Skip to main content
Enterprise domains lives under Settings → Admin → Enterprise domains. Use this page to decide what counts as an enterprise AI account versus a personal one. That classification drives Shadow AI on the Exfiltration Egress tab — uploads to ChatGPT, Claude, Gemini, Copilot, and similar tools are labeled from the sign-in context of the account that received them. Requires the manage users permission.

Company domains

Heading in product: Company domains (Google / email-based accounts). Enter company root domains (for example acme.com). Any account on those domains reads as enterprise; anything else is personal. Add as many as you need. Leave the list empty to fall back to the automatic SSO / domain heuristic.

Exact provider identities

Heading in product: Exact provider identities (recommended). Bind a provider’s own account identity — a ChatGPT workspace, a Gemini managed domain, a Claude org, a Copilot tenant — to enterprise or personal. These decide uploads from the newest extension outright (no guessing), and correctly separate two ChatGPT workspaces that share one email. Leave empty to rely on the provider’s own declaration and the domain allowlist above.
Last modified on October 8, 2026