Uploaded documents are stored at unguessable addresses. The original file name is kept and a random 32-character code appended, and assessment answer attachments sit under the assessment's own random folder.
This covers certificates and certificate logos, supplier logos and documents, assessment attachments and template files, warranty attachments and images, purchase receipts, registration and form attachments, and user avatars. Product images, videos and passport page assets are unchanged — those are meant to be public.
Uploading, viewing and downloading behave exactly as before, and no action is needed. One thing to flag: a saved or bookmarked direct link to a file at its old address no longer resolves, since files have moved. Open documents through the app rather than from stored URLs.