Skip to main content
When you import a document, Ainomos reads the text out of it and splits it into passages it can search. That text is all Ainomos needs to answer questions. With File storage set up, Ainomos also keeps the original file, so people can download a document exactly as it was issued, for example a signed PDF. Ainomos keeps originals in storage that your organisation owns and controls: any S3-compatible storage, such as AWS S3, MinIO, NetApp StorageGRID, Ceph, or a Swiss provider. Who can do this: platform admins set up, change and remove the storage. Anyone who may read a document can download its original.

What is kept

  • The original file of every document imported after the storage is saved, PDF or Markdown.
  • Not kept: a file from which the import removed a secret, because a file cannot be partly removed.
  • Not kept: files imported into a room that masks personal data. The original would carry exactly what the room keeps out.
Which rooms mask personal data depends on their data class. The installation sets which data classes mask; by default it is C1. Documents imported before you set up the storage have no original, and saving the storage later does not add one. Ainomos writes and deletes only below the folder you name. When the organisation is erased, Ainomos deletes its originals in your storage too.

Before you start

Have these ready from whoever runs your storage:
  • The address of the storage over HTTPS. For AWS S3 you need no address.
  • A bucket, and a folder inside it for Ainomos.
  • An access key that may read, write and delete in that folder.
  • For storage in your own data centre: the certificate authority that issued the storage’s certificate, as a PEM file, if it is not a public one.

Connect your storage

1

Open File storage

Open Settings, then File storage.
2

Fill in the fields

See the table below.
3

Test the connection

Click Test connection. The test saves nothing.
4

Save

Save becomes available once the test passes for exactly these values. Ainomos runs the test once more when you save. The page confirms “The file storage is saved. Originals of documents imported from now on are kept here.”
Sign-in offers two options: Open Storage in your own data centre for two more settings:

What the test checks

The test runs six steps in order and shows the result of each:
  1. Reach the address: the storage answered over TLS with a trusted certificate.
  2. Sign in: the storage accepted the key or role.
  3. Find the bucket: the bucket exists, in the region given.
  4. Write a test file: below your folder.
  5. Read it back: the same bytes come back.
  6. Delete the test file: so that erasing the organisation can remove its originals.
If Ainomos may write but not delete, the test still passes and warns that erasing the organisation would leave its originals in the bucket. When a step fails, it says why. The most common reasons:

When no storage is set up

Imports work as usual. Ainomos reads the text, people can search it and ask about it. Only the original file is not kept, and the document says “No original file was kept for this document.” If the storage stops answering, imports carry on without keeping originals, and existing originals cannot be downloaded until it is back. The text of every document stays available. System status shows File storage as down, with the reason.

Change or remove the storage

Change the fields, test again and save. The new settings apply to documents imported from then on. If you point Ainomos at a different bucket or folder, it no longer finds the originals stored in the old place, and those documents show as having no original. To stop keeping originals, click Remove storage and confirm. Originals already stored stay where they are in your bucket. Documents imported from then on keep no original. Saving and removing the storage are recorded as evidence. The secret never appears in a record.