Do I have to keep email attachments separately from the email itself?

In most cases the answer is the opposite of what the question implies: an email and its attachments should generally be kept together, not pulled apart. When an attachment was sent with a message, the two are related pieces of a single communication, and that relationship is part of what makes the record meaningful and trustworthy.

Why attachments belong with the email

A record is more than its content. To serve as reliable evidence of a transaction, it also needs context and structure — who sent it, to whom, when, and what was conveyed. An attachment usually exists in your system because it was transmitted with a particular message. Separating the file from the email can strip away that context:

• You may lose the link showing the attachment was part of that specific exchange.
• You may lose the cover message that explains why the file was sent.
• You may end up with an orphaned document whose origin and authenticity are hard to establish later.

Records management standards emphasize keeping the relationships among records intact so they remain authentic, reliable, and usable over time. Breaking the email-attachment link can undermine all three.

What “keeping them together” means in practice

Together does not necessarily mean stored as one physical file. It means the connection is preserved and discoverable:

• Capture the email with its attachments as a unit when you file or export it (for example, exporting in a format that retains the message and embedded files).
• Preserve the metadata that links them — message ID, transmission data, sender and recipients, and timestamps.
• Apply the same retention to the attachment that applies to the email it belongs to. They are typically governed by one disposition decision, not two.

When separate handling is reasonable

There are narrow situations where you might also retain an attachment on its own — for instance, when the attachment is itself the official version of a record managed elsewhere, or when a finalized document already lives in a dedicated system of record. Even then, the goal is not to sever the link but to avoid duplicate, conflicting retention. Your organization’s records schedule and email policy should tell you which copy is authoritative.

For more on managing electronic correspondence, see the email and messaging topic hub.

Bottom line: treat the email and its attachments as one record unless your policy clearly says otherwise, and preserve the link between them rather than filing them apart.