# Keep an AI agent from sharing your files with the internet

A file connector's most dangerous tool isn't read — it's the one that mints a public share link. Deny anonymous links and fence the folders that matter.

For: Teams exposing Google Drive, Box, or Dropbox to an AI assistant

A file store's read tools are the obvious worry, but the sharper edge is the share-link tool. One call turns a confidential document into an anonymous URL that anyone can open, with no further authentication — a link that outlives the session and the agent that made it.

These ingress policies close that path. `guard-share-links-external` (Box and Dropbox) denies anonymous and public links and downgrades scope to your organization, optionally injecting an expiry. `fence-restricted-folders` keeps the agent out of named sensitive paths entirely, and `guard-acl-recon` stops it from enumerating who-can-see-what as a reconnaissance step. For the reads that are allowed, `redact-pii-egress` masks personal data in file contents on the way back.

Layer the share-link deny with the folder fence and you get the useful default: the agent can read and summarize what it's allowed to, but it cannot widen access or hand a document to an outsider.

## Policies in this guide

- [Guard Box Share Links and External Collaborations](https://www.intentbasedpolicy.com/policies/box/guard-share-links-external) — Blocks the externally-visible Box sharing surface — the riskiest Box surface an agent can touch — before the call ever reaches Box:
- [Block Public Dropbox Share, Download, and File-Request Links](https://www.intentbasedpolicy.com/policies/dropbox/guard-share-links-external) — Denies, by default, the Dropbox tools that turn an internal file into an internet-visible resource in a single call — before the request ever reaches Dropbox:
- [Fence Restricted Google Drive Files and Folders](https://www.intentbasedpolicy.com/policies/google-drive/fence-restricted-folders) — Fences an admin-maintained denylist of restricted Google Drive file and folder IDs — HR records, M&A deal rooms, board packs, payroll — off the agent channel:
- [Guard Drive ACL Reconnaissance](https://www.intentbasedpolicy.com/policies/google-drive/guard-acl-recon) — Denies Google Drive get file permissions tool calls unless the caller's IdP groups claim contains infosec. All other tool calls pass through unchanged.
- [Google Drive: Redact PII from File Content](https://www.intentbasedpolicy.com/policies/google-drive/redact-pii-egress) — Scans the responses of the content-returning Google Drive tools — file reads, downloads, and Docs/Sheets/Slides content fetches — and rewrites personally…