Supported File Types

JSON Markdown
This page displays the live file type configuration enforced by GetSafeDocs on Google Cloud Run. Last updated: 2026-11-12 11:42:38 UTC
File Type Restrictions by Account Tier
Free Account

Allowed: Documents, images, archives, and text/code formats

Total Types: 61 file extensions

Security: QuickSand static malware analysis

Premium Account

Allowed: All Free types + video, audio, design & all non-forbidden formats

Categorized Types: 82 file extensions (+21 media/design)

Restrictions: Only 32 executable/script types blocked

Enterprise Account

Allowed: All file types except forbidden executables

Categorized Types: 82 file extensions (+ custom exception review)

Security: Enterprise-grade malware analysis & audit trail

Free Tier (61 Supported Extensions)

Available to all users with Free, Premium, and Enterprise accounts:

Documents 12
.pdf .doc .docx .xls .xlsx .ppt .pptx .txt .rtf .odt .ods .odp
Images 8
.jpg .jpeg .png .gif .bmp .webp .tiff .svg
Archives 5
.zip .rar .7z .tar .gz
Text/Code Files 36
.sql .csv .json .xml .html .htm .css .js .md .ini .conf .cfg .yaml .yml .log .py .rb .php .pl .sh .ps1 .go .rs .cpp .c .h .java .scala .kt .swift .dart .ts .tsx .vue .svelte .env
Total: 61 file types supported on Free Tier

Premium & Enterprise Tier (+21 Media & Design Extensions)

Premium and Enterprise users have access to all Free tier types plus video, audio, professional design files, and any non-forbidden file format:

Video Files 8
.mp4 .avi .mov .wmv .flv .webm .mkv .m4v
Audio Files 6
.mp3 .wav .flac .aac .ogg .m4a
Design Files 7
.psd .ai .eps .indd .sketch .fig .xd
Premium & Enterprise Additional: 21 media & design file types
Total Categorized (Free + Premium): 82 file types supported (plus any non-forbidden extension)

Forbidden File Types (32 Blocked Across All Tiers)

These executable, script, and system file types are permanently blocked across all user tiers for security reasons:

Executables 10
.exe .bat .cmd .com .msi .scr .pif .cpl .dll .ocx
Scripts 11
.vbs .vbe .vb .vbscript .js .jse .wsh .wsf .ws .sh .run
System Files 8
.lnk .reg .inf .ins .inx .gadget .app .job
Mobile Apps 2
.apk .ipa
Other Binary 1
.bin
Security Notice: These file types pose direct execution risks and are blocked across all account tiers.
Enterprise Exceptions: If your Enterprise organization has legitimate business requirements to share blocked file types, exceptions may be considered upon formal request. Contact your account manager or submit a request for review. All exceptions require security assessment and approval.

Technical Details & Programmatic Access

7-Layer Upload Validation Pipeline
  1. Client-side pre-validation — File extension, count, and size checks before upload
  2. Server-side extension blocklist — Permanent forbidden executable/script check
  3. Account tier enforcement — User tier determines allowed extensions and per-file size caps
  4. V4 Signed URL Content-Type binding — Cryptographic MIME-type binding on direct-to-GCS uploads
  5. Upload token verification — Session-bound upload authorization
  6. Magic-byte MIME inspection — Post-upload header inspection to prevent disguised executables
  7. QuickSand Malware Analysis — Static & structural analysis of Office macros, PDF streams, archives, and embedded payloads on stopmalware.cloud.run
API & Machine-Readable Endpoints

Query the live file type configuration programmatically:

  • GET https://getsafedocs.cloud.run/file_types?format=json — Categorized JSON format
  • GET https://getsafedocs.cloud.run/file_types?format=markdown — Markdown format for documentation
  • GET https://getsafedocs.cloud.run/api/file_types — REST API endpoint (also available as MCP tool get_supported_file_types and MCP resource getsafedocs://config/file-types)
Need to Share More File Types?

Upgrade to Premium or Enterprise to share video, audio, CAD/design files, and larger attachments up to 200 MB per file.

View Pricing Plans Contact Support