Getting Started: Security & Network · Innovorder API Documentation

Trust & Responsibility

Handling hundreds of millions of financial transactions requires a security-first mindset. Our platform is engineered with enterprise-grade protection at every layer - from the network edge to the encrypted disk.

Data Encryption

In Transit

All data transmitted between your clients (POS, Kiosk, Apps) and our API is encrypted using strong HTTPS protocols. We enforce TLS 1.2 or 1.3 to prevent man-in-the-middle attacks and ensure data integrity.

At Rest

Data stored in our databases, backups, and logs is automatically encrypted using the AES-256 standard. Encryption keys are managed via a secure Key Management Service (KMS), ensuring your data remains private even at the physical storage level.

Infrastructure & Defense

Web Application Firewall (WAF)
We utilize Google Cloud Armor to protect our endpoints against DDoS attacks, SQL injection, and other OWASP Top 10 vulnerabilities at the network edge.
Monitoring & SIEM
Our Security Information and Event Management (SIEM) system aggregates logs for real-time threat detection. We maintain active CVE alerting to identify and patch vulnerabilities immediately.
Availability & Redundancy
The platform is deployed with multi-region redundancy to guarantee high availability.Real-time backups ensure data is preserved and can be restored instantly in case of catastrophic failure.

Network Requirements

Firewall Configuration

For the Innovorder platform (POS, Kiosks, and Devices) to function correctly on your local network, your firewall must allow outgoing and incoming traffic for the following domains and ports. Most traffic uses encrypted HTTPS (port 443), but specific services like real-time notifications or telemaintenance require additional ports.

