> This page is for Unified.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.merge.dev/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.merge.dev/_mcp/server.

# Collect security evidence

> How to retrieve and download compliance-related documents from file storage platforms using the Merge File Storage API.

---

#### User authorizes file storage access

Your user authorizes your application to access their file storage service (e.g., Google Drive, Dropbox) via an OAuth or similar authorization flow through Merge Link.

#### Display file picker interface

Present the Merge File Picker in your application where users can browse through their files and folders in the connected file storage service and select the ones relevant for compliance.

#### Retrieve and download selected files

Initiate the download of the selected files and folders from the file storage service. Use API endpoints like [**GET** /files/id](https://docs.merge.dev/filestorage/files/#files_retrieve) and [**GET** /folders/id](https://docs.merge.dev/filestorage/folders/#folders_retrieve) to access these, based on the files chosen by your user.

#### Compliance review and reporting

In your application, enable a feature where users can review the uploaded evidence and receive reports on their compliance status, highlighting any gaps or requirements.

\
\