What Services are you Whitelisting?
Below is a breakdown of each service, what functionality it empowers and any supporting documentation you might find for the third-party services or applications we use in our HRM Platform.
View detailed whitelisting table
💻 Required Whitelisting
For a visual representation of how our core functionality ties into these services, please see our Functionality Architectures article.
Below you will find a breakdown of each service that is required for HRM Platform to function. This includes what functionality within HRM is powered by that service, and links to their requisite compliance and/or whitelisting documentation.
🌐 *.livingsecurity.com
Required for: All Functionality
The Living Security domain will need to be whitelisted to allow for your Living Security application users to conduct traffic between your environment and the HRM Platform product. We recommend wildcarding this URL due to the amount of individual URLs required to be trafficked between the different functionality within the HRM product as well as supporting applications.
🏳️ LaunchDarkly
Required for: All Functionality
Living Security utilizes LaunchDarkly to conduct Feature Flagging within our products. This allows us to deploy new features within our Production Environment without those features impacting customer’s experiences. Additional functionality includes ensuring specific roles see only what content they need, such as customer-requested features only being viewable by that customer.
The PII that is trafficked to, and stored in, LaunchDarkly is the email address of the user that is accessing the application, so that we may identify what feature flag(s) are enabled/disabled for them based on their role within our user management system.
✉️ SendGrid
Required for: All Functionality
Living Security relies upon SendGrid to serve as our email functionality host. The SendGrid Email Server IP Addresses must be whitelisted due to all Living Security Notifications and Password Reset emails come from these email servers.
🎥 Contentful
Required for: Teams, Training
Living Security utilizes the Contentful platform for hosting our content modules for Living Security products. Traffic from Contentful is strictly from Contentful servers to the user’s browser, and we do not store customer information in Contentful.
🎧 Twilio
Required for: Teams
In order to create a seamless audio and video experience for our Living Security Teams Sessions, we utilize Twilio’s WebRTC and Programmable Video SDK for audio and video traffic only. The servers that powers our audio and video functionality are strictly the Twilio Media Servers. To find a list of the specific Media Server IP addresses, please see Twilio's documentation.
Twilio SMS and file sharing functionality is not utilized within the Living Security products and is not supported by Twilio Media Servers.
🔢 Google Firestore
Required for: Teams
Living Security Teams stores player activities such as puzzle and quiz responses, status of the game at each stage, as well as the overall game completion status in Google Firestore.
The only PII that is trafficked to and stored within Firestore is the Display Name entered by the user, as well as the email address of the user, which is encrypted prior to being stored.
📬 Vitally
We leverage Vitally to expedite your journey through Onboarding and subsequent interactions through your CSM. Your interactive onboarding documents and other shared documents exist here.
✉️ Unlayer
Unlayer is a user-friendly, drag-and-drop email builder that simplifies creating responsive, branded email templates. In our product, we use Unlayer to let customers design custom templates for training notifications, such as assignments, past-due reminders, and manager summaries, ensuring professional, engaging communication.
✅ Optional Whitelisting
Below are the optional third-party services that can be whitelisted. Though they are not required for basic functionality, these services ensure the most seamless experience and/or ensure the best support Living Security can offer for the life of you engagement with our HRM product.
👨✈️ UserPilot
Living Security is using UserPilot to make it easier for our customers to use our products by introducing feature announcements, marketing promotions and collecting product insights.
🐶 Datadog
Living Security utilizes Datadog as a data logging service for our Teams and Training Platform products. Data logs are maintained for 90 Days, and then anonymized.
🛎️ Hubspot
Living Security utilizes Hubspot as is Customer Management system. Key features of support that are leveraged for customer engagement include the Hubspot Chat Widget and Hubspot Forms.
💬 Other Additional Whitelisting
The primary services above represent the core services outside of Living Security that will provide the best experience within our HRM Platform. There are other additional whitelisting options that will be listed that perform functionality, such as our Accessibility Widget or Fonts that you are recommended to whitelist, but is not required.