Add a stamp to the references header of marked emails that can be used in mail flow rules

ADD_REFERENCE_HEADER

Allow admins to view all originals in their account

ADMIN_ACCESS_ALL_ORIGINALS

Allow the internal alert-admin API to email account admins (debounced per event)

ADMIN_ALERTS_ENABLED

Allow users to add unsupported file types (non-PDF/image) to collections. These files will be downloadable but not individualized.

ALLOW_UNSUPPORTED_FILE_TYPES

API_CLIENTS

(customer-specific) Associate emails by subject and date instead of just email associations when creating an email analysis

ASSOCIATE_EMAILS_BY_SUBJECT

The maximum number of files allowed in batch upload URL and submit upload request.

BATCH_UPLOAD_MAX_FILE_COUNT

BUCKET_NEW_VIEWER_EMAILS

Query to see if all recipients on an email fork already have marked emails created and return early (good for organizations that send many duplicate forks)

CHECK_FOR_EXISTING_MARKED_EMAILS

If true, allows a client to view the admin dashboard ui and retrieve account-wide analytics

CLIENT_ADMIN_DASHBOARD

COLLECTION_FOLDERS

Delete email messages after they are sent instead of keeping them around for the janitor to clean up (only works if DELETE_EMAIL_BODY_MARKED_COPIES is true)

DELETE_EMAILS_ON_SEND

Delete marked copies for email bodies after returning them (in progress)

DELETE_EMAIL_BODY_MARKED_COPIES

Delete marked copies for files after a minimum amount of time (in progress)

DELETE_FILE_MARKED_COPIES

Enable conversion of docx files that are attached to smtp emails

DOCX_CONVERSION

Enable conversion of doc files that are attached to smtp emails

DOC_CONVERSION

The minimum number of hours to keep email body marked copies in the content store before deleting them (although they are typically deleted as soon as they are successfully sent)

EMAIL_MARKED_COPY_STORAGE_HOURS

If enabled, allows users to use alternate SSO providers (ie, SAML)

ENABLE_ALTERNATE_SSO_PROVIDERS

Enable the option to convert email attachments to a collection. Does not have a way to handle emails that have different attachments across forks, so probably shouldn't be used.

ENABLE_ATTACHMENT_COLLECTIONS

If enabled, allows users to set the 'hide on hover' feature for visible screen watermarking

ENABLE_SCREEN_WATERMARKING_HIDE_ON_HOVER

Enable auto-source detection UI in web leak analysis workflow

EXPERIMENTAL_AUTO_SOURCE_DETECT

New leak analysis workflow PROTOTYPE interface

EXPERIMENTAL_LEAK_ANALYSIS

Enable screen-marking UI in web leak analysis workflow

EXPERIMENTAL_SCREEN_MARKING

The minimum number of hours to keep marked copies in the content store before deleting them

FILE_MARKED_COPY_STORAGE_HOURS

The maximum number of marked copies per HTML detect shard. Values <= 0 disable HTML detect sharding.

HTML_DETECT_MAX_MARKED_COPIES_PER_SHARD

The maximum number of originals per HTML prefilter detect shard. Values <= 0 disable HTML prefilter detect sharding.

HTML_PREFILTER_MAX_ORIGINALS_PER_SHARD

Include hash-identical originals when creating an analysis (not just originals directly associated with the email or file). This should only be disabled for demo accounts.

INCLUDE_DUPLICATE_ORIGINALS_IN_ANALYSIS

Enables the leak report feature map, which is in progress/potentially abandoned

LEAK_REPORT_FEATURE_MAP

Limit the number of analyses a user can create per day

LIMIT_ANALYSES_PER_DAY

Limit the number of email recipients a user can send to per day

LIMIT_EMAIL_RECIPIENTS_PER_DAY

Limit the number of files a user can create per day

LIMIT_FILES_PER_DAY

Limit the number of file marked copies a user can create per day. This can be from secure view links.

