BUILT TO FINTECH STANDARDS · SELF-HOSTED · VERSION 1.0
KYD Edms keeps every company document encrypted with your own key, locked under WORM retention and traced in a tamper-evident audit trail, inside your own EU infrastructure. Plug it into your business systems through API, SFTP, e-mail or watched folders.
AML_Transaction_Report.pdf
Encrypted · per-tenant key
KYC_File_Client_0412.pdf
Locked until 03.11.2036
Board_Minutes_Q3.pdf
eIDAS seal validated
36 / 0
OpenID conformance modules / failures
RPO 15 min · RTO 4 h
Recovery targets
6 to 10 weeks
Signature to go-live
7 upload channels
Malware quarantine on each
THE FINTECH BAR
Finance has the strictest document rules in Europe. KYD Edms is built to meet them, so every company that adopts it gets the same level of protection: records kept, proven intact, and traced to whoever touched them.
Operational resilience and incident evidence for financial entities.
5 to 10 year retention of records. 10 years in Belgium.
Lawful retention and defensible erasure of personal data.
Secure-by-design software with SBOM and security support.
Signatures and seals validated against EU trusted lists.
WHO IT IS FOR
PRODUCT
7 upload channels including REST, tus, SFTP, watched folder and e-mail, with malware quarantine on every channel.
Per-tenant keys, AES-256-GCM with a fresh key per object, held in OpenBao or your own KMS/HSM.
WORM retention enforced by storage, legal holds, and crypto-shredding to erase a tenant for good.
Tamper-evident audit trail per tenant with SIEM export for your security team.
Records management, four-eyes disposition and approval workflows for defensible decisions.
eIDAS signatures and seals checked against EU trusted lists, plus OCR and document classification.
Branded, secure upload links so your end customers, patients, clients or suppliers can send documents straight into KYD Edms. See the roadmap.
WHAT COMES NEXT
WORM, per-tenant encryption, tamper-evident audit, eIDAS signatures, records management and workflows.
Branded, secure upload links for your end customers and suppliers, guided document capture on mobile (ID, KYC, claims, contracts), magic-link access, live status of each requested document, white-label per tenant.
KYD Edms run for you on two EU sites, 24/7 support, ISO 27001.
Biometric data vault
Liveness check and face match of ID to selfie; biometric templates kept as GDPR Article 9 special-category data under their own key and retention.
Biometric document signature
Handwritten signature captured with pressure and speed on tablet or phone, bound to a face check, sealed as an advanced electronic signature, with remote qualified signatures through an EU QTSP or the EUDI Wallet.
OPEN SOURCE
Multi-tenant: schema per entity with country rules per tenant.
Signed images with SBOM and VEX, CRA-ready.
1.0 LTS line supported until 30.11.2028.
DEPLOYMENT
Same product, same code and the same compliance evidence, whichever way you deploy it.
Your own data centre on any conformant Kubernetes. One Helm chart connects your database, storage, certificates and key store.
Your own cloud account, a sovereign EU cloud or the Azure, AWS or Google region you choose, with your S3 or Azure Blob storage and your KMS.
Turnkey reference platform declared in code: two sites with a warm standby, hardened servers and signed images only.
We run KYD Edms for you on two EU sites, with 24/7 support.
The full platform on one laptop with a single command, for demos and proofs of concept.
RPO 15 min / RTO 4 h
Default recovery targets of the two-site platform. You set your own.
EDITIONS, CHOSEN PER COMPANY
Data stays in EU member states, enforced by the platform on every storage location and every write.
Data stays in the countries each company declares at onboarding, for customers outside the EU.
MADE TO FIT
Each company sets its own rules from the web console or the API, with no custom code.
Your own document types with metadata schemas, checked on every upload.
Retention schedules per document type and per country, legal holds and disposition review.
Steps by role, parallel checks, deadlines, escalation and e-mail alerts.
Classification levels mapped to your roles, plus named readers per document.
Turn on only the channels you need: API, SFTP, e-mail, watched folders, resumable uploads.
Filesystem, any S3 with Object Lock, Azure Blob or your own bucket, and move between them.
Keys in OpenBao, your KMS or your HSM, with one key per company.
Your Entra ID, Okta or any OIDC or SAML provider, with MFA and passkeys.
Your own validation policy and your company seal, qualified through your HSM or a trust provider.
A document-type classifier trained on your own documents, with automatic typing when you choose.
REST API with OpenAPI documentation, events, and audit export to your SIEM.
EU or international edition, and the countries where your data may be stored.
PRICING
Prices excluding VAT. Contract currency: EUR; other currencies are indicative.
Design-partner programme:40 % off year 1 for a 3-year term and a public reference. 3 places.
PARTNERS
For integrators, consultants and resellers serving companies of every sector across Europe.
Competitive reseller margin on every subscription.
Runs the full stack on a laptop for live demos.
Training and pre-sales material to win deals faster.
CONTACT
Belgian enterprise · VAT BE 1040.977.571 · Belgium