diff --git a/proxies/sandbox/apiproxy/policies/AssignMessage.AddCors.xml b/proxies/sandbox/apiproxy/policies/AssignMessage.AddCors.xml
index c07cd2f8..1e496d30 100644
--- a/proxies/sandbox/apiproxy/policies/AssignMessage.AddCors.xml
+++ b/proxies/sandbox/apiproxy/policies/AssignMessage.AddCors.xml
@@ -8,7 +8,7 @@
             <!--you can add headers here if you want to expose
             <Header name="Access-Control-Expose-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid, x-my-new-header</Header> -->
             <Header name="Access-Control-Max-Age">3628800</Header>
-            <Header name="Access-Control-Allow-Methods">GET, PUT, POST, DELETE</Header>
+            <Header name="Access-Control-Allow-Methods">GET, PUT, POST, DELETE, PATCH</Header>
         </Headers>
     </Set>
     <IgnoreUnresolvedVariables>true</IgnoreUnresolvedVariables>