LIMIT_FILE_MARKED_COPIES_PER_DAY

Limit the number of share link recipients a user can send to per day

LIMIT_SHARE_LINK_RECIPIENTS_PER_DAY

The number of marked copies to pool for each link

LINK_MARK_POOL_COUNT

If the size of all the marked attachments for a single email exceeds this value, the email will be sent with unmarked attachments

MARKED_ATTACHMENT_MAX_SIZE

Length the maximum image dimension must be <= to mark

MARK_IMAGE_MAXIMUM_SIZE

Length the minimum image dimension must be >= to mark

MARK_IMAGE_MINIMUM_SIZE

Mark secure view link marked copies before they are sent

MARK_SECURE_VIEW_PRE_SEND

The maximum number of API clients an account is allowed to create

MAX_API_CLIENTS

Caps how many detect/prefilter shards (PDF or HTML) a single task run may fan out into, on top of whatever the *_MAX_*_PER_SHARD settings would otherwise produce. Each shard's worker downloads its inputs from S3 independently, so uncapped fan-out on a large job can push aggregate GetObject request rate past S3's per-prefix-partition soft limit (ECH-8094). When set (> 0), the effective per-shard size is widened as needed so shard count never exceeds this value; it has no effect when the corresponding *_MAX_*_PER_SHARD setting is <= 0 (sharding already disabled - a single shard can't itself exceed this cap). Values <= 0 disable the cap.

MAX_CONCURRENT_DETECT_SHARDS

The maximum number of embedded images to mark in an email

MAX_MARKED_EMBEDDED_IMAGES

The maximum allowed upload file size in bytes

MAX_UPLOAD_FILE_SIZE

If enabled, doesn't actually send transactional emails

MOCK_SEND_TRANSACTIONAL_EMAILS

The architecture to use for NLP inference. This is used for rephrasing and other NLP tasks.

NLP_INFERENCE_ARCHITECTURE

The maximum number of marked copies per PDF detect shard. Values <= 0 disable PDF detect sharding.

PDF_DETECT_MAX_MARKED_COPIES_PER_SHARD

PDF_ENGINE_MANIFEST_OVERRIDES

The number of parallel processes to use for PDF mark engine

PDF_MARK_ENGINE_PARALLELISM

The maximum number of originals per PDF prefilter detect shard. Values <= 0 disable PDF prefilter detect sharding.

PDF_PREFILTER_MAX_ORIGINALS_PER_SHARD

Enable conversion of pptx files that are attached to smtp emails

PPTX_CONVERSION

Enable conversion of ppt files that are attached to smtp emails

PPT_CONVERSION

Maximum requests per second allowed for an account across all of its API clients combined. A value <= 0 blocks the account entirely.

PUBLIC_API_ACCOUNT_RATE_LIMIT

Maximum requests per second allowed for a single API client across all public API endpoints combined. A value <= 0 blocks the client entirely.

PUBLIC_API_CLIENT_RATE_LIMIT

Maximum requests per second allowed for a single API client on a single API endpoint. A value <= 0 blocks all endpoints entirely.

PUBLIC_API_ENDPOINT_RATE_LIMIT

Percent of the rate limit to use for the inmemory insurance limiter in case of Redis connection issues. A value of 25 means 25% of the regular rate limit will be used.

PUBLIC_API_RATE_LIMIT_INSURANCE_PERCENTAGE

REPHRASING

Enable users to select highly granular values within the tile opacity screen watermarking settings

SCREEN_MARKING_GRANULAR_TILE_OPACITY

Enables option of using SSO within secure view

SECURE_VIEW_SSO

Write the email to a file instead of actually sending it

SEND_EMAIL_TO_FILE

Send email notifications when a link is viewed or has gone too long without being viewed

SEND_LINK_NOTIFICATION_EMAILS

If enabled, allows users to send transactional emails via SMTP

SEND_TRANSACTIONAL_EMAILS_VIA_SMTP

Use the new signed-URL upload flow (initiate → direct PUT → complete) instead of streaming through the API server. Do not enable for BYOB unless buckets are configured for it.

SHOULD_USE_NEW_UPLOAD_FLOW

Support aliases when verifying SecureView access (only applies to Exchange integrations and requires User.Read.All permission instead of just User.ReadBasic.All)

SUPPORT_EXCHANGE_ALIASES

The URL to use for support ticket links. If empty, the links will be removed from the UI.

SUPPORT_TICKET_LINK

The maximum number of child tasks a worker can run in parallel

TASK_WORKER_MAX_CHILD_PARALLELISM

Skips over the 'What X Leaked?' section of leak analysis workflow. Temporary holdover until leak analysis overhaul is complete.

TEMPORARY_SHOULD_SKIP_ANALYSIS_ORIGINAL_SELECTION

TRACK_ANALYTICS

Use a fake queue (ie, throw away all tasks and never process them)

This page is intended to be viewed online