CDP Runs Its Internal File Server on Files.com With Department Permission Fences

Contributor Development Partnership (CDP) runs collaborative fundraising for more than 230 public radio and television stations across the United States. Founded inside WGBH in 2011 and independent since 2018, the public benefit corporation ingests station donor and viewing data, processes it through an analytics platform, and returns the reports, contact lists, and results that drive station fundraising.

That business rests on being careful with other organizations’ data. CDP’s own workforce is distributed across the country, and its internal legal documents and finance tax records cross the internet as a matter of routine. CDP wanted one governed path for that material, as quick as an attachment, that one administrator could enforce across hundreds of accounts.

One Governed Path for a Workforce Spread Across the Country

For a workforce scattered across the country, the shortest path wins. A legal document goes out the moment someone attaches it, a batch of files moves in whatever window is open, and a training video is a link someone clicks to play. Any governed alternative had to be exactly that quick, or people would not use it.

CDP also wanted access decided by where a file lives. Legal documents carrying personal information and finance tax records belong to the department that owns them, and a memo cannot keep them there. The path itself had to be as easy as an attachment, and one administrator had to be able to enforce it.

One Governed Estate, Fenced by Department

So the replacement had three requirements: send a link, click it, the file opens; a document’s audience set by the folder it lives in, not by who happens to hold a link; and one administrator able to enforce it across the whole user base.

CDP made Files.com that channel: the company’s internal file server, and the mandated path for every confidential transfer.

CDP’s IT specialist built the permission structure in place, moving sensitive files into subdirectories and applying permission fencing to private, legal, and finance folders. Files.com permission fences stop inherited access at each folder boundary. Technology and marketing staff cannot reach a legal document containing personal information or a finance tax record; those folders are simply not there for them. Microsoft Entra single sign-on and SCIM provisioning create users and apply group memberships automatically, while group-level folder permissions decide what each role can reach. Using Files.com’s user impersonation feature, the IT specialist sees the site exactly as any given user does, so each fence is verified rather than assumed.

Training and marketing videos moved off SharePoint and onto Files.com share links with preview-only permissions, backed by public hosting. The recipient clicks a link and the video plays in the browser, which is exactly what the old SharePoint links did. The habit stayed the same. What changed is that the link now lives on the governed platform, and no downloadable copy rides along with it.

Every Internal Share Lands in One Audit Trail

With Files.com as the mandated channel, every confidential transfer at CDP runs on a governed path that staff actually use.

• Confidential files move through fenced, logged folder access, on a path as quick as an attachment.
• Departmental data is invisible outside the department that owns it. Personal information in legal documents and tax records in finance folders are reachable only by the groups those folders permit.
• Every kind of internal sharing has one answer. Videos play from a preview-only link, documents move through fenced folders, and all of it lands in the same audit trail.
• A single IT specialist enforces the whole estate, with the directory handling provisioning and groups carrying the permissions.

The rule holds because following it costs nothing: the governed path is as fast as the habit it replaced.

The Easy Way and the Secure Way Are the Same

Today, a CDP employee anywhere in the country who needs to move a sensitive document has a path that already exists. It is as quick as an attachment, and it carries the fences and the record the company is accountable for. A legal file reaches exactly the people its folder permits, and IT can say who touched it.

CDP did not get there by policy alone. A memo was never going to beat the attachment button. What makes the rule hold is that Files.com is just as easy to reach, so one administrator can insist on a single path because the right answer is already one click away.