The offer letter is the most consequential document your hiring process produces — and the moment it matters most is usually the moment you lose sight of it. The letter is drafted, converted to PDF, attached to an email and sent. From that point on, the company knows nothing.
Did the candidate open it? Has it been forwarded — to a friend, an agency, a competitor's HR desk? When the acceptance finally comes, which version is being accepted: the letter you sent last week, or an earlier draft from a negotiation round that moved on without them? A PDF cannot answer any of these questions, because a PDF is not a process. It is a file.
There is a better way to share an offer, and it is not a better attachment. It is a private accept/decline link — one live offer, visible to one candidate, under your control from the moment it goes out to the moment it is accepted, declined or revoked.
What the attachment cannot tell you
Once a PDF leaves your outbox, it belongs to the world. It can be saved, edited, screenshotted and forwarded, and you will never know any of it happened. Most of the time nothing bad comes of this. But when something does go wrong, you find out weeks later, and always at the worst possible moment.
The failure cases are familiar to anyone who has run recruitment for long. A candidate uses your letter to extract a counter-offer from their current employer, with your salary structure as the exhibit. A forwarded copy travels through a professional circle you never intended to brief on your pay bands. A candidate goes quiet, and you cannot tell whether they have seen the offer, are weighing it against another, or never noticed the email at all.
None of this is usually malice. It is simply what documents do when they travel as attachments. The weakness is not in the candidate — it is in the format.
The version problem
Salary negotiation rarely ends on the first draft. Terms move, a joining date shifts, a designation is corrected, an allowance is added — and each round produces another PDF. Somewhere in that trail sits the version the candidate believes they accepted, and it is not always the version you believe you issued.
When the mismatch surfaces, it surfaces at the worst possible time: on joining day, or at the first payroll run, in front of a new employee who now feels misled. HR digs through sent folders, reconstructing which attachment went to whom on which date. There is no clean record — only competing inboxes and competing memories.
With a link, there is exactly one live offer. When terms change, the offer behind the link changes, the superseded version is retired, and the trail shows who approved what and when. There is nothing to reconstruct, because nothing was ever scattered.
What a private link closes
A private accept/decline link turns the offer from a loose document into a controlled step in your hiring pipeline. You see when the offer was viewed. Acceptance or decline is recorded as an action — timestamped, attributable, sitting on a clean audit trail — rather than inferred from a scanned signature on page four of a reply.
The candidate's side improves just as much. They see a clear, current offer and two honest choices. There is no printing, signing, scanning and re-attaching, and no ambiguity about what saying yes means or when they said it.
For the company, the audit trail is the quiet prize. Months later, when anyone asks what was offered, when it was seen and when it was accepted, the answer is a record — not a memory, and not an argument.
An offer should be something you issue and control — not something you attach and hope.
The candidate reads the signal
Offer stage is also where your best candidates are judging you. They are usually holding more than one conversation at once, and the company that looks organised at the moment of commitment starts the employment with credibility already in the bank.
A clean link carrying current terms and a clear deadline signals a company that runs its affairs properly. A trail of attachments in three versions, followed by a phone call asking whether the mail was received, signals the opposite. Candidates notice — and the strongest candidates, the ones with options, notice most.
None of this asks the candidate to install anything or learn anything new. A link opens where they already live — on their phone, in one tap.
Revoke, don't chase
Every offer has a shelf life. A deadline passes. A budget is withdrawn. A better-suited candidate accepts first, or the terms need to change materially. With a PDF, your only recourse is an awkward email asking the candidate to disregard the earlier attachment — which they still possess, and can still produce.
A link is simply revoked. The offer stops being accessible, the audit trail records that it was withdrawn and when, and no orphaned document keeps circulating with your company's name and pay structure on it.
You will not revoke often. But the fact that you can changes behaviour on both sides of the table: deadlines start meaning something, and offers are treated as the live commitments they are.
How this works inside a real pipeline
We built offers this way in Vensar ATS, the end-to-end recruitment platform we delivered for a multi-vertical construction company — five verticals, every designation tier, every exception mapped into the system. Offers sit at the end of a pipeline that runs screening → document verification → salary negotiation → offer → joining.
When negotiation closes, the approved terms become a private accept/decline link shared with the candidate. Candidates are kept informed automatically over email and WhatsApp from first contact to joining day, so the offer never arrives out of the blue and the file never goes quiet afterwards. Every view, acceptance, decline and revocation is audited.
The platform as a whole saved the company 70% of the time and effort in hiring. The offer link is a small piece of that — but it closes the loop at the exact point where hiring becomes a commitment. If your offers still travel as attachments, that loop is still open. You are just finding out the hard way.