Manual Activities in Release Orchestration let approvers and task assignees attach files as evidence. Today, there is no way to turn this off, so anyone who can complete a Manual Activity can upload a file, and those files can contain personally identifiable information (PII). Please add an administrator-controlled setting that disables file uploads on Manual Activities, so the attachment option is not offered and uploads are rejected.

Organizations with strict data-handling and privacy requirements need to guarantee that PII cannot end up in release records, and today the only control is asking users not to upload sensitive files. A setting that enforces this would let security and compliance teams approve Release Orchestration for regulated workloads while still allowing teams to use Manual Activities for approvals and sign-offs without attachments.