Cloud Hosting
Where the cloud version is hosted and what your network needs to allow
The cloud version of the Mitigate AI Platform is available at ai-platform.mitigate.dev. It is hosted on Amazon Web Services (AWS) in the eu-central-1 (Frankfurt, EU) region. All application data, including the database and uploaded files, is stored in the same region.
Network Requirements
If your organization restricts outbound network access with a firewall or proxy, allow the following endpoints for everyone using the platform:
| Endpoint | Port | Methods | Purpose |
|---|---|---|---|
ai-platform.mitigate.dev | 443 (HTTPS) | All | The application itself |
assets.ai-platform.mitigate.dev | 443 (HTTPS) | GET, OPTIONS | Static assets (JavaScript, CSS, fonts, images) |
mitigate-ai-platform-storage-production.s3.eu-central-1.amazonaws.com | 443 (HTTPS) | PUT, GET, OPTIONS | Direct file uploads and downloads |
Direct File Uploads
File uploads and downloads do not go through the application domain. The browser transfers files directly to and from the platform's Amazon S3 storage bucket:
- PUT — uploading a file
- GET — downloading a file via a short-lived signed URL
- OPTIONS — CORS preflight requests sent automatically by the browser
Even though users only interact with ai-platform.mitigate.dev, the S3 endpoint listed above must be reachable — otherwise file uploads and downloads will fail.
Static Assets
The application's JavaScript, CSS, fonts, and images are served from assets.ai-platform.mitigate.dev through the Amazon CloudFront content delivery network, which delivers them from the edge location closest to each user. These files are the same for every customer and contain no application data — the database and uploaded files remain in the eu-central-1 region.
If assets.ai-platform.mitigate.dev is blocked, pages will fail to load.
Outgoing IP Addresses
The platform does not use static outgoing IP addresses. Connections it makes to external systems — for example the web crawler fetching your website, or connectors calling third-party APIs — originate from dynamic AWS IP addresses in the eu-central-1 region.
If you need to allow inbound connections from the platform by source IP, allow the AWS IP ranges for the eu-central-1 region. AWS publishes its current ranges at ip-ranges.amazonaws.com/ip-ranges.json — filter the entries by "region": "eu-central-1" and service EC2. See AWS IP address ranges for how to work with this file and subscribe to change notifications.
Prefer a proxy for strict allowlisting
AWS IP ranges are broad and change over time. If your security policy requires a precise allowlist, route crawler traffic through a proxy with a static IP that you control using the web crawler's Proxy URL setting — see Web Source Settings.
OpenUI
OpenUI is a full-stack Generative UI framework — a compact streaming-first language, a React runtime with built-in component libraries, and ready-to-use chat interfaces — that is up to 67% more token-efficient than JSON.
Changelog
See the latest updates, features, improvements, and bug fixes in the Mitigate AI Platform