Docs / Uploading Documents

Uploading Documents

Documents are central to processing DSARs. SAR Portal provides secure document upload, storage, and processing capabilities.

Uploading Documents

Documents are attached through case actions

There is no standalone upload button or drag-and-drop area on the case page. Instead, documents are attached as part of a case action, using a standard file picker:

In each of these dialogs, click to open the file picker and choose one or more files (hold Ctrl on Windows or Cmd on Mac to select several at once).

What Happens After You Select Files

File Requirements

Supported Formats

FormatExtensionsMax Size
PDF.pdf100 MB (10 MB on trial)
Word.docx, .dotx, .docm, .dotm100 MB (10 MB on trial)
Excel.xlsx, .xlsm, .xltx, .xltm100 MB (10 MB on trial)
PowerPoint.pptx, .pptm, .potx, .potm100 MB (10 MB on trial)
Images.png, .jpg, .jpeg, .gif, .bmp, .tiff, .tif, .webp100 MB (10 MB on trial)
Email.eml, .msg (auto-converted to .eml)100 MB (10 MB on trial)
Text.txt, .csv, .log, .md, .json, .xml, .html, .css, .js100 MB (10 MB on trial)

File Validation

All uploads are validated for:

Security Note
Files are validated by inspecting their actual content to ensure the file type matches the extension. This prevents malicious files from being uploaded by simply renaming extensions.

Document List

Uploaded documents appear in a list showing:

Document Actions

View

Open the document in your browser (if format supports it).

Download

Save a copy to your local device.

Delete

Remove the document from the case. Admin-only, and only while the case is open and the subscription is active. Opens a Delete Document dialog where you choose a reason (Wrong File, Duplicate, Sensitive, User Request, or Other) and optionally add notes. This is a soft delete — the file is archived and can be restored until the case is closed.

Redaction happens at attach time
There is no per-document "Analyze for PII" or "Redact" button. Personal data is detected automatically when you attach redactable files, and you redact them through the Review Detected PII flow before they are added to the case. See AI-Powered Redaction.

File Integrity & Verification

File Integrity Hashing

Every document uploaded to SAR Portal is automatically hashed using SHA-256:

Why This Matters

File integrity hashing provides:

Viewing File Hash

  1. Open the document details
  2. View the File Integrity section
  3. SHA-256 hash is displayed
  4. Compare with original if needed

Document Storage

Security

Storage Limits

PlanStorage Limit
Basic2 GB
Starter10 GB
Pro50 GB
EnterpriseFair-use

Monitor your usage on the Dashboard.

Soft Delete & Recovery

When documents are deleted:

  1. Document is marked as deleted (not immediately removed)
  2. Archived to a separate location
  3. Can be restored until the case is closed
  4. Permanently deleted when case closes

Deletion Requirements

Recovery

To restore a deleted document (Admin-only, while the case is still open):

  1. Find the document in the deleted documents section
  2. Click Restore
  3. The document returns to the case
Audit Trail
All document operations (upload, view, download, delete, restore) are logged in the audit trail for compliance purposes.

Upload Sources

Documents can come from:

Manual Upload

Documents you upload directly from your computer.

Subject Upload

Documents uploaded by the data subject through the public portal.

Batch Upload

Multiple documents uploaded at once for batch processing.

Best Practices

Naming Conventions

Use clear, descriptive file names:

Organization

Before Responding

Storage Management