> ## Documentation Index
> Fetch the complete documentation index at: https://docs.govly.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Opportunity Attachment Handling

> How Govly handles opportunity attachments with document-control markings

Govly Commercial, our core multi-tenant product, receives solicitation-level opportunity attachments from public procurement sources and customer-provided workflows. Some documents retain control or distribution markings even when they have been published openly. Govly handles observed markings, where an attachment was found, file access, and retention as separate questions.

## What the Tags Mean

Govly may show the following tags on an opportunity attachment:

* **Sensitive Markings Detected** means automated review found one or more document-control signals, such as a page banner, designation block, distribution statement, or export-control warning. The tag's tooltip explains the observed signals.
* **Content Restricted** means Govly applies additional file-handling controls to the attachment in Commercial.
* **Public Source** means Govly obtained the marked attachment from a publicly accessible procurement feed. Under Govly's current Commercial handling rules, that source does not trigger the **Content Restricted** tag.

The detection tag records observed signals. It does not change file access by itself; access is affected only when the attachment also has a **Content Restricted** tag.

Commercial determines the **Content Restricted** tag from both the markings found by Govly's automated detection system and the source where Govly obtained the file. A public-feed source or recognized Distribution Statement A language does not trigger the tag. Distribution Statement C alone also does not trigger it, but another detected marking may. Other detected markings on attachments available only through non-public feeds result in the **Content Restricted** tag.

## File Access in Commercial

Restricted attachments remain listed so users can see the filename, associated opportunity, and available marking information. Whether the file itself can be opened depends on Govly's access controls and whether Commercial received or still retains the file.

* Free organizations cannot view or download restricted attachment files.
* A paid organization's administrator can enable **Block restricted opportunity attachments** under **Settings → Security**.
* Govly can apply restricted attachment blocking across all Commercial organizations.
* Restricted files are not included in external attachment-sharing workflows, even when paid in-product access remains available.
* A file removed through the retention process, or never sent to Commercial, remains metadata-only regardless of access settings.

A paid organization can access a retained restricted file only while neither its organization control nor the Commercial-wide control is enabled. The Commercial-wide setting takes precedence over an organization's setting. Controls that disable all opportunity attachment downloads or email attachments remain separate and can be used for a broader policy.

## Summaries and Search

Govly has a Commercial-wide control that prevents restricted attachment text from being newly extracted or added to summaries and search records. Opportunity summaries and search records are not generated separately for each organization's settings, so this control is applied consistently across Commercial rather than configured per organization.

File access and summary/search processing are separate controls. Blocking a download does not by itself remove historical summary or search content, and changing summary/search processing does not by itself determine whether a user may open a retained file.

## File Retention

Govly reviews non-public attachments tagged **Content Restricted** on a recurring schedule. Each linked opportunity contributes its response deadline, or its posting date when no response deadline is available. The latest of those dates controls, and the file becomes eligible for removal three months later. If any linked opportunity has neither date, Govly does not schedule the file for removal.

Before removing a file, Govly checks the current opportunity dates, whether it has since appeared on a public feed, its current restricted status, and whether the file still exists. A file is not removed if it has become public, is no longer restricted, lacks a reliable qualifying date, or otherwise no longer qualifies.

When removal proceeds, Govly removes the stored original attachment, text previously extracted from the file, and the attachment summary. The attachment record and source filename remain visible so users can understand what was associated with the opportunity. If the same file later appears through a source that qualifies for normal Commercial processing under Govly's current handling rules, Govly reassesses it and can restore normal processing subject to the current access controls.

## How Secure Enclave Fits In

[Secure Enclave](/enterprise/security/secure-enclave) is a separate Govly-operated managed-ingestion service for customers whose requirements align with that environment. It is not an automatic destination for files blocked in Commercial.

For configured Secure Enclave workflows, Commercial can receive the opportunity and attachment details without receiving the file. Users can still see that an attachment exists, but Commercial provides no file link. Govly works with each customer to provision and maintain these workflows.

Customers evaluating Secure Enclave managed services should contact [support@govly.com](mailto:support@govly.com) to discuss source systems, workflow requirements, and available compliance documentation.

## Available Controls

| Control                                             | Scope             | Effect                                                                                                                                                                      |
| --------------------------------------------------- | ----------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Block restricted opportunity attachments            | Organization      | An organization administrator prevents members from viewing or downloading restricted files.                                                                                |
| Commercial-wide restricted attachment access        | Govly Commercial  | Govly makes restricted files unavailable for viewing and downloading across Commercial.                                                                                     |
| Keep restricted content out of summaries and search | Govly Commercial  | Govly prevents restricted attachment text from being newly extracted or added to summaries and search records.                                                              |
| Recurring file retention review                     | Govly Commercial  | Govly periodically reviews non-public restricted files and removes those that remain eligible once three months have passed since their latest qualifying opportunity date. |
| Secure Enclave managed ingestion                    | Customer workflow | Govly operates a separate managed-ingestion workflow and can send attachment details, rather than the file, into Commercial.                                                |

## Planned Commercial Access Update

Govly currently targets **December 1, 2026**, to make **Content Restricted** files unavailable for viewing and downloading across Commercial. Organizations will not need to change their own settings for this update to apply.

Before the change, Govly will notify affected customers and work with them on appropriate source-portal or Secure Enclave workflows. The planned date may change as Govly completes its customer impact review and rollout preparation.

Questions about an attachment or your organization's settings can be directed to [support@govly.com](mailto:support@govly.com).