Whitelisting WRITER domains and third-party services
Last updated: October 2, 2026
To access WRITER and open deliverables shared through WRITER, your organization's network must allow traffic to WRITER domains and to the third-party services that support platform functionality. IT admins and network administrators should add the domains in this article to their firewall, proxy, or allowlist configurations.
Why allowlisting is required
WRITER web app, API, and shared deliverables are served from a set of domains under writer.com and several partner domains. If your organization uses a firewall, secure web gateway, or DNS filtering that blocks unknown domains, users may experience broken pages, failed file loads, or inability to open shared links unless these domains are explicitly allowed.
Allowlisting all domains below ensures that WRITER and any content shared through WRITER load correctly for your users.
Domains to whitelist:
UI Domains | Purpose |
Writer domains - app, api, etc | |
Writer App delivery | |
Google Analytics, reCAPTCHA Enterprise | |
Google Fonts files, Google static assets | |
Google Fonts CSS and Firebase | |
Google Tag Manager | |
Cloudflare Web Analytics | |
User Experience | |
*.candu.ai | User Experience |
User Experience | |
Statsdig - Feature flag | |
Statsdig - Feature flag | |
Customer Support |
Note: WRITER uses third-party services for analytics, feature flagging, and in-product guidance. Blocking these domains can degrade platform functionality or prevent certain features from loading. You can find our full list of subprocessors and their roles in our subprocessors list.
Frequently asked questions
Do I need to allowlist the third-party domains if I only use the WRITER web app?
Yes. The third-party domains support analytics, feature flagging, and in-product guidance that the web app relies on. Blocking them can cause features to fail or content to load incorrectly.
What happens if I don't allowlist these domains?
Users may experience broken pages, failed file loads, missing fonts, or inability to open deliverables shared through WRITER. Some platform features may not function if the third-party service domains are blocked.
Can I allowlist only the WRITER domains and skip the third-party services?
You can, but functionality may be limited. The third-party services support core platform behavior, so blocking them can degrade the experience even when the WRITER domains are allowed.
Where can I find the full list of WRITER subprocessors?
See our subprocessors list for the complete list of third-party services and their roles.
Do these domains change over time?
WRITER may add or update domains as the platform evolves.