Jump to a section
Before you begin
Sharing must be enabled for both accounts and the owner must have unlocked end-to-end encrypted Cloud Sync.
What is shared—and what is not?
Sharing is not the same as Cloud Sync. Your regular end-to-end encrypted Cloud Sync remains private to your account. An invitation by itself shares no financial records. Where an approval-gated sharing feature is enabled, the owner decides which recipient may decrypt a specific, separate encrypted projection. Nobody receives the owner's 43-character recovery secret.
1. Prepare two independently protected accounts
- Both people sign in to their own Cashflow Pilot accounts and unlock their own encrypted financial sync.
- Open Settings → Sharing & Access, if the option is available to your account.
- The intended recipient registers their sharing identity and provides the account identifier and public-key fingerprint.
- Verify that fingerprint with the intended person by a separate trusted communication channel. An account name or a server-supplied fingerprint alone is not proof of real-world identity.
2. Send and accept an invitation
- Choose the recipient's role: Spouse for authorized Personal/Portfolio scopes or Accountant for Business only.
- Choose the specific allowed scope and create the consent-only invitation. Do not choose unrestricted access.
- Share the invitation code privately. The recipient signs into their own account to accept or decline.
- Acceptance records the invitation; it does not independently publish financial data.
3. Publish only the records you want
For a spouse, select the particular Personal transactions or Portfolio holdings in the read-only snapshot workflow and review the exact allowed fields before confirming. A previously published snapshot does not automatically become a continuously updating view. A new selection and publication may be required.
Accountant collaboration has additional independent Business grants, approvals and validation; it is not the same as spouse read-only snapshots. Read the accountant guide.
4. Review and revoke
Review the invited account, scope, status and expiration. Revoke an invitation or grant when no longer needed. Revocation blocks future authorized reads and edits but cannot erase information an authorized person previously saw, copied or downloaded.
If the sharing controls are not visible
Sharing is privately gated and may require administrator permission, a supported app build and a completed encrypted sync unlock for each account. Missing controls are not a reason to disable encryption or send the owner recovery secret. Check Cloud Sync and account unlock first.
More help: Browse the Help Centre →