EntryFoundry Lite supports private, capability-gated, and signed-token document access modes. Select the least permissive mode that still supports the recipient workflow.

• Private: use when only authenticated, authorized users should access documents.
• Capability-gated: use when access maps to a WordPress capability.
• Signed token: use when a recipient needs a generated link without a WordPress login.

Do not publish direct document links in public content when a PDF contains personal or confidential data.