Retyc for businesses
Sending a contract, receiving job applications, opening a dataroom to an auditor: a company's sensitive exchanges, end-to-end encrypted. In our European cloud or on your own infrastructure.
Use cases
Files that shouldn't go out as attachments
An employment contract, a tender response, the accounts before publication, a supplier's file. Every department has its own. Retyc Transfer to send, Retyc Box to receive, Retyc Collaborate for files several people work on.
Send to a client, a supplier, a partner
With Retyc Transfer, the contract, the sales proposal or the drawings go out as a link that expires on the date you pick. You see when they were downloaded, and you can cut access if it went to the wrong person.
Receive without opening an account for anyone
With Retyc Box, a candidate sends their application, a supplier their certificates, a client their supporting documents. They upload from their browser, and the files arrive encrypted.
Work together on a sensitive file
With Retyc Collaborate, board documents, an audit, a fundraising round or a project with a partner each get their own dataroom. Every participant has a role, whether internal or external.
Exchanges between departments, on record
HR sending payroll data to the payroll provider, finance sending the accounts to the auditor, legal forwarding a signed contract. Every exchange leaves a timestamped trace, in its author's name.
Security
Rules set by your administrators
Encryption protects what's in the files. You still have to decide who can receive them and for how long. Those rules live in your organization's settings, not in an internal memo nobody reads again.
Encrypted without your teams thinking about it
Files are encrypted on the computer before they leave. Your teams have nothing to configure, and the server rejects any key that isn't hybrid.
One rule per label
You sort transfers and datarooms by label, and each label carries its rule: internal recipients only, allowed domains, a cap on how long files stay available. The label is visible to everyone who sees the transfer, recipients included.
Blocked domains
A blocked domain can receive neither a transfer nor a dataroom invitation. Members of your organization are never blocked.
An audit log you can export
Views, downloads and changes are timestamped and tied to their author. You choose how long these events are kept, and you export them as CSV.
Features
What your teams and your IT department will use
Sign-in with company credentials, roles that match how people actually work, and an interface in your name.
Your company SSO
Your teams sign in with their usual account: Microsoft Entra ID, Google Workspace, Okta or any other OIDC or SAML provider. Accounts are matched on your domain names, and you can require a second factor at your provider.
Five roles in a dataroom
Owner, administrator, editor, contributor or viewer. A contributor uploads their own files without being able to touch anyone else's, which suits a contractor or an auditor well.
Upload forms
You list the documents you expect, required or optional, and the other party uploads each one in the right place. You get notified as soon as something arrives.
Your brand, your domain
With the Enterprise plan, the interface takes on your colors and runs on your own domain name. Your partners see your company, not ours.
Deployment
In our cloud or in yours
Most companies use Retyc online, hosted in Europe, with nothing to install. If your data must not leave your infrastructure, the Enterprise plan lets you run the whole platform in-house.
Online, hosted in Europe
You create an account and your teams start the same day. We run the infrastructure, with Scaleway, in Europe.
On-premises, on your infrastructure
The whole platform runs on your servers. Files, accounts and logs stay within your perimeter, and you stay in charge of operations.
A plan that grows with your headcount
You start with a few people and add members and storage when you need them. Datarooms, permissions and history stay exactly as they were when you change plans.
Dedicated support
The Enterprise plan comes with dedicated support and service commitments written into the contract. We also help you connect your SSO and your tools.
Sovereignty
Your data stays under European law
When a client or your DPO asks where the files go, the answer fits in one sentence: in Europe, with a European host, or on your own servers.
Hosting and authentication in Europe
Online, storage and the authentication server run with Scaleway, in Europe, on ISO 27001 and HDS certified infrastructure. Your procurement team only has one host to assess.
No US or Chinese hyperscaler
None of the major US or Chinese cloud providers is involved anywhere in the chain. We know who operates every layer of the stack.
Nothing to hand over
Decryption keys never pass through our servers. Even if an authority compelled us, all we could hand over is encrypted blocks.
Public answers to security questionnaires
The DPA, the list of subprocessors and the technical white paper are online. Your clients' security teams find what they need without having to write to us.
Reversibility
Leaving doesn't depend on us
Reversibility is usually a contract clause nobody tests until the day they need to leave. With us, it's one command in our open source command-line client, and all your data lands on your disk.
One command, one folder
The client writes a self-contained folder to your disk: the organization and its members, blocked domains, and every dataroom with its decrypted files, metadata and activity log. There's nothing to reassemble.
The key that opens the export is yours
The export requires your service account's private key, of which we only hold the public part. We can't produce the export for you, and we can't stop you from producing it.
Open code, ordinary files
The client is MIT licensed, so your teams can read its code. It produces a plain tree of folders and files that you'll still be able to open in ten years, without Retyc.
Whenever you want, no questions asked
You run the export whenever you like, whether you're leaving or not. No request to send us, no notice period, no exit fees: your data is yours, and you get it back yourself.
Let's talk about your organization
In one demo, you'll see how Retyc fits into your exchanges, what your administrators control, and whether on-premises makes sense for you.
Frequently asked questions
What IT, security and business teams ask us most often.
Yes, on-premises deployment is an option of the Enterprise plan. The whole platform then runs on your infrastructure, and your data never leaves it. We go over your hosting and operations constraints together during the demo.
Mostly through email: the Outlook and Gmail extensions encrypt attachments right from the compose window. For automation, there's also an open source command-line client and an MCP server.
Yes. Authentication runs on Keycloak, which federates with Microsoft Entra ID, Google Workspace, Okta or any OIDC or SAML identity provider. The provider is tied to one of your domain names, and you can enforce a second factor there. We set up the connection with you during deployment, and the configuration then stays visible in your organization's settings.
Each person gets a role on the dataroom, from viewer to owner, and you can change or remove it at any time. The audit log keeps track of every action, role changes included.
Yes. A list of blocked domains applies to transfers and dataroom invitations alike. Labels go further: each one carries a rule that limits recipients to members or to a list of allowed domains, and caps how long files stay available.
One command in our open source client puts everything on your disk: the organization, its members, blocked domains and every dataroom with its decrypted files and log. You need your service account's private key, of which we have only ever held the public part. You run this command whenever you want, without telling us and at no cost, whether you're leaving Retyc or not.
That's what the service account is for. Once enabled, it's a recipient of every new transfer and a read-only member of every new dataroom, so you can reopen these spaces without their creator. Its private key is generated on your side and never sent to us. Keep it in your secrets manager: we can't regenerate it.
The most frequently requested items are public and you can attach them as is: the technical white paper for architecture and cryptography, the list of subprocessors for the host (Scaleway, in Europe), the DPA for the contractual side. On the CLOUD Act: we hold no keys, so an order could only ever cover encrypted blocks.