Encrypted client file exchange in a private portal.
Replace email attachments for every matter. One-time-code client access, append-only audit log, optional Google Drive sync — built into RCIC App.
- Per-tenant AES-256-GCM encryption
- Up to 150 MB per file, 2 GB per transfer
- Append-only audit log
- Bilingual portal (EN / fr-CA)
What you can do
Everything a matter's file exchange needs, in one encrypted room.
Per-tenant AES-256-GCM encryption
Every file uploaded by you or your client is encrypted under your tenant's data key before it lands in storage. One tenant cannot decrypt another tenant's files even with full database access.
Private client portal
Clients access their room at a one-time-code-gated URL — no client login, no shared password. The session is HMAC-signed with a 30-minute idle timeout.
Automatic activation per Service Agreement
Each fully-signed Service Agreement can auto-open its own Transfer Room when the first bill is paid in Stripe. Legacy matters can be added manually.
Bidirectional file exchange
Send files to your client or receive uploads from them in the same room. Up to 150 MB per file, 2 GB per transfer, multi-file ZIP download.
Optional Google Drive sync
Connect Drive once; copy any received file into a per-client folder structure with one click. Idempotent — re-clicking is safe.
Append-only audit log
Every room event — activation, transfer sent, viewed, downloaded, revoked, deleted — is written to a tamper-evident ledger. Replay exactly who did what when, with redacted IP addresses.
Email replies become transfers
When a client replies to a Transfer Room notification email, the reply and its attachments materialize as a new received transfer in the room — same encryption, same audit log, same retention.
Text-only messages, end-to-end encrypted
Send a message without attaching files — from your dashboard, the client portal, or a plain email reply. Every exchange with your client lives in one place.
Pinned Information Card
Every room opens with a collapsible card for the matter: applicant and family identity, passport, UCI and application numbers, and government authority blocks. Every change is masked and audited.
Short-by-design retention
Transfers expire after 14 days by default (1–30 days tenant-configurable). Downloaded files purge 72 hours later. Drive-copied files purge 24 hours later. The room is for exchange, not long-term storage.
Built for exchange, not custody.
Every file uploaded by you or your client is encrypted under your tenant's data key before it lands in storage. One tenant cannot decrypt another tenant's files even with full database access.
Transfers expire after 14 days by default (1–30 days tenant-configurable). Downloaded files purge 72 hours later. Drive-copied files purge 24 hours later. The room is for exchange, not long-term storage. The Transfer Room is intentionally not long-term storage — the durable copy lives in your matter file, or in your Drive when you copy it over.
For the full encryption disclosure, see the RCIC App Data Security page.
Need durable, Canadian-hosted storage?
Meet RCIC Drive — the matter-aware document store inside RCIC App, with files hosted in Canada.
How it works
Sign a Service Agreement (or register a legacy agreement reference). The room activates automatically when the first bill is paid, or manually any time.
Send your client files from the room's Send tab, or watch the Received tab as your client uploads to you.
Copy received files to Google Drive when you're ready to archive. Retention purges the temporary copies on a clock you can see.
Included with RCIC App Premium.
Requires Premium: $69 CAD/mo or $690/yr (2 months free), excluding tax. 14-day free trial, no credit card required to start.
The same Premium subscription also unlocks Service Agreements, AI document analysis, a multilingual booking page, and more.