12 Dtwo policies tagged "email", including Block Agent Email to External Recipients, Block External Sends Hidden in Zapier Instructions. Browse by what the control does rather than which app it targets.
On this page
Gmail
Deny Agent Email Sends to External RecipientsDenies Gmail send-class tool calls when any recipient in to, cc, or bcc falls outside a documented corporate-domain allowlist.Filter Dormant Conversations Out of Gmail Readsgoverned responses)Hide Threads Carrying a Restricted Gmail Labelgoverned responses)Mask Card Numbers in Email Content Read by AgentsMasks payment-card-number (PAN) shapes in email content returned to agents by Gmail mailbox-read tools.Restrict Gmail Thread Searches to Recent MailRewrites every Gmail thread search on the way in to prepend a newer than: recency term, so Gmail itself returns only recent correspondence.Strip Blocked Senders from Gmail Readsgoverned responses)
Microsoft 365
Block Agent Email to External RecipientsBlocks agent-initiated Microsoft 365 email sends when any recipient address falls outside a corporate-domain allowlist.Block Mail-Rule and Webhook PersistenceUnconditionally denies the classic business-email-compromise (BEC) persistence surface in Microsoft 365: creating or updating Outlook mail rules, changing…
Onboarding starters
Email Address AlertA watch-only starter policy.Email Address BlockThis policy stops a request if it contains an email address. If there's no email address, the request goes through as normal.Email Address RedactionThis policy automatically masks email addresses in what a tool sends back, replacing each one with [REDACTED] before your agent ever sees it.