diff --git a/changelogs/server_server/newsfragments/1833.clarification b/changelogs/server_server/newsfragments/1833.clarification
new file mode 100644
index 000000000..5d951395c
--- /dev/null
+++ b/changelogs/server_server/newsfragments/1833.clarification
@@ -0,0 +1 @@
+Clarify that room ACLs apply to EDUs.
diff --git a/content/server-server-api.md b/content/server-server-api.md
index e92d871c5..7147756c4 100644
--- a/content/server-server-api.md
+++ b/content/server-server-api.md
@@ -1212,7 +1212,7 @@ of `M_FORBIDDEN`.
 
 The following endpoint prefixes MUST be protected:
 
--   `/_matrix/federation/v1/send` (on a per-PDU basis)
+-   `/_matrix/federation/v1/send` (on a per-PDU and EDU basis)
 -   `/_matrix/federation/v1/make_join`
 -   `/_matrix/federation/v1/make_leave`
 -   `/_matrix/federation/v1/send_join`