Administration
Fix a problem
Network configurations for SafetyCulture

Last updated: July 17, 2024

Network configurations for SafetyCulture

Take a look at the network configurations your organization may need to fully support SafetyCulture functionalities.

Configure proxy or VPN settings

If your network requires a proxy or VPN configuration, you can confirm the details with your IT department and install it on relevant devices. Once a proxy or VPN configuration is installed on a mobile device, the SafetyCulture mobile app would use the device's configuration to make the required connections to our servers.

If you have HTTP proxies or VPNs, the configuration must support HTTP/2 for SafetyCulture to function normally. This doesn't apply to TCP proxies or VPNs.

Some proxies may support HTTP/2 on the client-side but downgrades to HTTP/1.1 toward the server-side. Please make sure both sides support HTTP/2.

Android devices

For Android devices, the instructions may differ between devices, so be sure to check the relevant device's manual or support articles to configure the proxy or VPN settings.

iOS devices

For iOS devices, you can configure the proxy or VPN settings via the "Settings" app. The SafetyCulture mobile app also accepts proxy or VPN settings that are configured via configuration profiles.

Manage internet filtering

If your organization network employs an application filtering system, such as Netbox Blue, and issues custom SSL certificates for internal connections, there may be a requirement to allow Android and iOS devices to accept certificates signed by your organization. Whilst we fully support Transport Layer Security (TLS), please note that only inspection is supported for internet filtering systems, and not the termination of connections to the SafetyCulture mobile app.

Add SafetyCulture domains and URLs to your allowlist

We utilize a broad range of domains and URLs to support the web app, the mobile app, and related services. If your organization has firewall or filtering settings in place to block unknown connections, you may need to whitelist the following domains and URLs or add them to your allowlist for SafetyCulture to function at its full capacity.

Global

The following domains and URLs apply to all hosting regions.

General

Domain	URL	Description
`auth.safetyculture.com`	`auth.safetyculture.com`	Facilitates login and authentication for SafetyCulture.
`.safetyculture.com`	`safetyculture.com`	Hosts the marketing website.
`.safetyculture.com`	`www.safetyculture.com`	Hosts the marketing website.
`.safetyculture.com`	`developer.safetyculture.com`	Hosts the developer documentation.
`.safetyculture.com`	`blog.safetyculture.com`	Hosts the blog website.
`.safetyculture.com`	`public-library.safetyculture.com`	Hosts the SafetyCulture public template library.
`.safetyculture.io`	`safetyculture.io`	Hosts the marketing website.
`.safetyculture.io`	`www.safetyculture.io`	Hosts the marketing website.
`.safetyculture.io`	`flags.safetyculture.io`	Facilitates the feature flags used by the SafetyCulture mobile app.
`.safetyculture.io`	`public-library.safetyculture.io`	Hosts the SafetyCulture public template library.
`.safetyculture.com`	`help.safetyculture.com`	Hosts the SafetyCulture Help Center.
`.ctfassets.net`	`.ctfassets.net`	Facilitates the content in the SafetyCulture Help Center.
`.googletagmanager.com`	`.googletagmanager.com`	Facilitates the analytics and applications across SafetyCulture websites.
`.cloudflare.com`	`.cloudflare.com`	Provides DNS services to direct traffic to the correct IP addresses for SafetyCulture API services.

