MyWhistleBox is a secure environment for requesting, receiving, reviewing, and managing documents. This Help Center is designed to support you once you’re signed in and actively using the service.

Here you’ll find guidance on how features work, how to complete common tasks, and how to get the most out of document requests, uploads, and workflows inside your account.

The WhistleBox Tour provides a guided walkthrough of the Explorer interface, highlighting the most important features and controls.

We recommend starting with the Tour if this is your first time using MyWhistleBox or if you want a quick overview before diving into specific help topics.

We have a growing library of concise, 3‑minute videos covering individual features and workflows. These videos are designed to help you quickly understand how to use MyWhistleBox effectively.

You can access the Video Library from the Help Center menu or directly via the Video Library link in the top navigation. Use these videos alongside the Help Center articles or the guided Tour for a complete learning experience.

This Help Center is organized by task and feature. Each section focuses on a specific area of the product, such as uploading documents, managing files, security settings, or advanced features.

Use this page when you have a specific question or need step-by-step guidance. Most answers assume you are already signed in.

To request a document from someone:

1. Click Upload Request in the Explorer menu bar
2. Enter the recipient’s email address
3. Select a Box
4. Add an email message
5. Click Send

The recipient receives a secure upload link (WhistleLink) and does not need a MyWhistleBox account. Uploaded files appear directly in your selected Box.

Fail-safe Tip: If the recipient did not receive their upload request email, you can provide your Whistle Link directly, or as a backup, your Whistle Box Address via our home page upload feature.

A Whistle Link is a secure, shareable web or email link that directs recipients to a specific, protected area of your MyWhistleBox.

Whistle Links allow people to upload, review, sign, or download documents without creating an account or navigating complex login steps, while still remaining within a secure, controlled environment.

No. People who receive a Whistle Link can upload documents, review files, or complete requests without creating a MyWhistleBox account. They interact directly with your secure environment, so sensitive information remains protected while minimizing friction.

For added security, you can require recipients to enter an access code, such as a zip code, last 4 digits of a social security number, or another agreed-upon code. This ensures that only the intended person can view or upload files.

Upload Requests let you request documents from anyone via a secure link. To create one:

• Click Upload Request in the Explorer menu.
• Enter the recipient’s email.
• Select a Box.
• Click Send.

The recipient receives a Whistle Link and can upload documents without creating an account. Files go directly into your selected Box.

WhistlePages are bundled request pages that group multiple upload, signature, or download requests into one link.

Instead of sending separate links, you send a single Whistle Page link guiding the recipient through all required steps. Only available on Professional plans.

Use a Whistle Page when you need to collect multiple documents from one person in a structured way. Use an ad-hoc request for a single, one-off request.

Whistle Pages are designed to provide pre-built, repeatable forms and document collections that can be shared with multiple recipients. Any file not suitable for a publicly facing web page should not be included in a Whistle Page.

Because the file links in a Whistle Page are static and intended for repeated use, it is not recommended to include sensitive or confidential documents.

For sensitive documents, consider using individual Download or Signature Requests with appropriate access controls, which provide better security and tracking.

Possible reasons include:

• Your plan does not include Whistle Pages.
• Your team administrator has not provided access.

Whistle Pages are created using the Whistle Page Designer, a simple wizard-driven tool that guides you through setting up a page for multiple related requests.

Using the designer, you can:

• Create a page that groups multiple uploads, signature, or download requests together
• Set custom instructions and labels for each section of the page
• Send a single Whistle Link that directs recipients to the entire Whistle Page

This approach saves time and ensures a clear, guided experience for your recipients.

Yes.

• Select a Box or folder
• Click the Upload icon above the file pane
• Choose files from your computer or device

Uploaded documents are encrypted immediately and stored securely in your account.

File icons and symbols provide at-a-glance information about a document’s status or properties:

• Hovering over an icon shows a tooltip with a brief explanation.
• Secure files show a padlock icon.
• Other symbols show signatures, notes, or the document’s processing state.

When this setting is enabled and an upload request is fulfilled:

• A folder is automatically created using the sender’s name
• Uploaded documents are placed into that folder

This is useful for professionals managing multiple clients by automatically organizing documents by sender. For best results, require senders to enter their name during upload.

You can create folders to organize documents within your Box. Drag and drop documents to move them, and rename folders to keep your workspace structured.

Yes. Boxes have administrative controls, so renaming is done through the Boxes tab in Account Settings.

