Antivirus Scanning in Quip

Background

Antivirus scanning is designed to prevent users from downloading potentially malicious file attachments from Quip onto their local machine. This is an additional safeguard we provide to Quip Shield customers, in addition to the numerous safeguards already implemented in Quip’s architecture.

Availability

Quip Antivirus Scanning is available to Quip sites that have purchased Quip Shield or the Antivirus Scanning functionality. If you have questions about purchasing Antivirus Scanning, please contact your Salesforce Account Executive. 

Product Behavior

• Once the feature is enabled, any new file uploaded to Quip will be scanned upon initial upload for potential viruses. This includes file attachments in the Quip document itself, as well as attachments in Quip messages and comments (also referred to as annotations). The scan may take up to 60 seconds to complete.
• During the pending state (prior to being scanned), end users will be unable to download the file and will see a warning: “This file is still being scanned. Please try again in 60 seconds.” Users should wait for a minute and then attempt to download the file again.
• In the event that a virus is identified in an uploaded file, a user who attempts to download the file will see a warning: “This file has malicious content and cannot be downloaded.” There is no manual override at this time; users who wish to gain access to this file should contact their administrator to work directly with the user who initially uploaded the file.

Notes

• In order to provide users with the best possible experience, images inserted into Quip will render immediately.
• Attachments will be scanned upon initial upload to Quip; they will not be rescanned, nor will all existing attachments be scanned upon initially enabling the feature.

Administration

Quip admins can enable antivirus scanning by going to the Quip Admin Portal → Quip Shield. From there, they can then enable Quip Antivirus Scanning. Only once this feature is enabled will new uploads be scanned for viruses.