---
updatedAt: 2026-07-30T16:21:28.000Z
agentTools:
  projectIndex: https://docs.conveyor.com/llms.txt
---

# Blocking domains

# Blocking domains

**Time to complete:** 5 minutes<br />**Prerequisites:** Trust Center created in the [Designer](using-the-designer)

***

## Overview

Blocking domains helps prevent unwanted or low-quality access requests to your Trust Center. You can automatically deny requests from free email providers (like Gmail or Yahoo) or from specific domains (such as competitors) before they ever reach your review queue.

Both controls live on the same settings page: **Settings** → **Trust Center** → **NDA & Access**, in the **Trust Center Blocked Domains** section.

***

## Open the Trust Center Blocked Domains settings

1. In the Conveyor app, click your **organization name** in the upper-left sidebar.
2. Select **Settings**.
3. In the settings sidebar, under **Trust Center**, click **NDA & Access**.
4. Scroll to the **Trust Center Blocked Domains** section at the bottom of the page.

<Image src="https://files.readme.io/f95c7f270ef0de592d29fe7eb2d43ddd0d70839c8089b09d64763954ba768c3b-Screenshot_2026-04-23_at_12.36.19_PM.png" alt="Conveyor left sidebar with the organization name menu open, showing the user's name, email, a Settings link with a gear icon, and a Log out link." border={true} />

*Open Settings from the organization menu in the top-left sidebar.*

<Image src="https://files.readme.io/39de12e6a6100835b1f3eb920d893cda6d15631b71081ec50302359a5f37a792-Screenshot_2026-04-23_at_12.39.31_PM.png" alt="Settings sidebar with the Trust Center NDA & Access settings selected." border={true} />

*NDA & Access sits under the Trust Center group in the settings sidebar.*

<Callout icon="💡" theme="default">
  You can also jump straight to the page at [app.conveyor.com/settings/trust-center/nda-access](https://app.conveyor.com/settings/trust-center/nda-access).
</Callout>

***

## Block Free Email Domains

Conveyor can enforce that visitors request access using a business email address by rejecting requests from free email domains (for example, `gmail.com` or `yahoo.com`).

### Enable free-domain blocking

1. In the **Trust Center Blocked Domains** section, turn on **Block free email domains**.
2. Click **Save Changes**.

Once enabled, a visitor who submits a free email domain sees a validation error and is prompted to try again with a work-issued email address.

<Image src="https://files.readme.io/ea94cf6b4cb00c0c44d707e6b3e3ce1b9ced45d530a3b5a244be31f453816713-Screenshot_2026-04-23_at_12.42.23_PM.png" alt="Trust Center Blocked Domains section with the Block free email domains toggle enabled." border={true} />

*Turn on the Block free email domains toggle to reject requests from providers like Gmail and Yahoo.*

<Image src="https://files.readme.io/1f3709d9c41787c03435c4414dc0860be762386260a12bf02873639e5b4f7d33-Screenshot_2026-02-05_at_5.20.09_PM.png" alt="Visitor-facing access request screen showing an inline validation error explaining that free email addresses are not accepted and prompting the visitor to enter a work email." border={true} />

*Visitors are notified immediately when a free email domain can't be used.*

***

## Block Specific Domains

You can also block individual domains from accessing your Trust Center — useful for preventing requests from competitors or other organizations you don't want to engage with.

### Add blocked domains

1. In the **Trust Center Blocked Domains** section, locate **Block specific domains**.
2. In the text area, enter one or more domains to block. Separate entries with commas or new lines (for example: `competitor.com, example.org`).
3. Click **Save Changes**.

<Image src="https://files.readme.io/3695fdb4a421f99a95bdc66f1f168d7e299c443c13a273e65a4ebbe7a5edf370-Screenshot_2026-04-23_at_12.43.03_PM.png" alt="Block specific domains text area with helper text 'Enter domains to block, separated by newlines or commas (e.g., competitor.com, example.org)' and a Save Changes button below it." border={true} />

*Add one or more domains here to block access requests from those organizations.*

<Callout icon="💡" theme="default">
  Subdomains are blocked automatically. If you list `competitor.com`, a request from `someone@mail.competitor.com` will also be blocked.
</Callout>

### What happens to a blocked request

Requests from blocked domains:

* Automatically appear in **Audience** → **Requests**
* Have a **Request Status** of **Closed**
* Include a note indicating the request was blocked due to a domain restriction
* Do not notify the requester that their request was denied — unless you've turned on [access request notifications](access-request-notifications)

<Image src="https://files.readme.io/220c1c24eefd8d5bc11b78c9d94a21d3216adf86d45e07a24e13cd9f804fc23f-image.png" alt="Audience Requests table showing a blocked request with Request Status set to Closed and a note reading 'Domain on blocked list.'" border={true} />

*Blocked requests are automatically closed and clearly labeled so you can audit them.*

<Image src="https://files.readme.io/6d06955b78a838d150f012d14ba9c310219f0720367c0961635d88b4fc64c21e-image.png" alt="Visitor-facing view with no response or error message shown after submitting a request from a blocked domain." border={true} />

*By default, visitors from blocked domains are not notified that their request was denied.*

<Callout icon="📘" theme="info">
  If you enable [rejection emails](access-request-notifications), visitors whose requests are closed by the **Block specific domains** list will receive your rejection message. Visitors caught by **Block free email domains** are stopped at the request form before a request is created, so they never receive one.
</Callout>

***

## Common questions

**What domains are considered "free domains"?**
Conveyor maintains a list of thousands of free email providers and actively keeps it up to date, so we can't share a point-in-time export. If you want to check whether a specific domain is on the list — or nominate one you think should be added — contact <support@conveyor.com>.

**Can I tell a blocked requester why they were denied?**<br />Yes. Turn on [access request notifications](access-request-notifications) to send a customizable rejection email whenever a request is closed — including requests blocked by domain. This applies to the **Block specific domains** list only.

**Can I approve a blocked request?**
No. To let a previously blocked domain through, remove it from the blocked list and ask the requester to submit a new request.

**Does blocking domains affect existing Connections?**
No. Domain blocking applies only to new access requests and doesn't impact existing [Connections](managing-connections) from that domain.

**Does blocking a domain prevent me from inviting someone from that organization?**
No. You can still manually invite users from a blocked domain through [pre-approved invitations](issuing-pre-approved-invitations). Blocking only denies self-serve access requests.

***

## What's next?

* [Connections overview](managing-connections) — Review and manage who has access to your Trust Center.
* [Letting visitors request access](share-via-link-approve-access-requests) — Fine-tune how self-serve access requests are reviewed.
* [Maintaining your Trust Center](maintaining-your-trust-center) — Keep your Trust Center accurate as your security posture evolves.

***

**Need help?** Visit the [Troubleshooting guide](trust-center-issues) or contact <support@conveyor.com>.