When users upload one or more documents as documentation for financial, legal, or technical requirements, it is critical that these files cannot be deleted without traceability.
Currently, attachments can be deleted and replaced with new files. This creates a serious issue:
the original documentation is irretrievably lost, and there is no way to review what was originally submitted.
Although the audit trail records file name, user, and deletion time, it does not retain:
the original document content
a previous version of the file
or any way to reconstruct or review the original submission
From a legal, compliance, and audit perspective, this is problematic. Documentation submitted to support economic or technical claims must remain immutable or at least fully versioned, so that:
the original evidence can always be retrieved,
changes are transparent,
and historical submissions can be reviewed during audits or disputes.
Deletion of form attachments should be possible to disable, or alternatively:
attachments must be versioned, so previous versions are preserved and accessible, or
the original file must be retained and viewable even if a newer file is uploaded.
Without immutability or proper versioning, the system cannot reliably support legal compliance, auditing, or proper documentation governance.