How are attachments stored and protected?

The plugin supports protected local attachments outside the public web root or a customer-configured private S3-compatible bucket. File types, sizes, image handling, and retention depend on the attachment policy you configure.

Optional ClamAV scanning can quarantine files until a local scanner reports them clean. Scanning does not guarantee detection of every unsafe file. Verify storage readiness and access protection before accepting sensitive files.