Changing a Box name updates its Whistle Box Address and may affect published upload Access Links. Since the Box name is part of the Access Link, any existing links that include the old name may no longer work. This behavior can be used intentionally to retire links, adding a layer of security and control over who can upload to your Box.

Electronic signatures allow recipients to sign documents securely without leaving MyWhistleBox. Signed documents are stored with full audit trails and encryption.

A Signature Request lets you send a signing request to a recipient while keeping the document fully within MyWhistleBox. Key points:

• You initiate the request via the document's action menu.
• Recipients can sign without creating a MyWhistleBox account.
• Optional verification can be required, such as KBA or access codes.
• Audit trails are automatically generated, including timestamps, IP addresses, and signer identity verification steps.
• Documents remain secure and encrypted throughout the process, never leaving the platform.

When sending a document for signature, you can require recipients to verify their identity. Options include:

• Knowledge-Based Authentication (KBA) questions
• Access codes, such as zip code, last 4 of SSN, or another agreed-upon code
• Combination of KBA and access code for added security

These measures ensure that only the intended signer can complete the signature process.

If verification fails, the recipient cannot access the document. You may resend a new Whistle Link or adjust the verification method as needed.

Yes. Using the Send & Sign feature, you can send documents directly to other MyWhistleBox users. Because all activity occurs within the MyWhistleBox environment:

• Documents remain secure and never leave the platform
• Signers verify their identity and complete the signature inside the system
• Audit trails are automatically created for compliance and tracking

This method is similar to inter-bank transfers: everything happens internally and securely, without relying on external email or file delivery.

All document interactions, including uploads, downloads, and signatures, are logged. Audit trails are immutable and encrypted for privacy and compliance purposes.

The only way to share a document with a non-account holder is via a Download Request:

• You generate a secure download request using the documents action menu.
• Recipients do not need a MyWhistleBox account to download the file.
• You can require optional security verification, such as an access code, to control who can retrieve the file.

Yes. Send allows you to securely transfer a document directly from your MyWhistleBox account to another user’s account. This is an account-to-account transfer—similar to an inter-bank transfer.

To send a document, you must know the recipient’s WhistleBox Address, which they provide to you. This ensures documents are delivered securely to the correct account.

Any user can locate their Whistle Box Address by selecting a Box in the folder pane and clicking the @ icon.

For convenience, Whistle Box Addresses can be saved in your Address Book for quick access when sending documents in the future.

Once sent, the document appears in the recipient’s account and is protected by the same security, access controls, and audit logging as all other documents in MyWhistleBox.

Access Links are secure permalinks that provide direct access to specific actions or content in MyWhistleBox. These include links for Uploads, Downloads, Signature Requests, and WhistlePages.

Download and Signature Requests support additional access controls such as verification options and access codes. However, Download and Signature Access Links are intentionally unrestricted by design.

Because Download and Signature links do not require identity verification, they should only be used for non-sensitive, publicly shareable documents, such as:

• Non-disclosure agreements (NDAs)
• Terms & conditions
• General consent or disclosure forms
• Other documents that are not pre-populated with personal data

Anyone with the link can access the document, so it is important to share these links thoughtfully. If a link is no longer appropriate, it can be retired by regenerating or removing it.

When used correctly, Access Links provide a simple and effective way to distribute standard documents without exposing sensitive information.

Only you and team members (Team Edition required) who you explicitly provide access. For team members, you control permissions and can revoke access at any time.

Yes.

• All uploaded documents are encrypted and stored using anonymous identifiers
• Documents are decrypted only during authorized, signed-in user actions
• Encryption prevents unauthorized access, and anonymous labeling prevents identification by filename

Always protect your account with a strong password and multi-factor authentication.

Only with your permission.

• By default, MyWhistleBox employees and contractors cannot view document contents
• Documents remain encrypted and inaccessible to support staff
• Access can occur only if you explicitly authorize support to assist with a specific issue

Support staff may see limited account metadata (such as email address or plan type) to help with account-related questions, but document access is always user-initiated and temporary.

MyWhistleBox protects documents using multiple layers of encryption and access controls.

• Documents are encrypted both at rest and in transit
• Optional access controls (such as access codes or verification steps) can be required for downloads, and signatures
• Only authorized users or recipients can interact with a document

MyWhistleBox automatically logs key interactions with your documents, including uploads, downloads, and signature activity.

Audit logs are visible only to the account holder and authorized team members, providing a clear record of document access and actions.

