---
title: Google Cloud Storage
description: The recommended way to exchange files with Figure. Figure writes with a GCP service account, so no keys change hands.
---

Google Cloud Storage is the recommended file-exchange method. Access is granted with IAM, so you never exchange long-lived keys with Figure.

## Partner-hosted GCS bucket

Use this when Figure delivers files to you, such as [Data Export](/data-integration/data-export) files.

You provide a Google Cloud Storage bucket. Figure writes to it using a
[GCP service account](https://cloud.google.com/iam/docs/service-account-overview).

Grant Figure access on the bucket (or a prefix). Use `roles/storage.objectAdmin`, or a tighter custom role that can create, list, and delete objects on that prefix. Figure will provide the service account email during onboarding.

The bucket must not be public.

### What Figure needs from you

- Bucket name
- Optional prefix / directory
- Confirmation that the Figure service account is granted on the bucket (or prefix)

## Figure-hosted GCS bucket

Use this when you deliver files to Figure.

Figure provides a bucket. You access it with a GCP service account your organization provides.

For more information about how to [upload](https://cloud.google.com/storage/docs/uploading-objects#upload-object-cli)
and [download](https://cloud.google.com/storage/docs/downloading-objects) with Google Cloud
Storage buckets, please visit the linked Google documentation.

### What Figure needs from you

- The email address of your GCP service account

### What you will need from Figure

- The name of the GCS bucket