Attachments can be added to an Application. These can be viewed by all users who can see the Application. The only exception are Confidential Attachments. These can only be viewed by users who have the right to view Confidential Information of Applications. Read here how to add Confidential Attachments.