Skip to main content
← All capabilities
Available now

Platform capability · File Storage & Uploads

Let users upload files straight to cloud storage from your apps

Signed upload and download links, with each customer’s files kept apart

One upload library used by every service. Files go straight to cloud storage and do not pass through your servers. The library provides signed download links, a connection point for malware scanning, file-type and size limits, image processing, retention rules and separate storage for each customer. Comments, Support and your own apps all use it, so uploads behave the same everywhere.

Built in

What you get

  • Files upload straight to cloud storage and do not pass through your servers
  • Signed upload and download links that expire
  • Optional malware scanning: connect a scanning provider (none is enabled by default)
  • Allowed file types, and size limits for each route
  • Image processing: thumbnails, resizing and format conversion
  • A separate storage bucket for each customer
  • Encryption at rest with a separate key for each customer
  • Retention rules and automatic deletion
  • Cache and download headers that work with a CDN
  • An audit record for each upload, download and deletion
  • Storage limits for each customer and each app
  • Any record type can have files attached
Under the hood

How it works

One upload library for the whole platform

Comments, support tickets and your own apps all use the same upload library. There is one upload process, one scanner connection, one CDN setup and one set of retention rules, built into each service. Your app embeds a component, and the library handles the file transfer.

Uploads go straight to storage through signed links

An upload does not pass through your servers. The client asks for a signed link, uploads the file directly to storage, then tells the service when it is done. Your endpoints stay fast, and the large file transfer goes straight to storage.

Security controls you can enforce

Allowed file types, size limits for each route, signed links, separate storage for each customer and encryption protect the standard upload path. When a malware-scanning provider is configured, the scanner connection can hold a file back until it has been checked. No scanning takes place unless a provider has been enabled. Audit records cover uploads, downloads and deletions.

Want a deeper walkthrough of File Storage & Uploads?

A solution architect will demo the live service against your domain model.

Get a deployment assessment