. Explicit opposition to SaaS providers that hold your clients hostage.

Hosting

On your premises. Country of choice. Domain of choice.

  • Install WordPress in 3 minutes — standard plugin, hosting provider of your choice.
  • Country of your choice — France, EU, outside EU — you decide.
  • Custom domain — your URL, your SSL certificate.
  • No editor visibility — no telemetry, no centralized ping.

Encryption

AES-256-CBC, short-lived tokens, per-client isolation.

  • Server-side AES-256-CBC — used by the security module for sensitive payloads (native openssl_encrypt).
  • Expiring download tokens — random token + HMAC signature + user_id + file_id, short expiration to prevent replay attacks.
  • Strict compartmentalization — a client never sees another client’s vault; no enumeration possible.
  • HMAC SHA-256 signature — outgoing webhooks signed, X-CV-Signature header, shared secret.

Compliance

Native GDPR. Compatible with basic business requirements.

  • Native GDPR — no data transfer outside the EU by default.
  • Enforceable audit trail — complete chain of evidence per folder.
  • Professional secrecy compliant — art. 66-5 (lawyers), L. 226-13, etc.
  • Export & erasure — right of access, right to erasure, in one click.

Ownership

No cloud rental fees per folder. No painful migrations.

  • Full data ownership — files, databases, archives — everything is yours.
  • Backups at your own pace — with your chosen host, no middlemen.
  • No lock-in — full export in open standards (CSV, JSON, ZIP).
  • Explicit anti-SaaS stance — we do not offer a hosted version — ever.

09

Solo + Pro

Customization & White-labeling

Your clients never know they are on Client Vault. They only see you.

Full white-label

Logo, colors, fonts, subdomain. No “Powered by”.

  • Custom logo — dashboard header, emails, exports.
  • Palette & fonts — primary colors, secondary colors, web fonts.
  • Custom subdomain — clients.firm.com or space.agency.com.
  • No vendor mention — no “Powered by Client Vault”.

Email templates

All email templates are configurable, by event.

  • Responsive HTML templates — mobile + desktop rendering.
  • Custom header / footer — logo, legal notices, firm baseline.
  • Event-based templates — submission, validation, refusal, quota alert…
  • Master toggle notifications — the client can disable all email notifications with one click.

Internationalization (i18n)

Plugin ready for the WordPress translation standard.

  • Native load_plugin_textdomain — all code uses WordPress __() / _e() functions.
  • 5 languages provided — .po / .mo files included for FR, EN, ES, DE, AR.
  • WP standard compatible — works with any translation tool that respects gettext.

Gutenberg block

Embed the vault anywhere on your WordPress site.

  • Client Vault block — insert the portal into any page.
  • Legacy shortcodes — [ client_vault ], [cv_parcours]… for builders.
  • Live admin preview — see what the client will see before publication.
  • FSE compatibility — works in block themes, not just classic ones.

10

Solo + Pro

Administration & Team

Client management, bulk operations, staff roles. The system remains simple even with 500 clients.

Client management

Creation, import, organization, search.

  • Manual creation — complete client file in less than a minute.
  • CSV import — restore your existing database in one click.
  • AJAX search — live results, combinable filters.
  • Tier / segment classification — tags, active journey, status.

Bulk operations

When you have 50 clients, it is fine. When you have 500, it is a lifesaver.

  • Multiple selection — “Select all” + individual checkboxes.
  • Mass journey enrollment — 50 clients into a journey in one click.
  • Grouped notification — announcement email sent to all enrolled users.
  • Targeted list export — CSV, JSON for your analytics tools.

Staff

Your teams have roles, not all with the same permissions.

  • Admin whitelist — cv_admin_allowed_roles option: only authorized roles can access the vault.
  • Role-based permissions — cv_admin_role_permissions : checkboxes edit_files / view_audit / manage_api / send_emails…
  • Private admin notes — Lightweight CRM : notes visible only to admins, never to the client.
  • IP Whitelist (CIDR) — restrict admin access to specific IP ranges.

Central configuration

Everything from the WordPress admin, without touching code.

  • Global settings — branding options, emails, security.
  • Sticky save bar — “Save” button always visible.
  • Toggle WP admin bar — hide the admin bar for clients.
  • Diagnostic mode — logs, plugin status, potential conflicts.

11

Solo

Search & discovery

Your clients will never struggle with the vault. A single search bar, all content, immediate filters, live results.

Unified multi-content search

One bar, all content, no more “Where did I put that again?”.

  • Multi-type full-text search — files, cards, links, embeds, notes — all indexed.
  • Filter by type — limits search to files, cards, links, or embeds.
  • Filter by tag — restricts search to tagged content.
  • Live results — instantaneous AJAX, no page reloading.

Pagination & progressive loading

Even with 1000 files, the vault remains smooth.

  • Load-more documents — batch loading, without clicking through pagination.
  • Load-more cards / links / embeds — same logic for other types.
  • AJAX pagination — results in packets of 20, without refreshing.
  • FC multi-source search — the bar also searches within the Fluent Community.

12

Solo

API, webhooks & developers

The entire vault is code-driven. If you have an IT person or a developer, they can connect your stack in one afternoon.

Everything controllable via code

REST API + signed webhooks + WordPress hooks + native Fluent integrations. Covers 100% of features.

  • Full REST API — clients, files, cards, links, embeds, flows, audit… auth via API key.
  • Webhooks 28+ events — HMAC SHA-256 signed, multi-targets, anti-SSRF, exponential retry.
  • Native WordPress hooks — add_action / add_filter on all events, pluggable capabilities & roles.
  • Zero-config Fluent integrations — FluentCRM, FluentPlayer, Fluent Community auto-detected.

Choose your layer.

Solo if you only need security. Pro if you also need orchestration. Neither depends on a remote publisher.