Or on a shared drive if that's where IT have set up documents to be saved to by default. And access to the shared drive could be obtained by an IT administrator who has access to a shared drive, or an outsider who has compromised the system or an IT administrator's machine.
That said, the other claims like "...and specifically names employees that are liked and are doing a good job" I have no idea about.