File storage is a rather different beast from structured (meta)data about a user's personal digital life:
These considerations further play with the requirements for file storage to be reliable, secure and cost-efficient especially if we want to make HAT PDAs affordable. On top of that, we still want to be able to attach metadata to files, and maintain fine-granularity access control.
APIs are also rather different from web pages in terms of how file uploads tend to be or can be handled. Not going into a lot of detail here, but there are plenty of reasons why uploading using multipart forms mostly sucks as well as pretty good examples on how file uploads could be done, e.g. YouTube Resumable Uploads. As a building block to satisfy all the requirements, we picked AWS S3
This guide details how HAT handles file management in 4 key aspects: