Storing documents in SQL Server or XML format

I have a problem, Should I have store the confidential documents in SQLServer or XML format.

Please clarify my problem with details.

Thanking you
ManiRaju

See it depends on documents.
Like user password uou will always save on server.

But as per concern about user profile data you can store it in XML but not the user e-mail ID and contact number.