SafetyCulture web app and mobile app

Domain	URL	Description
`api.safetyculture.com`	`api.safetyculture.com`	Provides access to the SafetyCulture web app and mobile app. This applies to all hosting regions.
`email.safetyculture.io`	`email.safetyculture.io`	Facilitates user invites.
`.edapp.com`	`.edapp.com`	Facilitates the Training feature on the SafetyCulture web app and mobile app.
`.kustomerapp.com`	`api.kustomerapp.com`	Facilitates the SafetyCulture in-app live chat functionality.
`.kustomerapp.com`	`cdn.kustomerapp.com`	Facilitates the SafetyCulture in-app live chat functionality.
`.s3.amazonaws.com`	`.s3.amazonaws.com`	Facilitates the SafetyCulture in-app live chat functionality.
`.pubnub.com`	`.pubnub.com`	Facilitates the SafetyCulture in-app live chat functionality.
`.pubnub.net`	`.pubnub.net`	Facilitates the SafetyCulture in-app live chat functionality.
`.pubnub.io`	`.pubnub.io`	Facilitates the SafetyCulture in-app live chat functionality.
`.pndsn.com`	`.pndsn.com`	Facilitates the SafetyCulture in-app live chat functionality.
`bnc.it`	`bnc.it`	Directs users to specific areas within the SafetyCulture mobile app. Often used when a user shares the SafetyCulture mobile app or a web report link.
`sfty.io`	`sfty.io`	Directs users to specific areas within the SafetyCulture mobile app. Often used when a user receives notifications for actions, schedules, or shared inspections.
`0fhl.app.link`	`0fhl.app.link`	Directs users to specific areas within the SafetyCulture mobile app. Often used when a user receives notifications for actions, schedules, or shared inspections.
`.iad-06.braze.com`	`sdk.iad-06.braze.com`	Facilitates in-app prompts, email communications, and push notifications
`.appboycdn.com`	`.appboycdn.com`	Facilitates in-app prompts, email communications, and push notifications
`.app-measurement.com`	`.app-measurement.com`	Reports Analytics events from Firebase to SafetyCulture.
`.digicert.com`	`.digicert.com`	Ensures the data exchanged between the web app and our cloud services is transmitted securely (encrypted).
`.letsencrypt.org`	`.letsencrypt.org`	Ensures the data exchanged between the web app and our cloud services is transmitted securely (encrypted).

SafetyCulture mobile app (Android and iOS)

Domain	URL	Description
`.appsflyer.com`	`.appsflyer.com`	Provides a software development kit that allows mobile app use, installation, and download tracking.
`.branch.io`	`api.branch.io`	Allows app installation via a tracked app deep link.
`.apptimize.com`	`md-i-d.apptimize.com`	Facilitates A/B split testing.
`.amplitude.com`	`api.amplitude.com`	Provides product analytics.
`.googleapis.com`	`www.googleapis.com`	Provides product analytics.

SafetyCulture mobile app (Android)

Domain	URL	Description
`.googleapis.com`	`maps.googleapis.com`	Provides access to Google Maps when using location services.

SafetyCulture mobile app (iOS)

Domain	URL	Description
`.apple.com`	`.apple.com`	Provides access to Apple Maps when using location services.

SafetyCulture web app

Domain	URL	Description
`.fontawesome.com`	`.fontawesome.com`	Facilitates text fonts for the SafetyCulture web app.
`.gstatic.com`	`fonts.gstatic.com`	Facilitates external CDN for Google Fonts and Google Maps.
`.gstatic.com`	`maps.gstatic.com`	Facilitates external CDN for Google Fonts and Google Maps.
`.gstatic.com`	`csi.gstatic.com`	Provides anonymized statistics used by SafetyCulture to measure the effectiveness of SafetyCulture online marketing. Sent to Google, LinkedIn, and Capterra.
`.google-analytics.com`	`www.google-analytics.com`	Provides anonymized statistics used by SafetyCulture to measure the effectiveness of SafetyCulture online marketing. Sent to Google, LinkedIn, and Capterra.
`.capterra.com`	`ct.capterra.com`	Provides anonymized statistics used by SafetyCulture to measure the effectiveness of SafetyCulture online marketing. Sent to Google, LinkedIn, and Capterra.
`.ads.linkedin.com`	`dc.ads.linkedin.com`	Provides anonymized statistics used by SafetyCulture to measure the effectiveness of SafetyCulture online marketing. Sent to Google, LinkedIn, and Capterra.
`.licdn.com`	`snap.licdn.com`	Provides anonymized statistics used by SafetyCulture to measure the effectiveness of SafetyCulture online marketing. Sent to Google, LinkedIn, and Capterra.
`.doubleclick.net`	`stats.g.doubleclick.net`	Provides anonymized statistics used by SafetyCulture to measure the effectiveness of SafetyCulture online marketing. Sent to Google, LinkedIn, and Capterra.
`.jsdelivr.net`	`cdn.jsdelivr.net`	Facilitates external CDN for JavaScript files required by the SafetyCulture web app.
`.statuspage.io`	`.statuspage.io`	Facilitates service status reporting.
`.polyfill.io`	`cdn.polyfill.io`	Provides support for certain web browser versions.
`.hotjar.com`	`insights.hotjar.com`	Provides product analytics.
`.segment.com`	`cdn.segment.com`	Provides product analytics.
`.segment.io`	`api.segment.io`	Provides product analytics.
`.appcues.com`	`my.appcues.com`	Facilitates in-app prompts and walkthroughs.
`.appcues.com`	`vulpix.appcues.com`	Facilitates in-app prompts and walkthroughs.
`.appcues.com`	`fast.appcues.com`	Facilitates in-app prompts and walkthroughs.
`.newrelic.com`	`js-agent.newrelic.com`	Facilitates performance and error troubleshooting.
`.nr-data.net`	`bam.nr-data.net`	Facilitates performance and error troubleshooting.
`.wistia.net`	`.wistia.net`	Hosts in-app video tutorials.
`.youtube.com`	`.youtube.com`	Hosts in-app video tutorials.
`.chargify.com`	`.chargify.com`	Facilitates billing communications.

