Hello!
We use the /files/v3/files/{fileId}/signed-url to allow users to view some of our files. I’ve discovered recently that some of our files have access set to “hidden_private”, and others “hidden_sensitive”. We’re able to get the signed URL just fine for the “hidden_private” files, but “hidden_sensitive” files return an error with the message, “Cannot access sensitive file”.
Is there a way to get a publicly accessible URL via API for files with access set to “hidden_sensitive”?
Hi @RWatkins!
Thanks for posting this! This could definitely be useful for others in the future!
Sensitive files still cannot be exposed through a publicly accessible signed URL, but privately distributed apps can now download sensitive file attachments through the File Manager API. Use GET /v3/files/{fileId}/download with the FILE_MANAGER_SENSITIVE_ACCESS scope.
Moderator Note: this post was reviewed for relevancy and optimized for clarity on September 29, 2026. Thank you for your contributions to the HubSpot Community!
Hi @RWatkins
There still isn’t a supported way to turn a sensitive HubSpot file into a publicly accessible URL. However, as of now, privately distributed apps can download sensitive file attachments directly using GET /v3/files/{fileId}/download with the FILE_MANAGER_SENSITIVE_ACCESS scope.
HubSpot now provides a direct download endpoint for sensitive file attachments when using an authorized privately distributed app with the required sensitive-file scope.
You generally shouldn’t need to change the file’s access level just to retrieve it. If your integration meets the requirements, use the sensitive-file download endpoint instead so the file can remain protected
I hope this will help you out. Please mark it as Solution Accepted and upvote to help another Community member.
Thanks!
Moderator Note: this post was reviewed for relevancy and optimized for clarity on September 29, 2026. Thank you for your contributions to the HubSpot Community!