Security Help Center
Regulated labels use the same recipient checks: internal recipients must be named users in RTX POV Entra with country US; registered external recipients must have citizenship US or a recorded export control license. Non-Regulated Labels are permitted without recipient checks.
Find your message
Choose the label group and recipient situation that match your notice.
The export identifies regulated labels by ID; see the label groups below.
Pick the one that matches your recipient.
— —
—
What this means
—
How to resolve it
Every outcome at a glance
Select any cell to load it above.
| Who you are sending to | Regulated Labels | Non-Regulated Labels |
|---|
How the check runs
One recipient tree for all four regulated label IDs.
- 1. Is the label in Regulated Labels?
- No → Non-Regulated Labels: allowed without recipient checks.
- Yes → Check the recipient domain.
- Internal domain → The recipient email must match the mail or user principal name of a user in RTX POV Entra.
- No matching named user → Blocked.
- Matching user, directory country exactly
US→ Allowed. - Matching user, country does not equal
US→ Blocked. This branch has no license check.
- External domain → The recipient email or domain must match a registered CSV entry.
- No matching entry → Blocked.
- Matching entry, citizenship exactly
US→ Allowed. - Citizenship does not equal
US, license exactlyyes→ Allowed. - Citizenship does not equal
US, license does not equalyes→ Blocked.
- Internal domain → The recipient email must match the mail or user principal name of a user in RTX POV Entra.
Block messages, word for word
Match the text you saw, then open it.
Label groups in the policy export
Who to ask
RTX POV policy guidance
For recipient registration, directory records, or license questions, follow the guidance linked in the block notice.
Read the RTX POV ABAC policies