Control

Attachment Governance & Storage

Control the lifecycle of Office Mail attachments through private storage, retention review, legal holds and company storage limits.

Authorized Sender / RecipientCompany Super AdminIndependent ReviewerIT Department

What it is designed to manage

Features

Company storage monitoringAvailable
Review attachment usage and recovery-reference inventory inside the authorized company.
Retention policy and safe previewAvailable
Configure no expiry or a 30–3650 day retention period and inspect bounded expiration candidates without deleting files.
Legal hold and releaseAvailable
Record a reason for legal hold and authorized release. Held attachments are excluded from cleanup previews and approval.
Configured company quotasAvailable
Quota checks use a locked company record during uploads. Companies without a configured quota remain unlimited.
Two-person cleanup reviewAvailable
A requester cannot approve their own cleanup request. Approval records a review only; it does not delete a file.
Recovery-reference inventoryAvailable
Record backup references and connect them to independent backup verification. A reference alone does not prove a recoverable backup.
Private-file integrityAvailable
Allowed uploads and downloads use company checks, randomized storage keys and SHA-256 verification.
Cleanup enforcement and malware scanningComing soon
The cleanup worker remains preview-only. Destructive cleanup and actual antivirus/content scanning are not implemented.

Company administration permission and CSRF are required for governance changes.
Legal holds block cleanup approval; requester and reviewer must differ.
This scope covers Office Mail attachments, not automatic governance for every ERP document.