Compendium Files — the iOS app and the server at files.compendium365.com
Compendium Files is private file storage for one company. It is not a consumer service, it carries no advertising, and it has no analytics. Nothing about you is ever sold, and nothing is handed to anyone for advertising, profiling or training. The only outside company involved at all is Amazon Web Services, which stores the files and, if you use Read aloud on the website, turns a document’s text into speech.
The app requests no access to your contacts, photos, camera, microphone or location, and holds no advertising identifier.
So that the account owner can see who reached which document — which is the point of a private file server — the server keeps a log of activity:
| Recorded | Why |
|---|---|
| Your username, and the time | To attribute the action |
| What you did and which file | Opening, uploading, renaming, deleting, sharing |
| The network address you signed in from | Sign-in attempts only, to recognise unexpected access. It is not recorded against each file you open. |
| Which devices you have authorised, and when each was last used | So any one of them can be revoked on its own |
These records are visible to the owner of the file server and to nobody else.
Documents are stored in private cloud storage operated by Amazon Web Services, encrypted at rest, with public access blocked. Traffic between your device and the server is encrypted in transit. Each workspace is kept in separate storage from every other.
The website can read a document out loud. If you use it, the text of that document is sent to Amazon Polly — a speech service run by Amazon Web Services, the same company that already stores the files — which sends back the spoken audio. That audio is then kept with your files so the same document does not have to be converted twice.
This is the only time any document content goes anywhere other than your own device. If you do not use Read aloud, it never happens, and the iPhone and iPad app does not use the feature at all. Previews of Office documents and PDFs are produced on the file server itself and are not sent anywhere.
Only people the account owner has granted access to, and only the folders they were granted. If a document is deliberately shared by link, that link can be given a password and an expiry date, and can be switched off at any time — which takes effect immediately.
Documents are kept until someone with permission deletes them. Activity records are kept so the account owner can review past access. Ask the person who administers your file server to delete your account or your data, and it will be removed from the server; copies cached on your own device go when you delete the app.
This is a workplace tool. It is not directed at children and accounts are issued only by an administrator.
Questions about this policy, or a request to remove your data: jcloonan@thecompendiumco.com