Documents, MIME validation and secure downloads
Upload supported evidence, store it in module records/BLOB storage and enforce ownership/visibility on downloads.
Guides in this workflow
Follow the guide that matches the exact action, filter, menu change or issue.
Upload a staff document
Choose document type, file, notes and client visibility.
Upload a client document
Choose a document type, file and notes from the owned journey; client uploads are visible.
Complete Document type
Required, maximum 191 characters.
Complete Document notes
Add useful context.
Set document visibility
Staff can choose Visible to client; client uploads are stored as client-visible.
Understand allowed file extensions
PDF, DOC/DOCX, XLS/XLSX, PNG, JPG and JPEG are supported.
Understand MIME validation
The controller verifies accepted type information instead of relying only on the filename.
Understand the 10 MB file limit
Uploads larger than 10 MB are rejected.
Understand document storage
Document file content is stored in the module database record/BLOB workflow.
Download a document as staff
Use the secure controller action from the case.
Download a document as a client
The document must belong to an owned journey and be visible to the client.
Understand secure download headers
Downloads use attachment disposition, nosniff and no-store controls.
Resolve a missing document
Check record, ownership, visibility and stored content.
Resolve invalid type or size
Use a supported extension/MIME and a file no larger than 10 MB.