MyWhistleBox separates administrative settings into two areas:

• Account Settings — application-related preferences such as Boxes, notifications, and other workflow options
• Security Settings — authentication and protection settings including email address, password, multi-factor authentication, and your support PIN

This separation helps keep security controls isolated from day-to-day application settings.

Security Settings control how you authenticate and protect your account. From here, you can manage your email address, password, multi-factor authentication, and support PIN.

Certain changes may require verification before they take effect.

If you’re unable to sign in, use the Forgot Password link on the login page to reset your credentials.

For additional protection, enable multi-factor authentication in Security Settings.

Notification preferences are managed from Account Settings and allow you to control which system and activity emails you receive.

By default, MyWhistleBox sends Upload Requests, signature requests, and system notifications using our own email servers.

Emails are delivered securely and appear to recipients as coming from a MyWhistleBox domain. This option requires no setup and works immediately.

For a more branded and professional experience, you can configure MyWhistleBox to send emails through your own email domain (for example, notifications@yourcompany.com).

This improves recipient recognition and can help reduce spam filtering. Supported providers include Google Workspace and Microsoft 365.

Email server configuration is technically involved and often requires administrator-level access. We provide detailed, step-by-step documentation with screenshots to guide the process. We recommend having your email administrator complete this setup.

As part of our Jumpstart programs, our team can configure this for you and include onboarding and training time.

If recipients are not receiving emails, first confirm which delivery method you are using:

• Native MyWhistleBox delivery: Emails are sent securely via our servers. If a recipient doesn’t see an email, it may have landed in their spam/junk folder or been blocked by their email provider. There is little we can do beyond suggesting they check spam filters.
• Custom email server (Google, Microsoft 365, or other SMTP): Verify authentication credentials by sending a test email using the Test button. Review server settings, ports, and provider documentation, since incorrect setup can prevent delivery. Google and Microsoft no longer support Basic Authentication.

If troubleshooting a custom email server fails, you can temporarily revert to the default MyWhistleBox delivery to ensure emails are sent.

Zapier allows you to automate simple workflows between MyWhistleBox and other applications. Common examples include triggering actions when documents are uploaded or received.

Zapier functionality depends on API access. An API key is required, which is available only with an Enterprise plan.

Basic Zapier actions may be available for limited use cases, but advanced automation and custom workflows require full API access.

Yes. MyWhistleBox provides API access for advanced integrations and custom workflows. API access is available with Enterprise plans.

API keys can be generated only when API access is enabled on your account. Full documentation and examples are available on the Developer pages.

MyWhistleBox provides APIs and webhooks that allow developers to programmatically manage document requests, uploads, and system notifications.

API and webhook access are available with Enterprise plans only. API keys can be generated once API access is enabled on your account.

Full documentation, examples, and setup details are available on the Developer pages.

Red contacts indicate invalid Whistle Box Addresses:

• The contact changed their Box name
• The username no longer exists

To resolve this, you will need to contact the other party and obtain their updated Whistle Box Address before sending requests.

Upload issues are rare, but if they occur, common causes include:

• Temporary internet connectivity problems
• File sizes exceeding allowed limits
• Unsupported file types

Retry after checking your connection. If the problem persists, contact support.

For best performance, use modern browsers such as Chrome, Edge, or Safari. Clear your browser cache periodically and avoid unsupported plugins or extensions.

Go to Account Settings to see your active subscription, usage, and available features.

Use the User menu -> Upgrades to select a new plan, update options, or modify your credit card. Changes take effect immediately, and any billing adjustments are applied with proration.

Emailing our support team, or

Submitting a request through our online contact form

Once we receive your request, a member of our team may reach out to better understand your needs and see if we can help resolve any issues before your subscription ends.

Please note that cancellation requests submitted less than 48 hours before a scheduled renewal may not be processed in time to prevent the renewal.

Your files remain in your account. Certain features tied to higher-tier plans, such as Whistle Pages or automated organization, may no longer be available. You can continue accessing existing documents, but new uploads may be restricted if you exceed the downgraded plan's storage limits.

Stopping your subscription reverts your account to the basic free plan. You will retain access to your files until they are eventually deleted according to our retention policy. No active subscription means advanced features will no longer be available.

Files are stored according to plan limits and regulatory requirements. You can delete files manually at any time. Otherwise, files are permanently deleted when your account is closed or after the applicable retention period expires.

Email support@mywhistlebox.com or use the in-app support form.

Include your username, affected Box or document, description of the issue, and any error messages or screenshots.

Support typically responds within 24 hours for standard requests. Critical issues are prioritized for faster resolution.