Yes. Document attachments may be removed. The system enables the owning Organisation to specify access levels for the other party in the engagement (buyer/supplier) which can prevent deletion/updating or even reading.