Current Release
1.5.0
New features: public API, organization labels
New Features
- The encryption key can now survive tab reloads (persistance with 2 AES-256-GCM layers, client+server side)
- Public API: organizations can now drive Retyc from their own tools.
- Organization labels: classify your transfers and datarooms, and attach rules to each label.
- Choose who can receive a labelled transfer: nobody outside the organization, a list of allowed domains, or members only.
- Allow or forbid recipients without a Retyc account, and external members in datarooms.
- Cap how long a labelled transfer can stay available.
- Pick a default label so every new transfer and dataroom carries one, and archive a label once it has been used.
- Labels are visible to everyone who sees the transfer or the dataroom, recipients included.
- Domain restriction: blocked domains are now rejected when a transfer is created and when someone is invited to a dataroom. Members of your organization are never blocked.
- Member management: a new member page gathers everything the organization knows about an account, its identity, encryption keys, membership type and recent authentication events, with all the admin actions in one place.
- Export your organization data to CSV or JSON (members, datarooms, transfers).
- Display SSO configuration in the organization settings.
New changes
- Dataroom ownership can be handed over to another administrator of the organization, storage accounting included.
- Choose how long dataroom activity events are kept.
- Owners can now delete their own transfers whatever their state.
- Pick which columns to display in the dataroom and deposit lists.
- Disabled transfers are now flagged with a warning badge.
- A dedicated error page in the app, plus responsive and layout fixes across the organization pages.
Breaking changes
- Inviting someone to your organization no longer takes effect while their account is still being created. The invitation applies once the account exists.
Security improvements
- MEDIUM A transfer sent without a passphrase now requires the recipient to be signed in as the intended recipient.
- MEDIUM Closed several ways around the restriction on recipients without a Retyc account.
Bug fixes
- MEDIUM Removing a member now always takes effect, even if the operation has to be retried, and the member is signed out of the organization right away.
- LOW Fixed errors on the billing pages for organizations without an active subscription, and for plans granted outside self-service billing (Enterprise plan / on-premises instances)
- LOW Prevent create/update encryption keys when multiple tabs are in key management page.
Performance improvements
- Authentication events are loaded only when the panel is opened, making the member page faster to display.
- Lower memory usage on the background task infrastructure.
Under the hood
- Reorganized the backend to separate the app-facing routes from the public API.