Compliance Glossary for Confluence

Can I add PDF files?

Yes. In production version 6, Upload controlled evidence accepts an exact .pdf and application/pdf pair. It checks only the %PDF-x.y header and a %%EOF marker, then records PDF version and byte length. It hashes and stores the original bytes with provenance and an immutable revision. It performs no text extraction, OCR, semantic analysis, signature verification, legal validation, or term matching.

Last verified against production v6 · 26 September 2026

At a glance

InputCurrent actionOutputBoundary
.pdf and application/pdfValidate the exact allow-listed pairAccepted PDF inputA mismatched extension or MIME type is rejected.
PDF source bytesCheck the opening %PDF-x.y and trailing %%EOF markerpdfVersion and parsedByteLengthThis is an outer-structure check, not full PDF validation.
Parsed resultRecord semanticContentStatus: not_checked and unavailable extracted textExplicit content boundaryNo PDF text, page count, layout, image, table, form, attachment, or signature meaning is extracted.
Source bytesCalculate SHA-256 and append a content-addressed frozen-content objectImmutable content object and revision referenceSQL evidence stores hashes and the Object Store key, not raw bytes.
Approved term catalogReceive no extracted PDF textZero content-derived usage observationsNo OCR or term matching runs on PDF content.
Retention class and Retention untilValidate an allowed class and future timestampUpload admissionThe artifact persists the class. The current upload runtime does not persist the selected date.
File up to 350 KiBSend one direct resolver requestPersisted or duplicate resultBase64 transport remains bounded below Forge request limits.
File above 350 KiB and up to 25 MiBStage verified 256 KiB chunksFinal persisted object after assembly and whole-file hash verificationChunk cleanup is attempted and reported after finalization. Maximum: 100 chunks.

How it works

  1. Open Enterprise evidence workspace.
  2. Find Upload controlled evidence.
  3. Under Evidence file, select the PDF file.
  4. Select a Retention class.
  5. Set Retention until.
  6. Select Upload evidence.
  7. Review the returned Artifact and Revision. Expect Usages: 0 for PDF content.
  8. Record the approved retention date in another controlled system until durable date persistence is implemented.

Example

A team uploads Audit-report.pdf. Its bytes begin with %PDF-1.7 and end with %%EOF. The app stores the bytes in Object Store. It records the version, byte length, hash, provenance, object reference, and immutable revision. Visible terms do not become usage evidence because PDF text is not extracted.

What this does not mean

PDF ingestion provides structure metadata and byte integrity only. It does not establish that the PDF is complete, readable, authentic, signed, or legally valid. It does not assess meaning or certify claims. The retention date is required for admission but is not durably attached to current evidence records. Use a supported text format when content-level terminology evidence is required.

Related questions

Next step

Upload a PDF when structure metadata, byte integrity, and provenance are sufficient. Use text evidence for terminology checks.

View on Atlassian Marketplace
Verification basis: production v6 code, tests, manifest, and operations guidance. Verified 26 September 2026.