Secure file handling

Assessments often come with supporting material: contracts, evidence, exports, and notes. Files you bring into Forest are protected the same way as everything else in your account, scoped to your tenant and reachable only by people with the right role.

Why files need attention

Files are easy to overlook and easy to leak. A contract or an evidence document can hold sensitive detail that never appears in a score, vendor terms, renewal dates, configuration notes, named systems. If files were handled loosely, they would become the soft spot in an otherwise careful program. Forest treats them as part of your protected data, not as loose attachments.

What to keep in mind

• Uploaded files stay within your tenant, separated from other organizations.

• Access to files follows the same roles that govern the rest of Forest.

• File activity is captured in your account record alongside other actions.

Contracts in Forest support spend and renewal tracking. They do not drive your scores on their own, so attaching a document changes what you can track, not what the Forest Intelligence Service computes.

Be deliberate about what you upload. The strongest file handling still cannot reduce the risk of a document that did not need to be there. Bring in what supports the work, and nothing more.

File handling sits inside the same boundaries as the rest of the platform. See Tenant isolation for the separation that contains your files, and Retention and deletion for how to remove them when they are no longer needed.