Both tools are in Org Panel > Compliance and apply to mail sent by members.
Data loss prevention rules#
DLP checks outgoing mail only. It never scans received or stored mail. It looks at the subject, the text and the names of attachments.
Built-in detectors:
- Credit card numbers
- IBAN numbers
- US Social Security numbers
- UK National Insurance numbers
- API keys and access tokens
- Private key blocks
- Passwords written into a message
You can also add keywords and your own patterns. A rule can apply to all outgoing mail or only to mail with a recipient outside your domains, and you can exempt members.
Actions#
| Action | What happens |
|---|---|
| Audit | The match is recorded and the message sends |
| Warn | The sender sees a warning and can choose to send anyway |
| Block | The message is refused and the sender is told why |
On the web app, Warn asks the sender to confirm. The mobile apps cannot show that prompt, so a warned message sends and is logged. Block is enforced everywhere, including scheduled messages and expiring messages.
Match records list the rule and the kind of data found. They never store the matched text.
Email footer#
Turn on the footer to add text, or sanitised HTML, to messages your members send. You can limit it to mail with outside recipients. A live preview shows the result.
The footer is not added to end-to-end encrypted messages, because changing them would break the encryption. It is not added twice when a reply already contains it.