Cloud Hosting
Where the cloud version is hosted and what your network needs to allow
The cloud version of the Mitigate AI Platform is available at ai-platform.mitigate.dev. It is hosted on Amazon Web Services (AWS) in the eu-central-1 (Frankfurt, EU) region. All application data, including the database and uploaded files, is stored in the same region.
Network Requirements
If your organization restricts outbound network access with a firewall or proxy, allow the following endpoints for everyone using the platform:
| Endpoint | Port | Methods | Purpose |
|---|---|---|---|
ai-platform.mitigate.dev | 443 (HTTPS) | All | The application itself |
mitigate-ai-platform-storage-production.s3.eu-central-1.amazonaws.com | 443 (HTTPS) | PUT, GET, OPTIONS | Direct file uploads and downloads |
Direct File Uploads
File uploads and downloads do not go through the application domain. The browser transfers files directly to and from the platform's Amazon S3 storage bucket:
- PUT — uploading a file
- GET — downloading a file via a short-lived signed URL
- OPTIONS — CORS preflight requests sent automatically by the browser
Even though users only interact with ai-platform.mitigate.dev, the S3 endpoint listed above must be reachable — otherwise file uploads and downloads will fail.
Outgoing IP Addresses
The platform does not use static outgoing IP addresses. Connections it makes to external systems — for example the web crawler fetching your website, or connectors calling third-party APIs — originate from dynamic AWS IP addresses in the eu-central-1 region.
If you need to allow inbound connections from the platform by source IP, allow the AWS IP ranges for the eu-central-1 region. AWS publishes its current ranges at ip-ranges.amazonaws.com/ip-ranges.json — filter the entries by "region": "eu-central-1" and service EC2. See AWS IP address ranges for how to work with this file and subscribe to change notifications.
Prefer a proxy for strict allowlisting
AWS IP ranges are broad and change over time. If your security policy requires a precise allowlist, route crawler traffic through a proxy with a static IP that you control using the web crawler's Proxy URL setting — see Web Source Settings.
OpenUI
OpenUI is a full-stack Generative UI framework — a compact streaming-first language, a React runtime with built-in component libraries, and ready-to-use chat interfaces — that is up to 67% more token-efficient than JSON.
Changelog
See the latest updates, features, improvements, and bug fixes in the Mitigate AI Platform