Skip to main content
To ensure full functionality of GC AI products (Web App and Word Add-in), your network firewall or proxy must allow outbound connections to the following domains and ports.

​
Quick Summary

  • Ports: 443 (HTTPS & WSS)
  • Protocols: TLS 1.2+, Secure WebSockets (WSS)
  • Method: Whitelist by Domain Name (DNS) is required due to dynamic IP usage by our cloud providers.

​
Required Domains

​
Application Core

These domains are essential for the application to load and function.

​
File Storage & Processing

Required for uploading documents and viewing processed files.

​
WebSocket Requirements

The GC AI Word Add-in requires Secure WebSockets (WSS) over port 443 to communicate in real time with our AI engine. Please ensure your network allows outbound WSS traffic to the following domains:
  • app.gc.ai
  • word.getgc.ai

​
Troubleshooting

If you encounter specific error messages, they may indicate that certain domains are blocked.

​
Security Software (Zscaler, Netskope, etc.)

Organizations using security platforms like Zscaler or Netskope may need additional configuration beyond domain allowlisting. These platforms can block Microsoft 365 add-in traffic through SSL/TLS inspection, URL filtering, or cloud app control policies. Zscaler users: Zscaler offers a Microsoft One Click Configuration that automatically exempts Microsoft 365 traffic from SSL/TLS inspection and configures the necessary firewall, DNS, and cloud app control rules. Enabling this is the fastest way to resolve add-in connectivity issues in Zscaler environments. For detailed troubleshooting steps, including domain allowlisting by security platform, SSL/TLS inspection bypass, and proxy configuration, see the GC AI for Word Troubleshooting Guide.

​
Additional Resources

For a comprehensive list of Microsoft 365 endpoints that may also need to be reachable from your network, refer to the official Microsoft documentation: