Moveworks temporarily stores attachments in the Moveworks backend. This is done so that in the event that a request to upload the attachment to the ITSM system fails, Moveworks bot can reattempt to upload the attachment.
Attachments are encrypted in the same way all data in Moveworks is encrypted and secured:
Yes, Attachments are stored in Moveworks Services for 1 week.