ENNL
Menu
← All articles

Coachee portal: how it works and what coaches need to arrange

Coachee portal: how it works and what coaches need to arrange

Coachee uses secure portal access

A coachee portal is a secure online environment where a coachee logs in to view goals, progress, assignments, and shared documents. For coaches, this means less hassle with email and more overview throughout the process. It only works well if its security and GDPR responsibilities are properly arranged, because a coach who processes client data bears responsibility for it.

In short:

  • A well-secured portal includes MFA, which makes accounts almost impossible to crack, and must fit within the GDPR rules with a written data processing agreement.
  • Selecting a portal requires asking targeted questions about features, ease of use, hosting in the EU, and sound security management, before taking out a subscription.
  • For secure onboarding, it is important to set up MFA, roles, and access rights in advance and to give coachees brief instructions for a higher intention to use it.
  • A central place for goals, documents, and progress provides overview and prevents important information from getting lost between sessions, making the coaching more efficient.
  • When choosing a portal like Exantur, a 14-day trial period offers the opportunity to test features such as security, integrations, and usability in practice.
Exantur
Give coachees one clear place
Exantur connects goals, progress, check-ins, assignments, and documents in one secure workspace for coaching journeys.
Explore Exantur

Table of contents

What is a coachee portal and what roles are there

In a coachee portal there are two roles. The coach manages the journey: they set goals, share assignments, and track progress. The coachee logs in themselves and uses the portal to follow their own journey, without the coach having to forward everything manually.

Most portals offer a fixed set of basic features that let a coachee get started right away:

  • Log in to a personal, secure page with their own profile.
  • View goals and progress recorded by the coach.
  • Complete check-ins between sessions.
  • Access shared documents and assignments in one place.

The difference from email or separate Word documents is clear: everything is in one central, searchable place. A coach no longer has to dig through an inbox looking for the latest document that was ever sent. That saves time and prevents important information from getting lost between sessions.

Which features make a coachee portal truly useful

Not every portal with a login screen helps a coach move forward. The features that really matter touch directly on how a journey unfolds and how easily a coachee works with it.

  1. Goals and progress: a coachee sees at a glance where they stand, which helps with motivation and accountability between sessions.
  2. Check-ins: short, recurring moments for a coachee to reflect, so the coach goes into the next session prepared.
  3. Assignments, courses, and shared documents: everything is linked to the right journey, without loose attachments.
  4. Searchable session notes and assessments: observations, insights, and action points stay findable, as do the outcomes of assessments such as a DISC profile or the Wheel of Life.
  5. Mobile access: a coachee who wants to log in quickly while on the go should be able to do so without hassle.
  6. Integrations with calendar, video conferencing, and invoicing: this avoids double work when scheduling sessions and sending invoices.

Pro tip: ask a coachee after the first session how the portal feels. Small friction in usage is often the reason a portal goes unused after a few weeks.

Security and privacy: what coaches need to arrange with an online portal

A coachee portal contains personal and often sensitive information: goals, notes, progress. That makes security not a side issue but an obligation.

Multi-factor authentication, or MFA for short, is one of the most important measures here. MFA requires at least two different types of proof when logging in, for example a password plus a code on your phone. Two passwords in a row do not count as MFA, as the Dutch Data Protection Authority explains: the factors must genuinely be of a different type.

MFA makes an account considerably harder to crack than a password alone, because an attacker would then also need access to a second factor, such as the coachee's phone.

In addition, the GDPR comes into play as soon as a coach processes coachees' personal data via a portal. The coach is usually the data controller here and the software provider acts as the processor, as the EDPB describes. That means there must be a written data processing agreement between coach and provider.

A few practical points that go with this:

  • Carry out a risk analysis of what could go wrong with coachees' data.
  • Keep evidence of the measures taken, as this is the accountability obligation described by the Dutch Data Protection Authority.
  • Check whether the provider hosts within the EU, as this simplifies the legal side of data processing.
  • Use strong, unique passwords and explain to coachees why they should not reuse passwords.

How to choose a coachee portal: checklist and questions for providers

When choosing a portal, it helps to look not only at features but also to ask the provider targeted questions.

  1. Does the system offer MFA, and how is a potential data breach reported?
  2. Is a data processing agreement available, and does the system help with maintaining a record of processing activities?
  3. Are there audit logs, so you can see who accessed which data and when?
  4. Does the portal support assessments, session notes, calendar and video call integration, and invoicing?
  5. How easy is it for a coachee to log in and use the portal themselves without explanation?
  6. Is there a trial period or demo to test this in practice before taking out a subscription?

These questions prevent you from finding out afterwards that important items, such as a data processing agreement, can only be arranged later.

Practical onboarding and implementation steps for coaches

Before coachees log in for the first time, it is wise to set up a few things. This prevents security and GDPR matters from being added on later.

  • Make sure the data processing agreement with the provider is signed and that you know what it says.
  • Make MFA mandatory for both coach and coachee accounts before going live.
  • Define roles and access rights: who sees what, and who is allowed to change what.
  • Briefly explain to coachees how the portal works and why MFA is needed.

Pro tip: include a short, simple one-page guide with the invitation. Coachees who know immediately what to do log in more often and more quickly.

Why a secure portal improves a coach's work

A well-set-up portal makes a coaching relationship clearer: you see at a glance where a coachee stands, without searching through old emails. The biggest risk rarely lies in the technology itself, but in human behavior: a reused password or a missed explanation about MFA. So devote just as much attention to brief training for coachees as to choosing the system.

— Martijn

Exantur as a ready-made coachee portal for coaches

There are coachee portals in which coachees view their goals and progress, complete check-ins, and have access to shared documents, assignments, and assessments such as DISC and the Wheel of Life. The coach's session notes, recorded as observations, insights, and action points, remain searchable and linked to the right coachee.

Good coaching software handles things like hosting in the EU, a data processing agreement, and MFA, giving coaches a solid foundation for GDPR-aware data processing. Calendar synchronization with Google Calendar and Outlook, video conferencing, and invoicing via your own Stripe account may also be possible, without commission.

Want to try this yourself? Exantur offers a free 14-day trial period at no cost during the trial, which you can start via the subscription page. Use that trial to check the questions mentioned above for yourself, from MFA to the data processing agreement.

Exantur as a ready-made coachee portal for coaches — overview diagram

Sources

For more background: the ENISA guide for small organizations and the GDPR checklist for coaches with concrete steps for the accountability obligation.

Frequently asked questions

What is the difference between a coachee portal and email?

A coachee portal collects goals, progress, assignments, and documents in one secure place, whereas email produces separate messages without a central overview. That makes a portal clearer and easier to search for both coach and coachee.

Is the coach or the software provider responsible for privacy?

The coach is usually the data controller and determines the purpose and means of the processing, while the software provider acts as processor according to the EDPB. That is why there should be a written data processing agreement between the two parties.

Why is MFA needed in addition to a strong password?

MFA adds a second, different type of proof alongside the password, such as a code on your phone, and that makes an account harder to crack than with a password alone, as the Dutch Data Protection Authority explains. Two passwords in a row do not count as MFA.

Does software automatically make a coaching practice GDPR compliant?

No, software such as a coachee portal supports GDPR-aware data processing, but using it does not automatically make a practice fully compliant. The coach remains responsible for carrying out a risk analysis, having a data processing agreement, and documenting the measures taken.

What does a coachee portal like Exantur cost?

Exantur offers various subscriptions, including options that can be paid monthly or annually, as can also be seen on the pricing page. A free 14-day trial period is also available to test the portal first.

Recommendations