Domain / IP	Port	App Protocol	Function
*.innovorder.fr	443	HTTPS	Cloud Innovorder
*.innovorder.com	443	HTTPS	Cloud Innovorder
34.110.191.247	443	HTTPS	API Innovorder
cloudamqp-haproxy-prod.innovorder.io	5672	AMQPS	Flux temps réel Innovorder
cloudamqp-prod.innovorder.io	5672	AMQPS	Flux temps réel Innovorder
*.teamviewer.com	5938	Propriétaire	Telemaintenance
secure-api.eloview.com	443	HTTPS	Telemaintenance
secure-provisioning.eloview.com	443	HTTPS	Telemaintenance
secure-broker.eloview.com	443	HTTPS	Telemaintenance
secure-logs.eloview.com	443	HTTPS	Telemaintenance
secure-content.eloview.com	443	HTTPS	Telemaintenance
secure-auth.eloview.com	443	HTTPS	Telemaintenance
cognito-identity.us-west-2.amazonaws.com	443	HTTPS	Telemaintenance
cognito-idp.us-west-2.amazonaws.com	443	HTTPS	Telemaintenance
polaris-promote-prod.s3.us-west-2.amazonaws.com	443	HTTPS	Telemaintenance
polaris-scan-prod.s3.us-west-2.amazonaws.com	443	HTTPS	Telemaintenance
js.stripe.com	443	HTTPS	Paiement
q.stripe.com	443	HTTPS	Paiement
m.stripe.com	443	HTTPS	Paiement
m.stripe.network	443	HTTPS	Paiement
sentry.io	443	HTTPS	Monitoring
*.googleapis.com	443	HTTPS	Android OS
accounts.google.com	443	HTTPS	Android OS
www.google.com	443	HTTPS	Android OS
maps.google.com	443	HTTPS	Android OS
testcloud.xamarin.com	443	HTTPS	MDM Android
*.appcenter.ms	443	HTTPS	MDM Android
api.mobile.azure.com	443	HTTPS	MDM Android
*.rink.hockeyapp.net	443	HTTPS	MDM Android
cdnjs.cloudflare.com	443	HTTPS	Librairie Innovorder
s-usc1b-nss-2127.firebaseio.com	443	HTTPS	Flux temps réel Innovorder
*.deligovision.com	443	HTTPS	Scan Plateau
deligo.service.signalr.net	443	HTTPS	Scan Plateau
*.ingest.sentry.io	443	HTTPS	Monitoring
34.160.81.0/32	443	HTTPS	Monitoring (Sentry servers)
34.102.210.18/32	443	HTTPS	Monitoring (Sentry servers)
2600:1901:0:5e8a::/64	443	HTTPS	Monitoring (Sentry servers)
2600:1901:0:7edb::/64	443	HTTPS	Monitoring (Sentry servers)
*.firebaseio.com	443	HTTPS	Flux temps réel Innovorder
app.launchdarkly.com	443	HTTPS	Monitoring
events.launchdarkly.com	443	HTTPS	Monitoring
android.clients.google.com	443	HTTPS	Android OS
android.l.google.com	443	HTTPS	Android OS
www.gstatic.com	443	HTTPS	Android OS
connectivitycheck.gstatic.com	443	HTTPS	Android OS
r.stripe.com	443	HTTPS	Paiement
nepsa1.nepting.com	443	HTTPS	Paiement
*eloview.com	443	HTTPS	Telemaintenance
2.android.pool.ntp.org	123	HTTPS	Android OS
browser-intake.datadoghq.eu	443	HTTPS	Monitoring
api-preprod.innovorder.fr	443	HTTPS	API Innovorder
api.innovorder.fr	443	HTTPS	API Innovorder
api-dev.innovorder.fr	443	HTTPS	API Innovorder
*.innovorder.io	443	HTTPS	Cloud Innovorder
cdn-api-weglot.com	443	HTTPS	Gestion multilangue
cdn.weglot.com	443	HTTPS	Gestion multilangue
api.yavin.com	443	HTTPS	Paiement
api.getbeamer.com	443	HTTPS	Gestion avis
my.yavin.com	443	HTTPS	Paiement
api.restoflash.fr	443	HTTPS	Paiement
nepsa.nepting.com	443	HTTPS	Paiement
35.195.83.30/32	5672	AMQPS	Flux temps réel Innovorder
35.189.223.187/32	5672	AMQPS	Flux temps réel Innovorder
api.sunmi.com	443	HTTPS	MDM Android
posmq-ssl.sunmi.com	443	HTTPS	MDM Android
cdn.sunmi.com	443	HTTPS	MDM Android
apk.cdn.sunmi.com	443	HTTPS	MDM Android
pic.cdn.sunmi.com	443	HTTPS	MDM Android
file.cdn.sunmi.com	443	HTTPS	MDM Android
ota.cdn.sunmi.com	443	HTTPS	MDM Android
emq-link.sunmi.com	443	HTTPS	MDM Android
185.159.232.31	9000	Propriétaire	Nayax / Distribution Automatique
185.159.233.31	9000	Propriétaire	Nayax / Distribution Automatique
185.159.234.31	9000	Propriétaire	Nayax / Distribution Automatique
185.159.235.31	9000	Propriétaire	Nayax / Distribution Automatique
185.159.232.98	9000	Propriétaire	Nayax / Distribution Automatique
185.159.233.98	9000	Propriétaire	Nayax / Distribution Automatique
185.159.234.98	9000	Propriétaire	Nayax / Distribution Automatique
