diff --git a/Scripts/cors-policy.xml b/Scripts/cors-policy.xml
new file mode 100644
index 000000000..93c3ebe03
--- /dev/null
+++ b/Scripts/cors-policy.xml
@@ -0,0 +1,9 @@
+<CORSConfiguration>
+  <CORSRule>
+    <AllowedOrigin>https://cog.losno.co</AllowedOrigin>
+    <AllowedMethod>GET</AllowedMethod>
+    <AllowedHeader>*</AllowedHeader>
+    <MaxAgeSeconds>3600</MaxAgeSeconds>
+    <ExposeHeader>x-server-side-encryption</ExposeHeader>
+  </CORSRule>
+</CORSConfiguration>