Skip to Content

Storage Providers

By default, TrueGrade stores documents, photos, and other uploaded files in TrueGrade-managed cloud storage. Organizations on the Enterprise plan can configure their own storage bucket — this is called bring-your-own-bucket (BYOB).

BYOB storage gives your organization full ownership and control over where your documents live.

Supported Providers

ProviderAvailability
Amazon S3Enterprise
Google Cloud StorageEnterprise

When BYOB storage is configured, TrueGrade stores no file data in its own systems. All uploads go directly to your bucket. TrueGrade only stores file metadata (name, size, MIME type, path) in its database.

Setup Instructions

Create an S3 bucket

In the AWS console, create a new S3 bucket:

  • Region: choose the region closest to your users
  • Block public access: enabled (all public access blocked)
  • Versioning: optional but recommended
  • Encryption: SSE-S3 or SSE-KMS

Create an IAM policy

Create an IAM policy with the following permissions on your bucket:

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "s3:GetObject", "s3:PutObject", "s3:DeleteObject", "s3:ListBucket" ], "Resource": [ "arn:aws:s3:::your-bucket-name", "arn:aws:s3:::your-bucket-name/*" ] } ] }

Create an IAM user

Create an IAM user, attach the policy, and generate an access key. Copy the Access Key ID and Secret Access Key.

Configure in TrueGrade

Navigate to Administration → Integrations → Storage → Amazon S3. Enter:

  • Bucket name
  • Region (e.g., us-east-1)
  • Access Key ID
  • Secret Access Key

Click Test Connection — TrueGrade will write and delete a test object to verify permissions.

Migration from Default Storage

When you enable BYOB storage, existing files stored in TrueGrade-managed storage are not automatically migrated. To migrate:

  1. Contact TrueGrade support to request a storage migration
  2. Provide your bucket credentials
  3. TrueGrade support performs the migration during a maintenance window
  4. After migration, all file access paths are updated

Do not change storage configuration mid-project without completing the migration — inaccessible files cause broken document links throughout the application.