---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Attachment quarantine policies

# Attachment quarantine policies {#ariaid-title1}

Release version: Australia  
Updated November 5, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Manage policies that automatically isolate suspicious attachments for security review and analysis.

## Before you begin

Role required: data_privacy_admin and admin

## About this task

To create attachment quarantine policies, perform the following procedure:

## Procedure

1. Navigate to AllSystem SecurityData privacyReal time protectionAttachment quarantine policies.
2. Select Create new policy.
3. Enter a Policy Name for the policy.
4. Toggle the Active button on if you want the policy to be enforced.
5. Select Add table.
6. Enter the tables you want the policy to apply to.
7. Specify which data patterns you want to monitor for sensitive content in attachments.  
   Important:  
   Attachments matching the patterns you define here will be automatically quarantined. Users will receive an Attachment Quarantined message indicating the attachment was quarantined due to sensitive data detection, information on the scan result, and instructions for getting their attachment released.
8. Select Save to set the table definitions as part of the policy.  
   Note:  
   You can define multiple tables for the policy to apply to.
9. Select Confirm to save the policy.  
   The new attachment quarantine policy is added on the main view.

## What to do next

The attachment quarantine policies you create show in the main view. You can edit or delete them by selecting the appropriate option from their Actions menu. You can also select either of the following buttons under each
policy:
{#attachment-quarantine-policies__table_rpk_b5z_4lb__entry__2}

| Button | Description |
|-|-|
| View scan findings | View the findings specific to the quarantine scan policy, including links to flagged attachments and their status. Note: To work with the findings themselves, including the release of quarantined attachments, refer to [Attachment scan findings](https://www.servicenow.com/docs/q0OdPw0Kcg7R6pyLluGbmw "You can review the findings of your attachment quarantine scans, and work with any quarantined or alerted attachments."). |
| View policy details | View the configuration of the attachment quarantine policy. You can also toggle the Active button to turn the policy on or off. |
[ ]

{#attachment-quarantine-policies__table_rpk_b5z_4lb}  
Important:  
Currently, two known limitations exist for quarantined attachments:

* Hyperlinks for quarantined attachments may still be clicked by users. In this case, the attachment will not download, and the user will a receive a message that the file contains sensitive data.
* In the Workspace UI, users may still be able to click quarantined attachments in the Activity Stream of the record.

*[\>]: and then