Compliance Glossary for Confluence

How are uploads verified?

Production v6 verifies upload type, size, ownership, retention, completeness, and SHA-256 values before evidence is accepted. Staged uploads check every chunk at its exact position, then recalculate the assembled file hash. The ingestion path also rejects unsupported, encrypted, malformed, oversized, expired, incomplete, or parser-budget failures.

Last verified against production v6 · 26 September 2026

At a glance

InputActionOutputLimit
File name and MIME typeMatch the exact allow-listed pairSupported or rejected typeRenaming a file does not bypass MIME checks
Tenant and account contextDerive the session owner markerOwned upload sessionOther users cannot resume the session
Staged chunkCheck position, length, and SHA-256Stored receipt or failureConflicting bytes at one position are rejected
Complete fileReassemble in order and hash againIngestion or integrity failureEvery expected chunk must exist
Parser outputApply extraction and operation budgetsBounded evidence recordSemantic checks depend on the file type

How it works

  1. Open Upload controlled evidence.
  2. Choose the supported file and retention settings.
  3. Select Upload evidence.
  4. Let staged upload verify each chunk when required.
  5. Wait for whole-file verification and parsing.
  6. Review the returned evidence state and identifiers.

Example

A staged upload receives the correct first chunks, but one later chunk has a different hash. The server rejects that chunk. Finalization also fails when any chunk is missing or the assembled file hash differs from the declared value. No evidence record is promoted from an incomplete file.

What this does not mean

Integrity checks confirm the received bytes and bounded parser result. They do not approve the file, prove its business meaning, certify legal validity, or establish that the source was correct.

Related questions

Next step

Keep the upload open until final file verification completes.

View on Atlassian Marketplace
Verification basis: production v6 code, tests, manifest, and operations guidance. Verified 26 September 2026.