Use ContractPilot in the provider’s environment, with customer-controlled document storage or as a complete own-server deployment.
What can you do in this module?
- 01
Cloud: application, business data and private documents are in the provider’s environment.
- 02
Own storage: document files can stay on your supported SFTP storage while the application runs in the provider’s environment.
- 03
Own server: application, database and documents run on customer infrastructure with operator-led setup.
- 04
Storage connections are checked before use. Earlier documents retain readable access through their original connection.
- 05
New uploads use the active connection; storage choice does not bypass document permissions.
- 06
Documented backup and restore procedures, with separate operational and user interfaces.
Where are documents stored?
Documents use the configured provider-managed or organisation-owned storage. Their records, versions and permissions remain connected in the application. Own storage must be connected and tested before use; entering an address alone does not establish a working connection.
Backup and recovery
Data backup and document-file backup are separate responsibilities. A recovery plan must cover both. At onboarding, clarify who makes the backups, how long they are retained and how recovery is tested.
What does a backup cover?
Operational backups can cover selected organisations’ databases and persistent local private files, such as document versions, attachments and vouchers. Actual coverage depends on the archive contents and chosen service environment.
External or own SFTP document storage needs a separate backup solution. Restoring files is a controlled operator procedure; user-facing web document restoration is not available. Agree retention and recovery arrangements during onboarding.
Availability and operating conditions
With own document storage, metadata, permissions, history and extracted text remain in the application database, and the application processes files. Complete local data placement requires an own-server setup. External AI or signing can involve separate data transfers.
Available functions depend on your organisation’s setup and your permissions.