What your IT department needs to allow
If Dossio will not open from a workstation at your firm — or, more confusingly, if the public site loads and sign-in spins forever — the cause is almost always a network filter, not an outage. Hand this page to your IT department or managed service provider as is: it has everything they need, and nothing they have to ask us for.
Hosts to allow
All over HTTPS, port 443, outbound only. Nothing else: no other port, and no inbound connection to your network.
dossio.cawww.dossio.caRequired- What it does —
- The public site and the application itself.
- What breaks without it —
- Nothing opens.
oiynvcjnqpwdyztljgvv.supabase.coRequired- What it does —
- Database, sign-in, second factor and documents. The browser talks to it directly, not through our servers — which is why allowing it is not optional.
- What breaks without it —
- The most misleading symptom of all: the public site loads perfectly and sign-in fails. Everyone concludes the site is allowed and looks elsewhere.
challenges.cloudflare.comRequired- What it does —
- The anti-robot challenge on the sign-in and sign-up screens (Cloudflare Turnstile).
- What breaks without it —
- The sign-in screen loads and the button does nothing.
checkout.stripe.combilling.stripe.comDepending on your use- What it does —
- The subscription payment page, hosted by Stripe. The browser goes there and comes back; no card number ever passes through Dossio.
- What breaks without it —
- Everyday work is unaffected, but no one can pay or change plans.
accounts.google.comlogin.microsoftonline.comDepending on your use- What it does —
- Sign-in with a Google or Microsoft account, if your firm uses it.
- What breaks without it —
- Password sign-in keeps working.
dossio.ca www.dossio.ca oiynvcjnqpwdyztljgvv.supabase.co challenges.cloudflare.com checkout.stripe.com billing.stripe.com accounts.google.com login.microsoftonline.com
What there is nothing to do about
- Nothing to install on the workstation. Dossio is a website; a current browser is enough.
- No administrator rights, no extension, no plug-in.
- No VPN, no tunnel, no agent.
- No inbound port: nothing connects to your network from outside.
- No IP addresses to allow — our hosts sit behind content delivery networks whose addresses change without notice. An IP-based rule will work for a month and then break one morning, with nobody connecting the two events. Rules must be written against names.
Why a filter blocks Dossio
In order of frequency. None of these says anything about the site itself — which is exactly what makes them so tiresome to explain to someone who only sees a refused page.
The domain is not categorized yet
Corporate filters refuse two categories by default: recently registered domains, and domains their database does not know. A Quebec vendor starting out falls into both. The refusal happens before the content is ever looked at.
The host provider is refused wholesale
Our servers are with Vercel, in Montreal, on addresses shared with a great many other sites. Some filters file every cloud host under “file hosting” and refuse the lot. A rule per hostname, like the ones above, settles it without opening the provider wholesale.
The filtering happens at DNS
Some networks filter one step earlier: the name simply does not resolve, and the browser reports that the site does not exist. Same block, more confusing message.
Exactly one host is missing
The most expensive one to diagnose, because the site opens. Allowing the main domain without allowing the database host gives you an immaculate public site and an unusable application.
Telling them apart in thirty seconds
The fastest test comes before this table: open the same address on a phone using cellular data, not the office network. If it loads, the filter is the cause and there is nothing else to look for.
| What you see | What it is |
|---|---|
| A refusal page, often branded by the employer or by a security vendor | The filtering proxy. The request above is the one to make. |
| “This site can’t be reached”, or an error naming DNS | Filtering at the resolver. |
| A certificate warning with no button to continue | Your network is inspecting encrypted traffic. See below. |
| The home page opens, sign-in spins forever | A third-party host is missing — almost always the database one. |
| A document refuses to open or to save | The workstation’s download policy, or the document host is not allowed. |
Documents and downloads
Your exhibits and invoices are not served by the main domain: they arrive over a signed link, valid for a few minutes, from the storage host named above. A workstation that restricts downloads by domain therefore has to allow THAT host. And if its policy blocks PDF files themselves, no network permission will change anything: that is a workstation rule, to be lifted by whoever administers it.
If your network decrypts traffic
Many corporate networks open encrypted connections to inspect them, then close them again with their own certificate authority. Dossio works under those conditions as soon as that authority is installed on the workstation. When it is not, the browser shows a certificate refusal that no button will let you past — our responses carry a header that forbids it, deliberately.
What that implies has to be written down, though, because nobody else will: on a network that inspects, the equipment doing the decrypting sees the contents of your matters go by. That is true of Dossio and of every other cloud software, your email included. If those workstations handle information covered by professional secrecy, knowing who administers that equipment and what it retains is your obligation, not ours. We have no way to settle the question for you, and we would not pretend otherwise.
If the workstation is not your firm’s
A workstation supplied by an employer — a public body, a company, a firm you are not a partner in — enforces that employer’s policy, and that policy is legitimate. We offer no way around it and will not propose one. The request goes through that employer’s IT department, or through a workstation of your own.
If none of this unblocks it
Write to us at info@dossio.ca, attaching the exact message the filter displays and, if it appears, the name of the security vendor. We file the categorization request with that vendor: it costs nothing, and it unblocks every firm behind the same filter at once.
Last updated: .
To learn not what to allow but who touches your data, see where your data lives.