More secure access to conversation attachments

Conversation attachments are moving to a permission-based access model to strengthen data protection. Attachment links will move to a new, more secure format, and applications accessing or displaying attachments outside of JourneyCARE will need an additional file access permission and authenticated access. The first phase covers email conversation attachments, with other conversation channels and file-based custom fields planned for future phases.

For most users there is no change to the existing experience. The change primarily affects developers of applications that access or display email conversation attachments outside of JourneyCARE: those applications need the new file access permission, and existing users must reauthorize the application. Existing attachment links continue to work only until Nov 30, 2026, after which the new access controls take effect. Applications that do not access conversation attachments do not need to take any action.