Expiry and one-time access

Security & access at the bottom of the compose screen has two settings. They work independently: whichever condition is met first closes the link.

The Security and access panel with a one-time access toggle and link expiry choices of 7 days, 14 days, 30 days or never.

Link expires

Four choices: 7 days, 14 days (the default), 30 days, or Never. Unlike a signature workflow you cannot pick an arbitrary date.

Shorter is better where you can manage it. A link nobody can use any more is one fewer thing to worry about, and the recipient's download is the only thing you actually need to happen.

Never means never

A transfer set to Never stays open until you revoke it by hand. Reasonable for something a counterparty needs indefinite access to; a poor default for anything sensitive.

One-time access

Off by default. Turn it on and the link closes automatically after the first successful download, and the transfer moves to Consumed.

It is the tighter of the two controls: the file is reachable for exactly as long as it takes the right person to take it once, regardless of the expiry date.

Warn your recipient first

One-time means one attempt at keeping the file. If they download it somewhere awkward, a work laptop they are about to hand back, a phone with no storage, they cannot come back for it. The download screen tells them, but a line in your message helps.

Which to use

Situation	Setting
Sensitive, one known recipient	One-time on, 7 days
A pack several people need to work from	One-time off, 14 or 30 days
Something a counterparty may need to re-download later	One-time off, 30 days
You genuinely cannot predict	One-time off, Never: then revoke when done

Either way you can close a transfer early. See Revoke a transfer.