Hey @Anthony Miller 2
To reassure your security team: Intercom takes file upload security seriously, especially for images and attachments shared through the Messenger. When a customer sends a file (like a screenshot), Intercom scans it for potential threats and stores it securely. We restrict executable file types (like .exe, .bat, etc.) from being uploaded entirely, and known malware types are blocked automatically.
Key points to share with your team:
-
Images and common file types (like PNG, JPG, PDF) are allowed, but Intercom blocks potentially dangerous formats.
-
Uploaded files are scanned and served securely via Intercom’s CDN.
-
You can’t run or execute any uploaded file directly from Messenger they’re just attachments, not active content.
-
There’s no way for a customer to inject or execute malware via image uploads in Messenger.
Let me know if you'd like to explore restricting certain file types or setting up a workflow to review incoming files happy to help find the right balance between usability and security!
