Domain Allowlist
Overview
The domain allowlist lets you restrict who can access your shared document based on their email domain. Only visitors with an email address matching one of your allowed domains can pass the email gate. This is designed for organizations that want to share content exclusively with their team or partners.
ℹ️ Info: Domain allowlist is available on the Business plan only.
How to Set Up a Domain Allowlist
- Open the Share panel — In the editor, click Share and create a share link (or select an existing one).
- Enable the email gate — The domain allowlist works in conjunction with the email gate. Make sure Email verification is toggled on.
- Add allowed domains — In the Allowed domains field, enter the email domains you want to permit (e.g.,
acme.com,partner.org). Add one domain per entry. - Save — Click Save. Only visitors with email addresses matching the allowed domains can verify and view the document.
How It Works
The domain allowlist uses OR logic:
- A visitor's email must match at least one of the allowed domains.
- Example: if you allow
acme.comandpartner.org, thenalice@acme.comandbob@partner.orgboth pass, butcharlie@other.comis rejected.
You can also combine the allowlist with individual email addresses. If you add specific emails alongside domains, the visitor passes if their email matches any domain OR any individual address.
Use Cases
- Internal documentation — allow only
@yourcompany.comemails. - Partner access — allow your domain plus one or two partner domains.
- Client projects — allow
@clientcompany.comfor a specific project deliverable.
Can I use subdomains in the allowlist?
The allowlist matches the exact domain you enter. If you enter acme.com, it matches user@acme.com but not user@sub.acme.com. Add subdomains separately if needed.
What happens if I add domains but don't enable the email gate?
The domain allowlist only takes effect when the email gate is enabled. Without the email gate, visitors are not asked for their email and the allowlist is ignored.
Can I allow individual emails that don't match any domain?
Yes. You can add specific email addresses alongside domains. The OR logic means a visitor passes if they match any allowed domain or any allowed individual email.
Is there a limit on the number of domains?
There is no hard limit on the number of domains you can add to the allowlist.