Help centre | Article
Workplace access links
How organisations interact with invoices and bookings by email, and how you respond.
What a workplace access link is
Every invoice email and booking-confirmation email Sessional sends on your behalf carries a 30-day signed URL. The recipient clicks through and sees a Sessional-branded page with the invoice or booking detail. No account creation, no login, no password. The URL itself is the authentication. Invoice emails and their links are part of free Basic, while booking-confirmation emails are on Plus; the Sessional pricing page compares the plans.
Invoice URLs end in /w/inv/<token>. Booking URLs end in /w/bkg/<token>. Booking-schedule URLs end in /w/bc/<token>.
What the organisation can do
How Mark paid actually works
Note
This two-step flow keeps your records clean. The finance team can be wrong about the invoice, the amount, or the reference. Mark paid is a signal, not an automatic state change.
How disputes work
A dispute from the organisation does three things.
- Creates an open dispute record on the invoice or booking
- Pauses automatic chasing while an invoice dispute is open. A booking dispute does not pause invoice chasing.
- Sends you an in-app notification naming the organisation, the invoice and the amount. For an invoice dispute or a paid claim you are emailed too, unless you have switched off Invoice reminders in your notification preferences
For an invoice dispute, press Accept dispute and raise a corrected invoice, or Reject dispute and let eligible reminders resume. The organisation is not emailed about your decision, but its link shows the outcome: a rejected dispute reads as reviewed and still payable, an accepted one tells them not to pay that invoice, and once you have voided it and sent the correction the old link names the replacement.
Revoking a link early
A sent invoice that is still open has a Withdraw the organisation's link button. Use it if you sent the invoice to the wrong email address or need to withdraw the link early; it asks you to confirm first. Restore the organisation's link undoes it and gives you a fresh link with a Copy button. That fresh link is not emailed for you, and earlier links stay withdrawn, so share it with the organisation yourself.
Booking schedules work the same way. The Booking schedules sent panel at the foot of your Sessions or Shifts page lists every schedule you have emailed to an organisation, each with a Revoke link control (and Restore link to undo). A revoked schedule link shows the organisation a withdrawn message and can no longer be acknowledged.
Note
Security model
Workplace links are signed on Sessional's servers with an HMAC secret and an expiry. They cannot be forged or guessed.
If the recipient forwards the link, anyone with the URL can view that invoice or booking, but nothing else in your account.