Essentials
per year
- 1 entity
- Up to 150 users
- 5 TB
Built to fintech standards, for every company
Enterprise documents, secured to fintech standards.
KYD Edms keeps every company document encrypted with your own key, locked under WORM retention and traced in a tamper-evident audit trail, inside your own EU infrastructure. Plug it into your business systems through API, SFTP, e-mail or watched folders.
Invest in KYD EdmsKYC_File_Client_0412.pdf
Encrypted · per-tenant key
- 10:42:07Received through SFTP
9f2c…41ab - 10:42:09Malware scan passed
3d71…c0e2 - 10:42:09Retention lock applied
a84e…7f13 - 10:42:11Qualified seal validated
5b09…e6d4
Audit chain verified
36 / 0
OpenID conformance modules / failures
15 min / 4 h
Recovery targets
6 to 10 weeks
Signature to go-live
7 upload channels
Malware quarantine on each
The fintech bar, for every sector.
Finance has the strictest document rules in Europe. KYD Edms is built to meet them, so every company that adopts it gets the same level of protection: records kept, proven intact, and traced to whoever touched them.
Who it is for
- Banking and fintech
- Insurance
- Healthcare
- Legal and notaries
- Public sector
- Industry and logistics
- SaaS platforms (API)
- DORA
- Operational resilience and incident evidence for financial entities.
- AML Regulation
- 5 to 10 year retention of records. 10 years in Belgium.
- GDPR
- Lawful retention and defensible erasure of personal data.
- Cyber Resilience Act
- Secure-by-design software with SBOM and security support.
- eIDAS 2.0
- Signatures and seals validated against EU trusted lists.
The full document lifecycle, under control.
Each document passes through the same six steps, whichever channel it arrives on.
- 1
Capture
7 upload channels including REST, tus, SFTP, watched folder and e-mail, with malware quarantine on every channel.
- 2
Encrypt
Per-tenant keys, AES-256-GCM with a fresh key per object, held in OpenBao or your own KMS/HSM.
- 3
Retain
WORM retention enforced by storage, legal holds, and crypto-shredding to erase a tenant for good.
- 4
Prove
Tamper-evident audit trail per tenant with SIEM export for your security team.
- 5
Decide
Records management, four-eyes disposition and approval workflows for defensible decisions.
- 6
Trust
eIDAS signatures and seals checked against EU trusted lists, plus OCR and document classification.
Built on open source, no lock-in.
- Java 21
- Spring Boot
- PostgreSQL
- Kubernetes
- SeaweedFS
- OpenSearch
- Kafka
- OpenBao
- Multi-tenant: schema per entity with country rules per tenant.
- Signed images with SBOM and VEX, CRA-ready.
- 1.0 LTS line supported until 30.11.2028.
Configure it to your business, not the other way round.
Each company sets its own rules from the web console or the API, with no custom code.
Document types and metadata
Your own document types with metadata schemas, checked on every upload.
Retention rules
Retention schedules per document type and per country, legal holds and disposition review.
Approval workflows
Steps by role, parallel checks, deadlines, escalation and e-mail alerts.
Access rules
Classification levels mapped to your roles, plus named readers per document.
Upload channels
Turn on only the channels you need: API, SFTP, e-mail, watched folders, resumable uploads.
Storage locations
Filesystem, any S3 with Object Lock, Azure Blob or your own bucket, and move between them.
Keys and encryption
Keys in OpenBao, your KMS or your HSM, with one key per company.
Sign-in
Your Entra ID, Okta or any OIDC or SAML provider, with MFA and passkeys.
Signatures and seals
Your own validation policy and your company seal, qualified through your HSM or a trust provider.
Classification and OCR
A document-type classifier trained on your own documents, with automatic typing when you choose.
Integrations
REST API with OpenAPI documentation, events, and audit export to your SIEM.
Data location and edition
EU or international edition, and the countries where your data may be stored.
Run it where your data must live.
Same product, same code and the same compliance evidence, whichever way you deploy it.
| On-premises | Your own data centre on any conformant Kubernetes. One Helm chart connects your database, storage, certificates and key store. | Available |
|---|---|---|
| Your private cloud | Your own cloud account, a sovereign EU cloud or the Azure, AWS or Google region you choose, with your S3 or Azure Blob storage and your KMS. | Available |
| Two-site high availability | Turnkey reference platform declared in code: two sites with a warm standby, hardened servers and signed images only. | Available |
| Sandbox and pilot | The full platform on one laptop with a single command, for demos and proofs of concept. | Available |
| Managed EU cloud | We run KYD Edms for you on two EU sites, with 24/7 support. | Planned |
EU edition
Data stays in EU member states, enforced by the platform on every storage location and every write.
International edition
Data stays in the countries each company declares at onboarding, for customers outside the EU.
From compliant archive to the trusted document front door
Today · 1.0
AvailableSelf-hosted EDMS
WORM, per-tenant encryption, tamper-evident audit, eIDAS signatures, records management and workflows.
H1 2027
PlannedCustomer upload portal
Branded, secure upload links for your end customers and suppliers, guided document capture on mobile (ID, KYC, claims, contracts), magic-link access, live status of each requested document, white-label per tenant.
H2 2027
PlannedManaged EU cloud
KYD Edms run for you on two EU sites, 24/7 support, ISO 27001.
2028
PlannedBiometric data vault
Liveness check and face match of ID to selfie; biometric templates kept as GDPR Article 9 special-category data under their own key and retention.
Biometric document signature
Handwritten signature captured with pressure and speed on tablet or phone, bound to a face check, sealed as an advanced electronic signature, with remote qualified signatures through an EU QTSP or the EUDI Wallet.
Yearly self-hosted subscription.
Prices excluding VAT. Contract currency: EUR; other currencies are indicative.
Most chosen
Professional
per year
- 5 entities
- 500 users
- 25 TB
Enterprise
from {a}
per year
- Unlimited entities
- 2.000 users
- 100 TB
Design-partner programme: 40 % off year 1 for a 3-year term and a public reference. 3 places.
Back the secure document layer for European companies
The market
Every company must keep documents secure, provable and retained for years. Regulated finance, which needs it most under DORA and AML rules, is our first market.
The product
Version 1.0 built and tested, self-hosted, EU-only, integrates with any business system. First market Belgium, then the EU.
The use of funds
Sales and partner network, external penetration test and certifications, and a support team.
Funding the KYD Edms managed EU cloud
Seed round: {a} over 18 months
| Engineering and SRE team (4 FTE) | 48 % | |
|---|---|---|
| 24/7 support and operations (2 FTE) | 16 % | |
| EU cloud infrastructure, two sites with ISO 27001 hosting | 9 % | |
| Certifications: ISO 27001, ISAE 3402 / SOC 2, external pen tests | 7 % | |
| Biometrics and signature R&D with an EU QTSP partner | 8 % | |
| Go-to-market and partner network | 8 % | |
| Legal, insurance and DORA readiness | 4 % | |
| Total | 100 % |
Sell KYD Edms
For integrators, consultants and resellers serving companies of every sector across Europe.
Become a resellerPartner margin
Competitive reseller margin on every subscription.
Sandbox
Runs the full stack on a laptop for live demos.
Enablement
Training and pre-sales material to win deals faster.
Let's talk.
Tell us who you are and what you need, and we will reply by e-mail.
Anis Godhbane
Belgian enterprise · VAT BE 1040.977.571 · Belgium
www.anisgodhbane.tech contact@anisgodhbane.tech +32 497 71 67 38