Files and documents
How documents and uploaded files are kept private, how download links work, and which documents each person can see.
Documents uploaded to the platform are kept in private storage, with no public web address. When a person downloads one, the platform checks they are allowed to see it and creates a download link just for that moment.
Download links
Every download of a stored file uses a link made at the time you ask for it.
Your own documents, under Documents and on the documents tab of My Profile, open through links that last one hour. Policy documents in the admin portal get a fresh, short-lived link each time an admin clicks one.
A download link that ends up in an old email or a shared chat stops working soon after, and the document itself stays in private storage.
Who sees which documents
Employees see their own personal documents, such as contracts, payslips, certificates and offer letters, and the policy documents shared with the whole organisation, such as scheme booklets.
Documents your HR team marks as confidential stay in the admin portal. They do not appear in the employee's own list.
Business paperwork between your organisation and us, such as invoices, quotes and proposals, never appears on an employee's Company Policies tab.
Admins see every document uploaded to individual employee records, with its confidential flag, and the documents attached to the organisation's policies. In the employee app, nobody sees another employee's personal documents.
Uploading files
When an employee uploads their completed life assurance beneficiary form, it must be a PDF of 10 MB or less. It goes into private storage, and the platform checks the form belongs to one of the employee's own memberships before saving it against their record.
Admins upload policy documents against the organisation's live policies. A policy that has lapsed after renewal keeps its existing documents on view, but nothing new can be uploaded to it.
A company logo can be a PNG, JPG, SVG or WEBP file of up to 2 MB.
Questions
That is expected. Download links stop working after a short time. Open the document from the platform again to get a new one.
No. Your personal documents are visible to you and to your organisation's admins.
Sign-in security
Why people sign in without a password, how sign-in links are protected, how join links and leavers are handled, and how single sign-on fits in.
What is recorded
The records the platform keeps about sign-ins, invitations, consent and approvals, and the things it deliberately does not track.