Skip to main content
To ensure full functionality of GC AI products (Web App and Word Add-in), your network firewall or proxy must allow outbound connections to the following domains and ports.

​
Quick Summary

  • Ports: 443 (HTTPS & WSS)
  • Protocols: TLS 1.2+, Secure WebSockets (WSS)
  • Method: Whitelist by Domain Name (DNS) is required due to dynamic IP usage by our cloud providers.

​
Required Domains

​
Application Core

These domains are essential for the application to load and function.
DomainPurpose
app.gc.aiMain Web Application
word.getgc.aiWord Add-in Frontend

​
File Storage & Processing

Required for uploading documents and viewing processed files.
DomainPurpose
storage.googleapis.comSecure file uploads and downloads (Google Cloud Storage)

​
WebSocket Requirements

The GC AI Word Add-in requires Secure WebSockets (WSS) over port 443 to communicate in real time with our AI engine. Please ensure your network allows outbound WSS traffic to the following domains:
  • app.gc.ai
  • word.getgc.ai

​
Troubleshooting

If you encounter specific error messages, they may indicate that certain domains are blocked.
Error Message / SymptomProbable CauseResolution
”There was an error uploading your file” or “HTTP error” during uploadConnection to cloud storage is blocked.Ensure storage.googleapis.com is allowed.

​
Security Software (Zscaler, Netskope, etc.)

Organizations using security platforms like Zscaler or Netskope may need additional configuration beyond domain allowlisting. These platforms can block Microsoft 365 add-in traffic through SSL/TLS inspection, URL filtering, or cloud app control policies. Zscaler users: Zscaler offers a Microsoft One Click Configuration that automatically exempts Microsoft 365 traffic from SSL/TLS inspection and configures the necessary firewall, DNS, and cloud app control rules. Enabling this is the fastest way to resolve add-in connectivity issues in Zscaler environments. For detailed troubleshooting steps — including domain allowlisting by security platform, SSL/TLS inspection bypass, and proxy configuration — see the GC AI for Word Troubleshooting Guide.

​
Additional Resources

For a comprehensive list of Microsoft 365 endpoints that may also need to be reachable from your network, refer to the official Microsoft documentation: