File upload security scanning

Every non-image file uploaded to Turtini is automatically scanned for potentially dangerous content before it can be accessed or downloaded.

What is checked:
• Whether the file is an executable binary or script that does not belong in a document context
• Whether the file's actual format matches its extension (mismatches can indicate disguised content)
• Archive contents that are not standard document containers

What happens after a scan:
• Clean files — available immediately for download by your team and customers
• Flagged files — held in the admin review queue; the file is not accessible until a Turtini admin reviews and clears it

This scanning runs silently in the background. For most uploads you will never notice it — files are cleared within seconds. If a file you uploaded does not appear after a minute, it may be under review. Open a support ticket if you need assistance.

This applies to files uploaded via the Collaboration tab, Hours request attachments, and any document attached to a record in the platform.