We have a two step process whereby a public form is submitted with documents attached, and then held up until a licensed user logs in to Webforms and approves the form.  At that point, a workflow kicks in to retrieve the data and the documents and houses them appropriately in the repository. 

My first question is where are those attached documents stored after the form is submitted but before it is approved and the workflow kicks in. 

My second question is, if they are stored on the web server, or wherever they are stored, does this file get deleted after the workflow kicks in to store them in the repository.

We are concerned we may have duplicate copies of confidential forms stored somewhere we are not aware of.

Thanks for your help

Kathy