Reply to post:

I am dealing with business that won't put stuff on any cloud, because it's financially sensitive.

So this must be some special arrangement that keeps the data secure until it has reached the client desktop. It's no use decrypting at source, might was go back to cash payroll deliveries.