Attachments
Collect private files with explicit limits and release checks.
Configure file fields deliberately
Set count, size, and accepted type rules that match the actual provider and plan limits. Explain permitted files before the visitor starts an upload.
Files stay private by default
Uploads use private object storage and authorized access. A file should not be released merely because its extension or browser-provided type looks acceptable.
Verify scanning and deletion operations
Do not accept real sensitive files until scanning, interrupted-upload recovery, signed access, retention, and byte deletion are operating end to end.
Documentation reviewed on October 20, 2026Suggest an improvement →