Restrict file uploads
Block or allow the file types users can upload to AI tools.
A File Upload rule controls which file types users can upload to AI tools. Use it to keep spreadsheets, archives or source files out of AI chats.
New to policies? Start with Policies overview.
Add a file upload rule
- Go to Security → Policies and open a policy, or click Create Policy.
- Click Add rule and choose File Upload.
- Fill in the fields below and click Add rule.
- Click Save, then Deploy.
Fields
Field | What it does |
|---|---|
Enforcement | Block, Warn or Watch. |
Provider | Apply the rule to one AI provider, or to Any. |
Mode | See below. |
File Types | The file types the mode applies to, such as PDF, Excel, CSV, ZIP or SQL. |
Modes
- Block list: blocks the selected file types and allows everything else.
- Allow list: allows only the selected file types and blocks everything else.
- Block all: blocks every upload. No file types need to be selected.
Matching ignores case and works on the file extension or its MIME type.
To catch sensitive content inside files rather than by file type, use Protect sensitive data with DLP.
When rules overlap
A policy can hold one File Upload rule per provider. If several policies cover the same device, the most specific scope wins (Client, then User, then Group, then Organization). At the same level, the stricter rule wins: Block all, then Allow list, then Block list. See Policies overview for the full rules.
Need help?
Contact support@getalesia.com.
Was this helpful?
Your feedback shapes what we write next.