Storage Providers
By default, TrueGrade stores documents, photos, and other uploaded files in TrueGrade-managed cloud storage. Organizations on the Enterprise plan can configure their own storage — this is called bring-your-own-bucket (BYOB).
BYOB storage gives your organization full ownership and control over where your documents live.
Supported Providers
TrueGrade supports two ways to connect your own storage:
- Key-based providers — you create a bucket and supply access credentials.
- Connected-account providers — you authorize TrueGrade against a business account with a few clicks; there are no keys to copy.
| Provider | Connection type | Availability |
|---|---|---|
| Amazon S3 | Key-based | Enterprise |
| Google Cloud Storage | Key-based | Enterprise |
| Azure Blob Storage | Key-based | Enterprise |
| Dropbox Business | Connected account | Enterprise |
| OneDrive for Business | Connected account | Enterprise |
When BYOB storage is configured, TrueGrade stores no file data in its own systems. All uploads go directly to your storage. TrueGrade only stores file metadata (name, size, MIME type, path) in its database.
Key-Based Providers
Amazon S3
Create an S3 bucket
In the AWS console, create a new S3 bucket:
- Region: choose the region closest to your users
- Block public access: enabled (all public access blocked)
- Versioning: optional but recommended
- Encryption: SSE-S3 or SSE-KMS
Create an IAM policy
Create an IAM policy with the following permissions on your bucket:
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:GetObject",
"s3:PutObject",
"s3:DeleteObject",
"s3:ListBucket"
],
"Resource": [
"arn:aws:s3:::your-bucket-name",
"arn:aws:s3:::your-bucket-name/*"
]
}
]
}Create an IAM user
Create an IAM user, attach the policy, and generate an access key. Copy the Access Key ID and Secret Access Key.
Configure in TrueGrade
Navigate to Settings → Integrations → Storage → Amazon S3. Enter:
- Bucket name
- Region (e.g.,
us-east-1) - Access Key ID
- Secret Access Key
Click Test Connection — TrueGrade will write and delete a test object to verify permissions.
Connected-Account Providers
Dropbox Business and OneDrive for Business connect by authorization rather than access keys. An org admin signs in once and grants TrueGrade access to a shared folder; the connection is then used by the whole organization.
Dropbox Business
Start the connection
Navigate to Settings → Integrations → Storage → Dropbox and click Connect Dropbox. TrueGrade sends you to Dropbox to sign in.
Authorize and select a folder
Sign in with a Dropbox Business admin account and approve access. TrueGrade stores files in a dedicated app folder within your Dropbox.
Confirm
You are returned to TrueGrade and the provider shows Connected. The connection is shared across your organization — individual users do not sign in separately.
Connected-account authorizations can be revoked from the provider’s own admin console. If a Dropbox or OneDrive connection is revoked there, TrueGrade will show the provider as Disconnected and an admin must reconnect it to resume uploads.
Migration from Default Storage
When you enable BYOB storage, existing files stored in TrueGrade-managed storage are not automatically migrated. To migrate:
- Contact TrueGrade support to request a storage migration
- Provide your bucket credentials
- TrueGrade support performs the migration during a maintenance window
- After migration, all file access paths are updated
Do not change storage configuration mid-project without completing the migration — inaccessible files cause broken document links throughout the application.