Blocking File Uploads to Generative AI Websites Using Microsoft Purview DLP

Question

Blocking File Uploads to Generative AI Websites Using Microsoft Purview DLP

MEHMET TUNAHAN OKUMUS 35

How can file uploads to generative AI websites, such as ChatGPT, Perplexity, and Deepseek, be blocked regardless of file type or size?

Currently, file uploads to certain websites like Gmail and iCloud are managed using Microsoft Purview DLP, but blocking uploads to generative AI websites has not been successful.

Any guidance or steps on how to achieve this would be appreciated.

Anonymous

2025-02-06T18:03:12.0066667+00:00

@Mehmet OKUMUŞ We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Anonymous

2025-02-11T01:50:19.1866667+00:00

@Mehmet OKUMUŞ was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
MEHMET TUNAHAN OKUMUS 35 Reputation points

2025-03-01T10:27:13.28+00:00

@Anonymous I created a policy intended to block uploads to both Generative AI websites and specific sites like wetransfer.com. While the policy successfully blocks uploads to the specified websites, it occasionally misses some instances. However, it does not block uploads to Generative AI websites at all.
Anonymous

2025-03-03T08:20:47.1933333+00:00
@Mehmet OKUMUŞ could you please confirm us on below steps

Network Configuration: Ensure that your network configuration is not interfering with the DLP policy. Sometimes, network settings or firewalls can override DLP policies.

Browser Extensions: Check if any browser extensions or plugins are bypassing the DLP policy. Some extensions might allow uploads despite the policy settings.

Custom Scripts: Consider using custom scripts or additional security tools to enforce the blocking of uploads to specific domains. This can provide an extra layer of control.

Policy Logs and Reports: Review the detailed logs and reports in the Microsoft Purview admin center. Look for any patterns or specific instances where the policy fails. This can help identify the root cause.

Answer accepted by question author

Anonymous

@Mehmet OKUMUŞ

Welcome to the Microsoft Q&A forum.

Please go through the below steps and confirm us ;

Double-check that the domains for the generative AI websites (e.g., chatgpt.com, perplexity.ai, deepseek.com) are correctly entered in the DLP policy settings.
Ensure that the DLP policy is applied to all relevant locations and endpoints. Sometimes, policies might not cover all the necessary areas.
If you have multiple DLP policies, make sure the policy blocking uploads to generative AI websites has the appropriate priority and is not being overridden by other policies.
Ensure that endpoint DLP settings are configured correctly. This includes verifying that the necessary agents are installed and running on user devices.
Conduct thorough testing by attempting to upload files to the specified websites. Check the logs and reports in the Microsoft Purview admin center to identify any issues or misconfigurations.

I hope the above steps will resolve the issue, please do let us know if issue persists. Thank you

0 comments

1 additional answer

Your answer

Anonymous

2025-02-06T18:03:12.0066667+00:00

@Mehmet OKUMUŞ We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Anonymous

2025-02-11T01:50:19.1866667+00:00

@Mehmet OKUMUŞ was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
MEHMET TUNAHAN OKUMUS 35 Reputation points

2025-03-01T10:27:13.28+00:00

@Anonymous I created a policy intended to block uploads to both Generative AI websites and specific sites like wetransfer.com. While the policy successfully blocks uploads to the specified websites, it occasionally misses some instances. However, it does not block uploads to Generative AI websites at all.
Anonymous

2025-03-03T08:20:47.1933333+00:00

@Mehmet OKUMUŞ could you please confirm us on below steps

Network Configuration: Ensure that your network configuration is not interfering with the DLP policy. Sometimes, network settings or firewalls can override DLP policies.

Browser Extensions: Check if any browser extensions or plugins are bypassing the DLP policy. Some extensions might allow uploads despite the policy settings.

Custom Scripts: Consider using custom scripts or additional security tools to enforce the blocking of uploads to specific domains. This can provide an extra layer of control.

Policy Logs and Reports: Review the detailed logs and reports in the Microsoft Purview admin center. Look for any patterns or specific instances where the policy fails. This can help identify the root cause.

Answer 1

AI answer

To block file uploads to generative AI websites using Microsoft Purview Data Loss Prevention (DLP), you can configure DLP policies to restrict access to specific service domains. Here are the steps you can follow:

Create a DLP Policy: In the Microsoft Purview admin center, navigate to Data loss prevention and select Policies to create a new policy.
Specify Locations: Ensure that the policy is applied to the appropriate locations, such as SharePoint sites and OneDrive accounts.
Define Policy Settings: Under the policy settings, you can specify the conditions for the DLP rules, including the types of sensitive items you want to restrict.
Service Domains: In the DLP policy settings, navigate to the Browser and domain restrictions to sensitive data section. Here, you can add the domains of the generative AI websites you want to block (e.g., chatgpt.com, perplexity.ai, deepseek.com) to the Service domains list.
Set Actions: Choose the action to block uploads to these domains. You can set the action to Block or Block with override to prevent users from uploading files to these specified domains.
Test and Monitor: After implementing the policy, monitor its effectiveness and make adjustments as necessary to ensure it is working as intended.

By following these steps, you should be able to block file uploads to generative AI websites effectively.

References:

AI-generated content may be incorrect. Read our transparency notes for more information.

Share via

Blocking File Uploads to Generative AI Websites Using Microsoft Purview DLP

1 additional answer

Your answer