diff --git a/api/src/lib/aws.ts b/api/src/lib/aws.ts
index b802dc3c..f8fb44ff 100644
--- a/api/src/lib/aws.ts
+++ b/api/src/lib/aws.ts
@@ -110,6 +110,7 @@ export async function s3PutSignedUrl(
     Key: key,
     ContentType:
       'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+    ServerSideEncryption: 'AES256',
   }
   const url = await awsGetSignedUrl(s3, new PutObjectCommand(baseParams), {
     expiresIn: 60,