# File uploads

**Portal version:** 0.1.0  
**Updated:** 2026-08-28  
**Source menu item:** File uploads  
**Availability:** Private preview · default-OFF

> The source foundation exists, but no general production activation or public self-service program is claimed.

medOS has a filestore service and document workflows, but partner upload access must be purpose- and site-approved.

## What you can use now

- Keep credentials server-side, validate content type and size, and record the clinical purpose.
- Use DocumentReference when a supported FHIR document workflow applies.

## Current limits

- Embedded apps must not receive unrestricted filestore or patient-drive access.

## Next step

Start with the [medOS Developer overview](/developers/platform/overview) and confirm the target hospital’s enabled contracts before production work.

## Canonical references

- [FHIR R4 integration](/integrations/fhir)
- [Public API](/backend/public-api)
- [Security and compliance](/architecture/security-and-compliance)
- [Developer portal status and coverage](/developers/platform/changelog)