Safer handling of email attachments in your conversations
A quick heads-up: this one's in Labs
It's an early feature you turn on yourself in Settings > Labs inside your account. It works, but it's still in development - the documentation and support is limited and not everything will behave perfectly yet.
If you like getting your hands on new things early, switch it on and have a play. If you'd rather wait for the finished, fully-supported version, leave it off and we'll let you know when it lands.
The files people send you in conversations often carry sensitive details - documents, IDs, private customer information. This update tightens how those attachments can be accessed, so they're only reachable by apps and people with the right permission.
What's changing
Up to now, email attachments in your conversations have relied on directly accessible links. Anyone with the link could open the file. That's convenient, but it isn't as secure as it should be for private information.
Going forward, attachments move to a new, more secure link format. Any app that wants to open or display one has to prove it has permission first, rather than just following a link.
This first phase covers email attachments. Other conversation channels and file-based custom fields are planned for later.
What this means for you
For most people running their business here, nothing changes. You'll keep opening and sending attachments in your conversations exactly as you do now. Your day-to-day experience stays the same.
The one group who needs to act is developers whose apps read or display your email attachments outside of ESC Hub. Those apps will need the new file access permission, and they may ask you to reauthorise them so they keep working.
The one date to know
Existing attachment links keep working until 30 November 2026. After that, the new access controls take over fully.
So if you use a third-party or marketplace app that pulls in your email attachments, that's your window. It gives the people who build those tools time to update them, and you time to reconnect if you're asked to.
If you don't use any app that touches your attachments, there's nothing on your list here. This is a behind-the-scenes tightening that keeps your customers' files a little safer, and that's a good thing.
