​
Overview

The Files.com integration reviews who has access to your secure file storage — the Files.com user roster, their admin roles, 2FA (MFA) enrollment, and offboarding status. LowerPlane uses read-only access via the Files.com REST API and does not modify anything in Files.com.
Every Files.com account has an email address stored separately from its username. LowerPlane matches on that email to link each account to a person in your HR directory for offboarding — accounts with no email set can’t be correlated and are skipped. The API also exposes each user’s 2FA status (active_2fa), so the MFA check works too.

​
Prerequisites

Create the key from a site administrator account and choose the Full Access permission set. A Files.com API key inherits the permissions of the account that creates it, so an admin + Full Access key can read your full user roster. A non-admin account’s key, or a Files Only key, cannot.

​
How to Get Your Credentials

1

Sign in as a site administrator

Log in to your Files.com site with a site administrator account. The API key inherits that account’s permissions, so an admin key can read your full user directory — a non-admin’s key cannot.
2

Open the API Keys page

Click your profile icon (top-right), then go to My Account → Sign-In & Security → API Keys and click New API Key.
3

Fill in the New API Key form

  • Name — required. Use something recognizable, e.g. LowerPlane access review.
  • Valid Through (optional) — leave blank so the key doesn’t expire (an expired key stops syncing), or set a date and plan to rotate the key before then.
  • Description (optional) — e.g. “Read-only user access review for compliance”.
  • Permission Set — select Full Access. Do not choose Files Only; it can’t read user accounts, so the checks would have no roster.
  • Workspace — leave Default Workspace.
  • Leave Enable use with Inbound S3-compatible clients unchecked.
4

Re-authenticate and save

Complete the Re-Authenticate prompt (enter the code from your authenticator app), then click Save. Files.com shows the key value only once — copy it immediately and store it securely.
Menu labels can change as Files.com updates its interface. The current walkthrough is in the Files.com API Keys documentation.

​
Connecting in LowerPlane

  1. Go to Settings > Integrations in LowerPlane.
  2. Find Files.com under Data Storage.
  3. Paste your API Key. (Leave API URL blank unless you run a self-hosted or custom endpoint.)
  4. Click Connect.

​
What LowerPlane Checks

MFA enabled

Flags any Files.com user who has not enrolled a two-factor authentication method.

Offboarded access removed

Flags Files.com access still active for an employee who has been offboarded in your HR directory.

User identified

Confirms each account resolves to a named person, not an anonymous or shared account.

Access valid

Verifies each account maps to a current employee in your HR directory whose access has been reviewed.