Where are stored attachments in a expense report

When a user is attaching a file in his expense report, we need to know where the file is stored (DB ? UCM ?) and is there any retention period defined or is it kept indefinitely ?