Documents inside the case, under control

The Document field is configured for single or multiple attachments, allowed types and size from 5 to 100 MB, up to 200 attachments per field. Upload is possible from the start form, with byte verification, and the built-in preview covers PDF, images, audio and video. Versions are kept or replaced. The organization Library has nested folders up to 8 levels, always-kept versions and a stable slug to call materials in templates.

For AI, text extraction of PDF, DOCX, TXT, Markdown, CSV, JSON and HTML starts only on request, and the resulting text can be corrected by hand before use. With Data Shield active it becomes a placeholder. Sharing uses signed links of 1 hour, 24 hours or 7 days, with creation audited and the URL never reaching the logs.

Deletion has three levels: remove the reference, delete logically with a 30-day grace period or delete permanently with a verified purge. Restore and purge are Admin-only and tracked. The per-organization quota warns at 80% and blocks new uploads at 100%, always leaving consultation possible. Storage is dedicated, S3-compatible and vendor-neutral, with nightly reconciliation.

In an onboarding process, the client uploads a company record, a signed contract and an ID document already from the start form. The document stays tied to the case, every replaced version is kept if the field allows it, and whoever works the task opens the preview without downloading anything. When a file must go to a supplier, a signed link is generated that expires by itself.

For organizations with retention constraints, the three deletion levels and legal hold, available in Enterprise, avoid both keeping too much and deleting what is needed in a dispute. The Admin sees quota, reconciliation and storage diagnostics, so problems surface before blocking someone during an upload.

Permissions follow the same principle as the rest of the platform: the Library grants read and manage rights to users or roles, and those rules apply to agents and MCP as well. A document a user cannot read does not appear in search results, is not offered as context and cannot be called in a template. Confidentiality does not depend on the goodwill of whoever writes the prompt.