finserv-comms

7 Dtwo policies tagged "finserv-comms", including Block Gmail Filter Creation (Auto-Forward Persistence), Block Mail-Rule and Webhook Persistence. Browse by what the control does rather than which app it targets.

On this page

Confluence
GitHub
Gmail
Jira
Microsoft 365
Slack

Confluence

Confluence: Deny Org-Wide & Public Publicationingress · ConfluenceStops a prompt-injected or erring agent from broadcasting Confluence content org-wide or to anonymous external readers.

GitHub

Prevent Public Exposure of GitHub Repos, Gists & Forksingress · GitHubStops the agent from exposing private code to the public across three GitHub write tools, at ingress — before the call reaches the GitHub MCP server, so a…

Gmail

Block Gmail Filter Creation (Auto-Forward Persistence)ingress · GmailBlocks the classic BEC/exfiltration persistence primitive: Gmail filters that can auto-forward or auto-delete mail and outlive the agent session.

Jira

JIRA: Deny Sensitive Project Search and Viewingress · JiraKeeps issues that belong to a configurable set of "sensitive" JIRA projects out of read access through the JIRA MCP server.JIRA: Protect Sensitive Projects from Writesingress · JiraBlocks write operations against issues that belong to a configurable set of "sensitive" JIRA projects.

Microsoft 365

Block Mail-Rule and Webhook Persistenceingress · Microsoft 365Unconditionally denies the classic business-email-compromise (BEC) persistence surface in Microsoft 365: creating or updating Outlook mail rules, changing…

Slack

Slack: Deny Sending Direct Messagesingress · SlackBlocks Slack message-write calls whose destination resolves to a direct conversation — a 1:1 DM, a message posted to a user ID (which Slack auto-opens as a…