For client IT teams. This document lists every external service that a VIDA application contacts from the end-user's browser. All traffic is outbound over HTTPS port 443 unless stated otherwise.
Only production endpoints are listed. Please contact VIDA support if you also need staging environment addresses.
Which apps are you deploying?
| App | URL | Notes |
|---|---|---|
| VIDA | app.vida.studio | Main operator interface |
| Launchpad | launchpad.vida.studio | Supplier upload portal |
| Storefront | *.storefront.vida.studio | Customer-facing delivery portal |
| Connect2 | *.connect2.vida.studio | Rights-managed distribution portal |
| Premiere Panel | Adobe desktop extension | VIDA inside Adobe Premiere Pro |
Required for all apps
These must be allowed regardless of which VIDA app(s) you are deploying.
Tip for IT teams: If your firewall supports wildcard rules, a single *.vida.studio rule covers all first-level VIDA subdomains (e.g. api.vida.studio, player.vida.studio). You will still need separate rules for player.launchpad.vida.studio, *.storefront.vida.studio, and *.connect2.vida.studio as these are deeper subdomains not matched by a single wildcard level.
| Destination | Port | Purpose |
|---|---|---|
api.vida.studio | 443 | VIDA application API |
*.googleapis.com | 443 | Google services (authentication, fonts) |
*.firebaseapp.com | 443 | Firebase authentication |
*.web.app | 443 | Firebase authentication |
us-central1-vida-prd.cloudfunctions.net | 443 | Multi-factor authentication (passkey) |
player.vida.studio | 443 | Media thumbnails and video playback (CDN) |
accounts.google.com | 443 | Google Sign-In |
fonts.gstatic.com | 443 | Application fonts |
Required per app
VIDA (app.vida.studio) — additional requirements
| Destination | Port | Purpose |
|---|---|---|
*.execute-api.eu-west-1.amazonaws.com | 443 | Real-time notifications (WebSocket) |
maps.googleapis.com | 443 | Google Maps (already covered by *.googleapis.com) |
Launchpad (launchpad.vida.studio) — additional requirements
| Destination | Port | Purpose |
|---|---|---|
*.execute-api.eu-west-1.amazonaws.com | 443 | Real-time notifications (WebSocket) |
player.launchpad.vida.studio | 443 | Attachment and preview playback |
Connect2 (*.connect2.vida.studio) — no additional requirements
Storefront (*.storefront.vida.studio) — no additional requirements
Premiere Panel — additional requirements
| Destination | Port | Purpose |
|---|---|---|
*.execute-api.eu-west-1.amazonaws.com | 443 | Real-time notifications (WebSocket) |
File transfer — IBM Aspera
Applies to: VIDA, Launchpad, Connect2 only.
Aspera uses its own protocol (FASP) on a non-standard port. Both TCP and UDP must be open on port 33001 to the following servers:
Tip for IT teams: We recommend allowing *.vidatx.net on port 33001 (TCP and UDP) rather than individual hostnames. This covers all current transfer servers and ensures uninterrupted access if additional nodes are added in future.
| Destination | TCP 33001 | UDP 33001 | Purpose |
|---|---|---|---|
ams-1.vidatx.net | ✓ | ✓ | Session setup + high-speed transfer |
ams-2.vidatx.net | ✓ | ✓ | Session setup + high-speed transfer |
ams-3.vidatx.net | ✓ | ✓ | Session setup + high-speed transfer |
artemis.vidatx.net | ✓ | ✓ | Session setup + high-speed transfer |
Conditional requirements
These are only needed if your organisation uses the listed feature.
| Feature | Destination | Port | Applies to |
|---|---|---|---|
| Microsoft / Entra ID login | login.microsoftonline.com | 443 | All apps (if Microsoft SSO is enabled) |
| Microsoft / Entra ID login | login.live.com | 443 | All apps (if Microsoft SSO is enabled) |
| Okta login | *.okta.com | 443 | VIDA, Launchpad, Storefront, Connect2 (if Okta SSO is enabled) |
| Okta login | Your custom Okta domain | 443 | If your organisation uses a custom Okta domain |
Email delivery
Passwordless login sends a one-time sign-in link to the user's email address. Ensure your email filtering and spam policies allow delivery from:
noreply@vida.studio(or the Firebase sender address configured for your account)
No firewall rule is required — the link is clicked in the browser over standard HTTPS.
What you do NOT need to allow
The following are loaded by VIDA apps but are not required for functionality and can be blocked safely:
| Service | Domain | Notes |
|---|---|---|
| Google Tag Manager | www.googletagmanager.com | Analytics — fails silently when blocked |
| Google Analytics | region1.google-analytics.com | Analytics — fails silently when blocked |
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article