Attachments are stored locally until the message is sent or saved in a remote folder. This way no portion of the message intented to be encrypted is stored remotely or transported over the network.