Region-specific

The following domains and URLs are hosting-region-specific.

US region

Domain	URL	Description
`.safetyculture.io`	`sync.safetyculture.io`	Hosts the mobile app API gateway.
`.safetyculture.io`	`app.safetyculture.io`	Hosts the web app.
`.safetyculture.io`	`app-v2.safetyculture.io`	Hosts the version 2 web app.
`.safetyculture.io`	`analytics.safetyculture.io`	Provides web app analytics.
`.safetyculture.io`	`api.safetyculture.io`	Facilitates the public API for integrations.
`.safetyculture.io`	`reports.safetyculture.io`	Hosts the web report service.
`.safetyculture.com`	`sync.safetyculture.com`	Hosts the mobile app API gateway.
`.safetyculture.com`	`app.safetyculture.com`	Hosts the web app.
`.safetyculture.com`	`app-v2.safetyculture.com`	Hosts the version 2 web app.
`.safetyculture.com`	`analytics.safetyculture.com`	Provides web app analytics.
`.safetyculture.com`	`reports.safetyculture.com`	Hosts the web report service.

Australian region

Domain	URL	Description
`.au.safetyculture.com`	`sync.au.safetyculture.com`	Hosts the mobile app API gateway.
`.au.safetyculture.com`	`app.au.safetyculture.com`	Hosts the web app.
`.au.safetyculture.com`	`app-v2.au.safetyculture.com`	Hosts the version 2 web app.
`.au.safetyculture.com`	`analytics.au.safetyculture.com`	Provides web app analytics.
`.au.safetyculture.com`	`api.au.safetyculture.com`	Facilitates the public API for integrations.
`.au.safetyculture.com`	`reports.au.safetyculture.com`	Hosts the web report service.
`.au.auth0.com`	`cdn.au.auth0.com`	Facilitates single sign-on for SafetyCulture in the Australian region.
`.au.auth0.com`	`safetyculture.au.auth0.com`	Facilitates single sign-on for SafetyCulture in the Australian region.

EU (Ireland) region

Domain	URL	Description
`.eu.safetyculture.com`	`sync.eu.safetyculture.com`	Hosts the mobile app API gateway.
`.eu.safetyculture.com`	`app.eu.safetyculture.com`	Hosts the web app.
`.eu.safetyculture.com`	`app-v2.eu.safetyculture.com`	Hosts the version 2 web app.
`.eu.safetyculture.com`	`analytics.eu.safetyculture.com`	Provides web app analytics.
`.eu.safetyculture.com`	`api.eu.safetyculture.com`	Facilitates the public API for integrations.
`.eu.safetyculture.com`	`reports.eu.safetyculture.com`	Hosts the web report service.
`.eu.auth0.com`	`cdn.eu.auth0.com`	Facilitates single sign-on for SafetyCulture in the European region.
`.eu.auth0.com`	`safetyculture.eu.auth0.com`	Facilitates single sign-on for SafetyCulture in the European region.

Restrict IP addresses used by SafetyCulture

If your organization has integrations set up with SafetyCulture either via the public API or webhooks, you may want to restrict requests from the IP addresses listed in this section.

Please note that the IP addresses are hosting-region-specific.

Public API

The following IP addresses are static and only apply to the SafetyCulture public API, not the web app, the mobile app, or webhooks.

Global

Please add "notification@safetyculture.io" to your allowlist so your team members can receive notification emails from SafetyCulture.

