We are very careful with sensitive information. If the client is concerned with allowing website access, we would prefer to send the files for upload on their end.