safedrop Updates September 2026: Team Controls, Editing, Passwords and Read Receipts

Share on facebook
Share on twitter
Share on linkedin
Share on email

If your team sends contracts, case files or resident data outside your organisation, three things matter. You need to know the file arrived. You need to correct mistakes without starting over. And you need your Team to keep running when someone is away or leaves.

Since July we’ve shipped changes aimed at each of those to our flagship safedrop 2026 service.
The basics are unchanged:

  • Recipients still open a safedrop without an account or installation.
  • Our zero-knowledge encryption means we still can’t read what you send.
  • Every send still leaves an exportable audit trail.


Know when it’s been received

Read receipts by email

Since mid July, you can choose to get an email within seconds of a recipient opening a safedrop or downloading a specific file. This helps when a transaction is waiting on a signed document, or when a deadline depends on a client or resident having received a notice.

A receipt tells you the link was opened or the file was viewed or downloaded. Obviously it doesn’t actually tell you if the recipient really read the document or did anything, but you’ve got proof of delivery.

Keep receipts out of your inbox

Every receipt email starts with “[safedrop]” in the subject line. That makes it easy to set up an Outlook rule that files them into their own folder.

Full pdf  delivery record

When the safedrop expires, we also send you a signed PDF with the entire record of all activities for that message – most of our clients will auto file this in case it’s needed in future. This report is also always available in Track safedrops.  It includes timestamps, recipient activity and file checksums, and you can export it as a digitally signed PDF. Our customers have relied on these records in legal proceedings.

Correct a safedrop without resending it

Since 23 July, a sent safedrop no longer has to be final. You can:

  • edit the message text
  • add or remove files
  • shorten the expiry date

The recipient uses the same link throughout, so nobody has to start again.

If you attached the wrong version of a contract, or the other side asks for one more document, update the safedrop you already sent. Shortening the expiry suits conveyancing teams who want to close access once completion has taken place. You can still expire a safedrop manually and send a new one if you’d rather start fresh.

Every edit is recorded in Track safedrops alongside the file activity. The audit trail shows what was originally sent, what changed and when. A corrected safedrop never overwrites its own history.

Team controls that don’t depend on one person

Appoint a second administrator

From 21 September, Teams can add a second administrator through the admin panel. Until now, a Team with one administrator had a single point of failure. If that person was on leave, off sick or had left, nobody could manage users or settings.

We recommend every Team appoints two administrators.

This is vital in case an administrator leaves, goes on holiday, etc.

Suspend users the moment someone leaves

Since 2 September, administrators can suspend a user directly from the admin panel, with no support request needed. A suspended user can’t send or open safedrops. Their historic audit records stay intact for compliance purposes.

Send from a shared mailbox, with individual attribution

Since 7 August, Teams can send from a shared address such as conveyancing@ or enquiries@. Recipients see one consistent, recognisable sender. Internally, your audit log still records which named user sent each file, so the convenience of a shared address doesn’t cost you individual accountability.

Simpler sending

A cleaner send page

From 21 September, the send page has a simpler layout. You can also paste a list of recipient addresses in one go, which helps when you’re circulating a consultation document to councillors or a set of stakeholders.

New cleaner send interface takes up less space and hides settings you rarely change

 

Password plus one-time passcode

 

Also from 21 September, you can combine a password with a one-time passcode. Passwords work best when you’ve already agreed access with the recipient by phone or in person. For everyday sends to new contacts, email verification remains the practical default.

Accessibility improvements

On 25 July we improved keyboard navigation and screen reader support across parts of the send and tracking screens. This work is ongoing.

Security hardening

Releases on 4 and 27 August strengthened underlying security controls. As a rule, we don’t publish detail on individual security changes. If you need information on specific controls for a DPIA or a procurement questionnaire, contact us at hello@safedrop.com and we’ll take you through it.

More control, no extra steps for recipients

Everything above adds oversight for the people managing sensitive sends. None of it adds steps for the people receiving them. For legal teams and councils, the result is:

  • fewer resends
  • a clearer record of when a recipient has engaged with a file
  • a Team that doesn’t depend on one administrator being available

Frequently asked questions

Can I edit a safedrop after sending it?
Yes. You can edit the message, add or remove files, and shorten the expiry. Every change is recorded in Track safedrops. Removing a file can’t be undone.

Can I use a password and a one-time passcode together?
Yes, since 21 September. Passwords are best for pre-arranged sharing rather than as a default for everyday sends.

Where do I find read receipts and the audit trail?
Receipts arrive by email with a “[safedrop]” subject prefix. The full audit trail, including file checksums, is in Track safedrops and can be exported as a digitally signed PDF.

Can you read what my users send?
No. Zero-knowledge encryption means nobody outside the sender and recipient (and optionally your admins) can read the content.

Do recipients need a safedrop account?
No. Recipients open a secure link without registering or installing anything. You can choose if they’re asked to verify their email address or a use a mobile phone code. This applies to sends from individual accounts and shared Team mailboxes alike.