Internet Protocol	IP address
IPv4	`162.159.133.11`
IPv4	`162.159.134.11`
IPv4	`162.159.128.35`
IPv4	`162.159.138.34`
IPv6	`2606:4700:7::a29f:850b`
IPv6	`2606:4700:7::a29f:860b`
IPv6	`2606:4700:7::a29f:8023`
IPv6	`2606:4700:7::a29f:8a22`

Australian region

The global IP addresses must also be added to your allowlist in addition to the following ones.

Internet Protocol	IP address
IPv4	`162.159.129.33`
IPv4	`162.159.130.33`
IPv6	`2606:4700:7::a29f:8121`
IPv6	`2606:4700:7::a29f:8221`

EU (Ireland) region

The global IP addresses must also be added to your allowlist in addition to the following ones.

Internet Protocol	IP address
IPv4	`162.159.130.34`
IPv4	`162.159.133.34`
IPv6	`2606:4700:7::a29f:8222`
IPv6	`2606:4700:7::a29f:8522`

Webhooks

The following IP addresses are static and only apply to SafetyCulture webhooks, not the web app, the mobile app, or the public API.

U.S. region

Internet Protocol	IP address
IPv4	`52.3.44.223`
IPv4	`18.235.34.216`
IPv4	`18.214.29.125`

Australian region

Internet Protocol	IP address
IPv4	`13.236.158.12`
IPv4	`54.79.0.30`
IPv4	`13.237.201.42`

EU (Ireland) region

Internet Protocol	IP address
IPv4	`63.32.51.103`
IPv4	`63.33.73.145`
IPv4	`63.33.112.98`

Add Ethernet and Wi-Fi gateway requirements to your allowlist

Adding network requirements to allowlist is only required for Ethernet and Wi-Fi gateways, not cellular gateways.

Hostnames

Gateways require the following hostnames to be added to your allowlist:

us-east-prod-mydev-hub.azure-devices.net
eu-west-prod-mydev-hub.azure-devices.net
au-east-prod-mydev-hub.azure-devices.net
jp-east-prod-mydev-hub.azure-devices.net
in-south-prod-mydev-hub.azure-devices.net
prod-dps.azure-devices-provisioning.net
global.azure-devices-provisioning.net

TCP ports

Gateways require open communication on TCP ports 8883 and 443.

NTP connections

Gateways make NTP connections to synchronize their clocks so that sensor readings are uploaded in the correct order.

Please ensure traffic to the following domain and URLs are allowed:

Domain	URL
`.pool.ntp.org`	`0.openwrt.pool.ntp.org` `1.openwrt.pool.ntp.org` `2.openwrt.pool.ntp.org` `3.openwrt.pool.ntp.org`

Domain

URL

.pool.ntp.org

0.openwrt.pool.ntp.org

1.openwrt.pool.ntp.org

2.openwrt.pool.ntp.org

3.openwrt.pool.ntp.org

Changelog

Date	Detail
May 22, 2023	Added a new global domain: `.edapp.com` Removed a global URL: `support.safetyculture.com`
May 8, 2023	Added new global domains: `.ctfassets.net` `.googletagmanager.com`
November 21, 2022	Renamed "iAuditor" references to "SafetyCulture".
October 24, 2022	Updated developer.safetyculture.io to developer.safetyculture.com.
October 6, 2021	Added support for restricting IP addresses when using SafetyCulture webhooks. See the "Webhooks" section.
October 6, 2021	Added a new global domain: `chargify.com`
June 23, 2021	Removed global domains: `.intercom.io .intercomcdn.com .intercomassets.com`
May 4, 2021	Added new global domains: `.fontawesome.com .appsflyer.com .app-measurement.com .appboycdn.com .digicert.com .letsencrypt.org`
April 14, 2021	Added a new global domain: `auth.safetyculture.com`
April 8, 2021	Add new global domains: `.s3.amazonaws.com .pubnub.comm .pubnub.net .pubnub.io .pndsn.com`
April 8, 2021	Added support for restricting IP addresses when using the SafetyCulture public API. See the "Public API" section.

Need more help?

Phone

Ask the community

Was this page helpful?

Thank you for letting us know.

If you would like a reply from someone, please contact us atsupport@safetyculture.com.

In this article