Limited access
Customer RFQ files and request details should only be accessible to authorized people who need them for request review, supplier communication, data project coordination, or delivery follow-up.
Private storage
When file upload is enabled, uploaded files should be stored in a private storage area rather than exposed as public website assets.
Email handling
If customers send files directly by email, those materials are treated as project communication records and are used only for request review and follow-up.