185.159.235.98	9000	Propriétaire	Nayax / Distribution Automatique
185.159.232.31	9001	Propriétaire	Nayax / Distribution Automatique
185.159.233.31	9001	Propriétaire	Nayax / Distribution Automatique
185.159.234.31	9001	Propriétaire	Nayax / Distribution Automatique
185.159.235.31	9001	Propriétaire	Nayax / Distribution Automatique
185.159.232.98	9001	Propriétaire	Nayax / Distribution Automatique
185.159.233.98	9001	Propriétaire	Nayax / Distribution Automatique
185.159.234.98	9001	Propriétaire	Nayax / Distribution Automatique
185.159.235.98	9001	Propriétaire	Nayax / Distribution Automatique
185.159.232.31	26520	Propriétaire	Nayax / Distribution Automatique
185.159.233.31	26520	Propriétaire	Nayax / Distribution Automatique
185.159.234.31	26520	Propriétaire	Nayax / Distribution Automatique
185.159.235.31	26520	Propriétaire	Nayax / Distribution Automatique
185.159.232.98	26520	Propriétaire	Nayax / Distribution Automatique
185.159.233.98	26520	Propriétaire	Nayax / Distribution Automatique
185.159.234.98	26520	Propriétaire	Nayax / Distribution Automatique
185.159.235.98	26520	Propriétaire	Nayax / Distribution Automatique
185.159.232.97/32	443	HTTPS	Nayax / Distribution Automatique
185.159.232.32/29	443	HTTPS	Nayax / Distribution Automatique
185.159.233.32/29	443	HTTPS	Nayax / Distribution Automatique
185.159.234.32/29	443	HTTPS	Nayax / Distribution Automatique
185.159.235.32/29	443	HTTPS	Nayax / Distribution Automatique
185.159.232.0/22	443	HTTPS	Nayax / Distribution Automatique
199.83.128.0/21	443	HTTPS	Nayax / Distribution Automatique
198.143.32.0/19	443	HTTPS	Nayax / Distribution Automatique
149.126.72.0/21	443	HTTPS	Nayax / Distribution Automatique
103.28.248.0/22	443	HTTPS	Nayax / Distribution Automatique
45.64.64.0/22	443	HTTPS	Nayax / Distribution Automatique
182.11.124.0/22	443	HTTPS	Nayax / Distribution Automatique
192.230.64.0/18	443	HTTPS	Nayax / Distribution Automatique
107.154.0.0/16	443	HTTPS	Nayax / Distribution Automatique
45.60.0.0/16	443	HTTPS	Nayax / Distribution Automatique
45.233.0.0/16	443	HTTPS	Nayax / Distribution Automatique
2a02:e980::/29	443	HTTPS	Nayax / Distribution Automatique
13.50.160.211	8883	Propriétaire	Nayax / Distribution Automatique
il1.nayax.net	443	HTTPS	Nayax / Distribution Automatique
il2.nayax.net	443	HTTPS	Nayax / Distribution Automatique
il3.nayax.net	443	HTTPS	Nayax / Distribution Automatique
il4.nayax.net	443	HTTPS	Nayax / Distribution Automatique
backup.nayax.net	443	HTTPS	Nayax / Distribution Automatique
dev.nayax.net	443	HTTPS	Nayax / Distribution Automatique
qa.nayax.net	443	HTTPS	Nayax / Distribution Automatique
boot.nayax.net	443	HTTPS	Nayax / Distribution Automatique
api.eu.sunmi.com	443	HTTPS	MDM Android
apk.cdn.eu.sunmi.com	443	HTTPS	MDM Android
ota.cdn.eu.sunmi.com	443	HTTPS	MDM Android
file.cdn.eu.sunmi.com	443	HTTPS	MDM Android
pic.cdn.eu.sunmi.com	443	HTTPS	MDM Android
cdn.eu.sunmi.com	443	HTTPS	MDM Android
iot-mqtts.eu.sunmi.com	443	HTTPS	MDM Android
appremotesocket.eu.sunmi.com	443	HTTPS	MDM Android
deapprtc.sunmi.com	3478	RTC	MDM Android
pool.ntp.org	123	NTP	MDM Android
europe.pool.ntp.org	123	NTP	MDM Android
uk.pool.ntp.org	123	NTP	MDM Android
fr.pool.ntp.org	123	NTP	MDM Android
it.pool.ntp.org	123	NTP	MDM Android
de.pool.ntp.org	123	NTP	MDM Android
at.pool.ntp.org	123	NTP	MDM Android
pl.pool.ntp.org	123	NTP	MDM Android
ntp1.inrim.it	123	NTP	MDM Android
ntp.obspm.fr	123	NTP	MDM Android
ptbtime1.ptb.de	123	NTP	MDM Android

Local Persistence

Innovorder POS devices are designed with offline-first logic. While they can function without internet for service, synchronization with the Cloud requires these rules to be active.

Wildcard Support

We strongly recommend using wildcard matching (e.g. *.innovorder.fr) in your firewall rules to account for dynamic subdomains used for scaling and load balancing.