Secure, Canadian-hosted document storage built for RCICs.
RCIC Drive is the matter-aware document store inside RCIC App. Files are hosted in Canada, encrypted under a per-tenant AWS KMS customer-managed key, and scanned for malware on upload before they become downloadable.
- AES-256 encryption under per-tenant AWS KMS keys
- Hosted in AWS ca-central-1 (Montréal)
- Every upload malware-scanned
- Object Lock + versioning
Your client files stay in Canada.
Document bytes live in AWS S3 in the ca-central-1 (Montréal) region and are replicated, as each firm is onboarded, to ca-west-1 (Calgary), in a separate Investatech-controlled AWS account, for disaster recovery; both regions are in Canada. Application metadata (folder names, file references) lives in our Supabase Postgres control plane, which runs in ca-central-1 (Montréal), the same region as the bytes; both are Canadian-resident.
Amazon Web Services is our sub-processor for RCIC Drive object storage and key management, under a signed data-processing agreement.
For the full encryption and residency disclosure, see the RCIC App Data Security page.
What you get
Security-first storage, built around immigration matters.
Per-tenant customer-managed keys
Each firm gets its own AWS KMS key. Objects are encrypted with S3 SSE-KMS; one tenant's key cannot decrypt another tenant's files. Disabling a key makes its objects permanently unreadable (crypto-shred).
Malware scanning on upload
Every object is scanned by AWS GuardDuty Malware Protection in ca-central-1. Clean files are promoted; threats are quarantined and never delivered; unscannable files are held for review.
Bytes never through our server
Uploads and downloads travel directly between your browser and S3 via short-lived presigned URLs. The application server never carries the file bytes.
Object Lock and versioning
The durable bucket has S3 Object Lock enabled and versioning on, so accidental overwrites and ransomware writes cannot destroy prior versions.
Cross-region disaster-recovery backup
Documents are replicated, as each firm is onboarded, to a second AWS account we control in ca-west-1 (Calgary), cross-city and still in Canada. Both copies are encrypted under the same per-tenant key, so crypto-shred makes both unreadable, and accidental deletes are never propagated to the backup.
Version history and restore
Every re-upload keeps the prior versions. Restore any earlier version in one click, or recover a deleted file from the recycle bin.
Recycle bin with retention window
Deleted files move to a recycle bin for 30 days by default. Restore any time during the window; nothing purges until it ends.
Secure sharing and exports
Share any file or folder with a secure, expiring link, with an optional access code, download cap, and watermark. Export a closed matter as a downloadable package. Teammates get internal deep-links instead of a public one.
Legal hold and retention
Place any file on legal hold and assign per-matter retention classes, surfaced as advisory guidance so you stay in control of your CICC record-keeping.
OCR and full-text search
PDFs and images are OCR'd via AWS Textract in Canada (ca-central-1). Find any document by any word it contains, not just its filename.
Automatic classification
Every file is auto-classified into an immigration-specific taxonomy — passport, IRCC letter, IRB letter, form, contract, financial, medical, and more — so you can filter at a glance.
Matter-aware organization
Folders and files are organized around your matters, with in-browser preview of PDFs and images and page thumbnails so you never download a file just to look at it.
Pooled firm storage
Storage is pooled across your whole firm and grows with your team. Overflow packs are one click away when you need more.
How it works
Subscribe to RCIC App
RCIC Drive is available on paid plans — never during the free trial, because we don't take custody of client documents from an uncommitted firm.
Upload and organize by matter
Every file is encrypted under your firm's own key and malware-scanned before it becomes downloadable.
Find anything instantly
OCR full-text search, automatic classification, version history, and a recycle bin protect the record.
Storage that grows with your firm.
Basic
25 GB pooled across your firm.
Premium
100 GB pooled base + 50 GB per paid seat. The Owner counts as a seat; every RCIC and Assistant you add expands the pool.
Overflow packs
+250 GB for $15/mo · +1 TB for $39/mo. Cancel any time from Stripe.
Example: a Premium firm with 2 RCICs and 1 Assistant starts at 250 GB. All prices in CAD, excluding tax.