External links and how they are secured
Updated Aug 31, 2026
GIG sends people to pages that need no account: a form to fill, an approval to answer, a profile to correct, a document to read.
What the link is
A long random address. It is not a login and carries no account. Anyone holding the link can open that one page and nothing else.
What it can reach
Exactly the fields that page is for. The list of what may be read or written is fixed on the server, so a link can never be used to reach the rest of a record.
Treat the link like a key
Anyone you forward it to can use it. Every link expires, and can be revoked before it does.
External links GIG sends
| Link | What it opens | Expires |
|---|---|---|
| Approval link | One approval request, to be answered. | Yes |
| Self-update link | A person’s own details, limited to the fields you allowed. | Yes |
| Gig link | One gig, for the person rostered onto it. | Yes |
| Document share link | One document, to read. | Yes — always. A share link cannot be permanent. |
| Published wiki | A whole cluster on the open web. | Only if you set an end date. A help centre is a permanent presence by default. |
| Form link | A published form, for anyone to fill in. | When you unpublish the form |