Transfer Room
Encrypted client file exchange in a private portal. Replace email attachments for every matter.
What you can do
Per-tenant AES-256-GCM encryption
Every file uploaded by you or your client is encrypted under your tenant's data key before it lands in storage. One tenant cannot decrypt another tenant's files even with full database access.
Private client portal
Clients access their room at a one-time-code-gated URL — no client login, no shared password. The session is HMAC-signed with a 30-minute idle timeout.
Automatic activation per Service Agreement
Each fully-signed Service Agreement can auto-open its own Transfer Room when the first bill is paid in Stripe. Legacy matters can be added manually.
Bidirectional file exchange
Send files to your client OR receive uploads from them in the same room. Up to 110 MB per file, 500 MB per transfer, multi-file ZIP download.
Short-by-design retention
Transfers expire after 14 days by default (1–30 days tenant-configurable). Downloaded files purge 72 hours later. Drive-copied files purge 24 hours later. The room is for exchange, not long-term storage.
Optional Google Drive sync
Connect Drive once; copy any received file into a per-client folder structure (RCIC App → Clients → <client> → <AGMT>) with one click. Idempotent — re-clicking is safe.
Append-only audit log
Every room event — activation, transfer sent, viewed, downloaded, revoked, deleted — is written to a tamper-evident ledger. Replay exactly who did what when, with redacted IP addresses.
Notification controls
Per-participant notification settings on both client and tenant sides. Cap of 3 recipients per side; primary contact + sponsor + designated person default to opt-in on the client side; RCIC + co-counsel + Owner default to opt-in on the tenant side.
Bilingual portal (EN / fr-CA)
Clients open the portal in English or Quebec French. All notifications follow the tenant's default client-page language.
No email attachments
Every notification is plaintext with a portal link. Filenames are omitted by default — the bytes only flow through the encrypted portal, never through the email channel.
How it works
- 1
Sign a Service Agreement (or register a legacy agreement reference). The room activates automatically when the first bill is paid, or manually any time.
- 2
Send your client files from the room's Send tab, or watch the Received tab as your client uploads to you.
- 3
Copy received files to Google Drive when you're ready to archive. Retention purges the temporary copies on a clock you can see.
Pricing
Requires Premium: $69 CAD/mo or $690/yr (2 months free), excluding tax. 14-day free trial, no credit card required to start. The same Premium subscription unlocks Service Agreements, AI Assistant at 5× capacity, AI document analysis at booking, AI populate + review for agreement drafts, a multilingual booking page in 10 languages, and client-side Service Agreement translation.
See the Data Security page for the full encryption disclosure, including the Stage B plaintext-window during upload and the controls in place around storage access.
