# Why are various third party accesses asked during installation

Learn about the secure installation process of CloudFiles, which involves third party accesses for file-related tasks such as uploading files to AWS S3 storage, using an external agent, previewing files in Salesforce, and facilitating file transfer to external storages.

> Kind: FAQ · Updated: Jul 4, 2026

During installation, CloudFiles will ask for the following third party accesses -
- *.amazonaws.com - This is needed to upload files to AWS s3 storage. This permission is only applicable if you're using s3 as storage platform. This URL is maintained by Amazon
- api.cloudfiles.io - CloudFiles uses an external agent to do the heavy lifting of common file related tasks like upload, download etc. This API is security reviewed by Salesforce and other agencies.
- salesforce.cloudfiles.io - A domain used to show preview of files within Salesforce. This is governed by same policy as api.cloudfiles.io
- streamapi.cloudfiles.io - A domain used to facilitate file upload and download to external storages except AWS s3. This is governed by same policy as api.cloudfiles.io

If you'd like to learn more about our compliances and security protocols, please visit out trust center at trust.cloudfiles.io.