Protected viewing
The recipient opens the supported PDF through the protected viewing flow.
Certified Send
Certified Send combines protected PDF viewing with proof of access. Use it when a sensitive document needs a more deliberate delivery workflow than an ordinary attachment.
No phone number or email required for core Hat use.

The useful difference
The recipient opens the supported PDF through the protected viewing flow.
The workflow records access evidence so you can review the delivery interaction.
Need a returned signature? Use Signature Request or Verified Digital Signature instead of treating opening as signing.
How it works
Attach a supported PDF in the channel and review its security options.
Choose Certified Send and review the requirements before sending.
Use the available proof after the recipient completes the access flow.
Know the boundary
Proof of access does not prove comprehension, agreement or legal acceptance. Protected viewing cannot prevent every external photograph or compromised-device capture. Confirm the evidence fields and legal requirements for your use case.
Review the security evidenceQuestions, answered
Open City of Hats to review the controls available for your client, content and plan. The app shows applicable requirements before you proceed.
Verify the recipient, use a supported device and choose appropriate access and retention rules. Review the Security Evidence Center for boundaries and evidence status.
City of Hats is free to use. Feature availability and limits vary by plan and client. Premium is optional; review current limits in the app or on the plans page.
Explore what matters next
Start with a Hat
Start free. Choose your controls as the work requires them.