diff --git a/app/Services/Email/EmailMailable.php b/app/Services/Email/EmailMailable.php
index 399b0629e90b..8c7c2c5e4362 100644
--- a/app/Services/Email/EmailMailable.php
+++ b/app/Services/Email/EmailMailable.php
@@ -96,6 +96,7 @@ class EmailMailable extends Mailable
 
         $documents = Document::query()->whereIn('id', $this->email_object->documents)
                 ->where('size', '<', $this->max_attachment_size)
+                ->where('is_public',1)
                 ->cursor()
                 ->map(function ($document) {
                     return Attachment::fromData(fn () => $document->getFile(), $document->name);
diff --git a/resources/views/portal/ninja2020/components/entity-documents.blade.php b/resources/views/portal/ninja2020/components/entity-documents.blade.php
index 989203b5adcf..ce2c51790418 100644
--- a/resources/views/portal/ninja2020/components/entity-documents.blade.php
+++ b/resources/views/portal/ninja2020/components/entity-documents.blade.php
@@ -4,7 +4,7 @@
             <div class="sm:flex sm:items-start sm:justify-between">
                 <div>
                     <p class="text-lg leading-6 font-medium text-gray-900">{{ ctrans('texts.attachments') }}:</p>
-                    @foreach ($entity->documents as $document)
+                    @foreach ($entity->documents()->where('is_public',1)->get() as $document)
                         <div class="inline-flex items-center space-x-1">
                             @if($entity instanceof App\Models\PurchaseOrder)
                             <a href="{{ route('vendor.documents.download', $document->hashed_id) }}" target="_blank"
@@ -27,7 +27,7 @@
                         </div>
                     @endforeach
 
-                    @foreach ($entity->company->documents as $document)
+                    @foreach ($entity->company->documents()->where('is_public',1)->get() as $document)
                         <div class="inline-flex items-center space-x-1">
                             @if($entity instanceof App\Models\PurchaseOrder)
                             <a href="{{ route('vendor.documents.download', $document->hashed_id) }}" target="_blank"