Hi,
There is no reason why the collect stack cannot sit behind a login page/access portal. It’s actually a very simple but effective stack whose composition is extremely well compartmentalised which makes it great for customisation.
There is a default folder created on the host ( <domain_root_folder>/files/uploads ) and all files get dropped into that path, so its important to set that folder up with write permissions.
There is not much logging turned on by default but options for troubleshooting do exist. There is a .php which executes when uploads happen so there is lots of opportunity to inject other behaviours/functionality - if that is your thing.
We are hopeful that we can give this stack some extra love in the near future with better logging, more flexible server side file containers and possibly options for email alerts when files have been uploaded.
I grabbed this image to show the server side:-
