Have a way to mark uploaded files as internal. These files should be marked as such when added to the job or when later viewing them, like notes. These files should only be visible by staff members, not Customer Portal users, they shouldn't show up on the Job Sheet/Report PDFs either.