Retyc for accounting firms
Secure transfer and datarooms for accounting firms. Strengthen the protection of your financial data technically, hosted in Europe.
Use cases
Your everyday use cases
Retyc Box to receive documents from your clients, Retyc Transfer to send filings and payslips, Retyc Collaborate for your audit datarooms. Three products that follow the firm's calendar, from collecting documents to closing the accounts.
Secure intake of client documents
With Retyc Box, dedicate a drop address to each client for balance sheets, bank statements, receipts and tax packages. No more squeezing a full filing into an attachment.
Sending filings and payslips
With Retyc Transfer, send tax returns, payslips and year-end documents to your clients under encryption. Automatic expiry and download traceability.
Working with fellow professionals
Bring a colleague or a specialist into a complex file, with the level of access that suits them. Access is withdrawn as soon as the engagement ends.
Professional secrecy
Back your duty of secrecy with technology
Accountants are bound by professional secrecy and strict confidentiality obligations. Retyc rests that protection on technology rather than on contract alone: an architecture that can be verified cryptographically.
Zero-knowledge architecture
Encryption runs on your side, before a document leaves the firm. Balance sheets, payslips and bank details reach us in a form we have no way of opening.
Native GDPR compliance
The payroll data and bank details you handle are among the most sensitive the GDPR covers. They travel encrypted, which limits what an incident on our side could ever expose.
Full traceability for audits
Every access and every transfer is timestamped and tied to a person. On the day of a professional inspection or a client dispute, you have what it takes to establish your diligence.
A tool for your duty of confidentiality
Professional secrecy remains your obligation, not ours. Our share of the work: making sure the tool is never the place a leak comes from.
Features
Features designed around your work
Functions shaped by how a firm actually works: one file per client, documents arriving out of order, and retention periods to honour.
Customisable intake links
One link per client or per file, reused from one financial year to the next. The client drops their documents with no account to create and no software to install.
Organised by client file
Create dedicated datarooms per client or per engagement. Every document in one place, encrypted and sorted.
Automatic versioning
A new version does not replace the previous one, it is added to it. The full history stays available for the retention period that falls to you.
Access control and expiry
You decide who views, who downloads and who uploads. A one-off transfer gets a date past which it simply stops existing.
Compliance
Sovereignty and secure retention
Your retention obligations run for years. Worth knowing where the documents sit, under which law, and with what assurance of finding them intact.
Hosted exclusively in Europe
Everything is stored in Europe, at Scaleway, whose certifications cover ISO 27001 and the hosting of health data. American extraterritorial legislation therefore has very limited purchase.
Storage that holds over time
Encrypted storage replicated across three data centres, suited to documents you must keep for several years. We do not, however, claim evidential archiving.
Protection matched to your retention periods
Encryption relies on hybrid keys, built to hold against the quantum attacks known today. A tax package intercepted now is meant to stay unreadable for its whole retention period.
A DPA for your firm
A GDPR-compliant data processing agreement, to file with your own records as much as with the requirements your clients send you.
Client experience
Make life simpler for your clients
Your clients only have a link to follow to send you their documents. Security is handled without them having to think about it, or to understand how it works.
A simple client experience
Your clients click the link, drop their documents, and that is that. No account to create, no software to install.
Built-in guidance
Each drop link carries its own instruction, along the lines of “your supplier invoices for the quarter”. The client knows what is expected without having to call you back.
Notified on arrival
A notification goes out as soon as a client files a document. You chase the ones still missing, not the ones who already answered.
One less question at signing
When a client asks how you protect their accounts, the answer can be demonstrated rather than asserted. That shortens a conversation which often drags.
Ready to secure your exchanges?
See how a firm collects documents from its clients, sends out its filings and keeps a record of everything, without changing how it is organised.
Frequently asked questions
Retyc at the firm, in a few answers.
You create a drop link, possibly one per client or per file, with an instruction along the lines of “please file your December bank statements”. Your client follows the link, drops their files, and you get a notification. Nothing to install on their side, no account to open.
Encrypted blocks, and nothing else. Encryption runs on your side before sending and the key is never passed to us, so a balance sheet, a payslip or bank details stay unreadable, including to our own administrators.
Each dataroom keeps a timestamped log of accesses and downloads, which you pull out as CSV. Its contents are encrypted too. On the day of an inspection, the history speaks for you.
Yes. It counts within your processing chain: on your clients' payroll data, the firm is the processor and we are your sub-processor. The DPA and the list of our own subprocessors are published, enough to document that chain without having to ask us.
A dataroom does not expire: it stays open for as long as you keep it, which suits the retention periods that fall to you. A transfer, on the other hand, carries an end date you set when sending. Both count towards the storage in your plan.
Yes, at Scaleway, on European foundations. No American or Chinese hyperscaler takes part in the chain, and the host's certifications are listed on our security page.