# Security Trust & Responsibility Handling hundreds of millions of financial transactions requires a security-first mindset. Our platform is engineered with enterprise-grade protection at every layer - from the network edge to the encrypted disk. ### Data Encryption #### In Transit All data transmitted between your clients (POS, Kiosk, Apps) and our API is encrypted using strong **HTTPS** protocols. We enforce **TLS 1.2 or 1.3** to prevent man-in-the-middle attacks and ensure data integrity. #### At Rest Data stored in our databases, backups, and logs is automatically encrypted using the **AES-256** standard. Encryption keys are managed via a secure Key Management Service (KMS), ensuring your data remains private even at the physical storage level. ### Infrastructure & Defense - ##### Web Application Firewall (WAF) We utilize **Google Cloud Armor** to protect our endpoints against DDoS attacks, SQL injection, and other OWASP Top 10 vulnerabilities at the network edge. - ##### Monitoring & SIEM Our Security Information and Event Management (SIEM) system aggregates logs for real-time threat detection. We maintain active CVE alerting to identify and patch vulnerabilities immediately. - ##### Availability & Redundancy The platform is deployed with **multi-region redundancy** to guarantee high availability.**Real-time backups** ensure data is preserved and can be restored instantly in case of catastrophic failure. ### Network Requirements ### Firewall Configuration For the Innovorder platform (POS, Kiosks, and Devices) to function correctly on your local network, your firewall must allow outgoing and incoming traffic for the following domains and ports. Most traffic uses encrypted HTTPS (port 443), but specific services like real-time notifications or telemaintenance require additional ports. | Domain / IP | Port | App Protocol | Function | | --- | --- | --- | --- | | \*.innovorder.fr | 443 | HTTPS | Cloud Innovorder | | \*.innovorder.com | 443 | HTTPS | Cloud Innovorder | | 34.110.191.247 | 443 | HTTPS | API Innovorder | | cloudamqp-haproxy-prod.innovorder.io | 5672 | AMQPS | Flux temps réel Innovorder | | cloudamqp-prod.innovorder.io | 5672 | AMQPS | Flux temps réel Innovorder | | \*.teamviewer.com | 5938 | Propriétaire | Telemaintenance | | secure-api.eloview.com | 443 | HTTPS | Telemaintenance | | secure-provisioning.eloview.com | 443 | HTTPS | Telemaintenance | | secure-broker.eloview.com | 443 | HTTPS | Telemaintenance | | secure-logs.eloview.com | 443 | HTTPS | Telemaintenance | | secure-content.eloview.com | 443 | HTTPS | Telemaintenance | | secure-auth.eloview.com | 443 | HTTPS | Telemaintenance | | cognito-identity.us-west-2.amazonaws.com | 443 | HTTPS | Telemaintenance | | cognito-idp.us-west-2.amazonaws.com | 443 | HTTPS | Telemaintenance | | polaris-promote-prod.s3.us-west-2.amazonaws.com | 443 | HTTPS | Telemaintenance | | polaris-scan-prod.s3.us-west-2.amazonaws.com | 443 | HTTPS | Telemaintenance | | js.stripe.com | 443 | HTTPS | Paiement | | q.stripe.com | 443 | HTTPS | Paiement | | m.stripe.com | 443 | HTTPS | Paiement | | m.stripe.network | 443 | HTTPS | Paiement | | sentry.io | 443 | HTTPS | Monitoring | | \*.googleapis.com | 443 | HTTPS | Android OS | | accounts.google.com | 443 | HTTPS | Android OS | | www.google.com | 443 | HTTPS | Android OS | | maps.google.com | 443 | HTTPS | Android OS | | testcloud.xamarin.com | 443 | HTTPS | MDM Android | | \*.appcenter.ms | 443 | HTTPS | MDM Android | | api.mobile.azure.com | 443 | HTTPS | MDM Android | | \*.rink.hockeyapp.net | 443 | HTTPS | MDM Android | | cdnjs.cloudflare.com | 443 | HTTPS | Librairie Innovorder | | s-usc1b-nss-2127.firebaseio.com | 443 | HTTPS | Flux temps réel Innovorder | | \*.deligovision.com | 443 | HTTPS | Scan Plateau | | deligo.service.signalr.net | 443 | HTTPS | Scan Plateau | | \*.ingest.sentry.io | 443 | HTTPS | Monitoring | | 34.160.81.0/32 | 443 | HTTPS | Monitoring (Sentry servers) | | 34.102.210.18/32 | 443 | HTTPS | Monitoring (Sentry servers) | | 2600:1901:0:5e8a::/64 | 443 | HTTPS | Monitoring (Sentry servers) | | 2600:1901:0:7edb::/64 | 443 | HTTPS | Monitoring (Sentry servers) | | \*.firebaseio.com | 443 | HTTPS | Flux temps réel Innovorder | | app.launchdarkly.com | 443 | HTTPS | Monitoring | | events.launchdarkly.com | 443 | HTTPS | Monitoring | | android.clients.google.com | 443 | HTTPS | Android OS | | android.l.google.com | 443 | HTTPS | Android OS | | www.gstatic.com | 443 | HTTPS | Android OS | | connectivitycheck.gstatic.com | 443 | HTTPS | Android OS | | r.stripe.com | 443 | HTTPS | Paiement | | nepsa1.nepting.com | 443 | HTTPS | Paiement | | \*eloview.com | 443 | HTTPS | Telemaintenance | | 2.android.pool.ntp.org | 123 | HTTPS | Android OS | | browser-intake.datadoghq.eu | 443 | HTTPS | Monitoring | | api-preprod.innovorder.fr | 443 | HTTPS | API Innovorder | | api.innovorder.fr | 443 | HTTPS | API Innovorder | | api-dev.innovorder.fr | 443 | HTTPS | API Innovorder | | \*.innovorder.io | 443 | HTTPS | Cloud Innovorder | | cdn-api-weglot.com | 443 | HTTPS | Gestion multilangue | | cdn.weglot.com | 443 | HTTPS | Gestion multilangue | | api.yavin.com | 443 | HTTPS | Paiement | | api.getbeamer.com | 443 | HTTPS | Gestion avis | | my.yavin.com | 443 | HTTPS | Paiement | | api.restoflash.fr | 443 | HTTPS | Paiement | | nepsa.nepting.com | 443 | HTTPS | Paiement | | 35.195.83.30/32 | 5672 | AMQPS | Flux temps réel Innovorder | | 35.189.223.187/32 | 5672 | AMQPS | Flux temps réel Innovorder | | api.sunmi.com | 443 | HTTPS | MDM Android | | posmq-ssl.sunmi.com | 443 | HTTPS | MDM Android | | cdn.sunmi.com | 443 | HTTPS | MDM Android | | apk.cdn.sunmi.com | 443 | HTTPS | MDM Android | | pic.cdn.sunmi.com | 443 | HTTPS | MDM Android | | file.cdn.sunmi.com | 443 | HTTPS | MDM Android | | ota.cdn.sunmi.com | 443 | HTTPS | MDM Android | | emq-link.sunmi.com | 443 | HTTPS | MDM Android | | 185.159.232.31 | 9000 | Propriétaire | Nayax / Distribution Automatique | | 185.159.233.31 | 9000 | Propriétaire | Nayax / Distribution Automatique | | 185.159.234.31 | 9000 | Propriétaire | Nayax / Distribution Automatique | | 185.159.235.31 | 9000 | Propriétaire | Nayax / Distribution Automatique | | 185.159.232.98 | 9000 | Propriétaire | Nayax / Distribution Automatique | | 185.159.233.98 | 9000 | Propriétaire | Nayax / Distribution Automatique | | 185.159.234.98 | 9000 | Propriétaire | Nayax / Distribution Automatique | | 185.159.235.98 | 9000 | Propriétaire | Nayax / Distribution Automatique | | 185.159.232.31 | 9001 | Propriétaire | Nayax / Distribution Automatique | | 185.159.233.31 | 9001 | Propriétaire | Nayax / Distribution Automatique | | 185.159.234.31 | 9001 | Propriétaire | Nayax / Distribution Automatique | | 185.159.235.31 | 9001 | Propriétaire | Nayax / Distribution Automatique | | 185.159.232.98 | 9001 | Propriétaire | Nayax / Distribution Automatique | | 185.159.233.98 | 9001 | Propriétaire | Nayax / Distribution Automatique | | 185.159.234.98 | 9001 | Propriétaire | Nayax / Distribution Automatique | | 185.159.235.98 | 9001 | Propriétaire | Nayax / Distribution Automatique | | 185.159.232.31 | 26520 | Propriétaire | Nayax / Distribution Automatique | | 185.159.233.31 | 26520 | Propriétaire | Nayax / Distribution Automatique | | 185.159.234.31 | 26520 | Propriétaire | Nayax / Distribution Automatique | | 185.159.235.31 | 26520 | Propriétaire | Nayax / Distribution Automatique | | 185.159.232.98 | 26520 | Propriétaire | Nayax / Distribution Automatique | | 185.159.233.98 | 26520 | Propriétaire | Nayax / Distribution Automatique | | 185.159.234.98 | 26520 | Propriétaire | Nayax / Distribution Automatique | | 185.159.235.98 | 26520 | Propriétaire | Nayax / Distribution Automatique | | 185.159.232.97/32 | 443 | HTTPS | Nayax / Distribution Automatique | | 185.159.232.32/29 | 443 | HTTPS | Nayax / Distribution Automatique | | 185.159.233.32/29 | 443 | HTTPS | Nayax / Distribution Automatique | | 185.159.234.32/29 | 443 | HTTPS | Nayax / Distribution Automatique | | 185.159.235.32/29 | 443 | HTTPS | Nayax / Distribution Automatique | | 185.159.232.0/22 | 443 | HTTPS | Nayax / Distribution Automatique | | 199.83.128.0/21 | 443 | HTTPS | Nayax / Distribution Automatique | | 198.143.32.0/19 | 443 | HTTPS | Nayax / Distribution Automatique | | 149.126.72.0/21 | 443 | HTTPS | Nayax / Distribution Automatique | | 103.28.248.0/22 | 443 | HTTPS | Nayax / Distribution Automatique | | 45.64.64.0/22 | 443 | HTTPS | Nayax / Distribution Automatique | | 182.11.124.0/22 | 443 | HTTPS | Nayax / Distribution Automatique | | 192.230.64.0/18 | 443 | HTTPS | Nayax / Distribution Automatique | | 107.154.0.0/16 | 443 | HTTPS | Nayax / Distribution Automatique | | 45.60.0.0/16 | 443 | HTTPS | Nayax / Distribution Automatique | | 45.233.0.0/16 | 443 | HTTPS | Nayax / Distribution Automatique | | 2a02:e980::/29 | 443 | HTTPS | Nayax / Distribution Automatique | | 13.50.160.211 | 8883 | Propriétaire | Nayax / Distribution Automatique | | il1.nayax.net | 443 | HTTPS | Nayax / Distribution Automatique | | il2.nayax.net | 443 | HTTPS | Nayax / Distribution Automatique | | il3.nayax.net | 443 | HTTPS | Nayax / Distribution Automatique | | il4.nayax.net | 443 | HTTPS | Nayax / Distribution Automatique | | backup.nayax.net | 443 | HTTPS | Nayax / Distribution Automatique | | dev.nayax.net | 443 | HTTPS | Nayax / Distribution Automatique | | qa.nayax.net | 443 | HTTPS | Nayax / Distribution Automatique | | boot.nayax.net | 443 | HTTPS | Nayax / Distribution Automatique | | api.eu.sunmi.com | 443 | HTTPS | MDM Android | | apk.cdn.eu.sunmi.com | 443 | HTTPS | MDM Android | | ota.cdn.eu.sunmi.com | 443 | HTTPS | MDM Android | | file.cdn.eu.sunmi.com | 443 | HTTPS | MDM Android | | pic.cdn.eu.sunmi.com | 443 | HTTPS | MDM Android | | cdn.eu.sunmi.com | 443 | HTTPS | MDM Android | | iot-mqtts.eu.sunmi.com | 443 | HTTPS | MDM Android | | appremotesocket.eu.sunmi.com | 443 | HTTPS | MDM Android | | deapprtc.sunmi.com | 3478 | RTC | MDM Android | | pool.ntp.org | 123 | NTP | MDM Android | | europe.pool.ntp.org | 123 | NTP | MDM Android | | uk.pool.ntp.org | 123 | NTP | MDM Android | | fr.pool.ntp.org | 123 | NTP | MDM Android | | it.pool.ntp.org | 123 | NTP | MDM Android | | de.pool.ntp.org | 123 | NTP | MDM Android | | at.pool.ntp.org | 123 | NTP | MDM Android | | pl.pool.ntp.org | 123 | NTP | MDM Android | | ntp1.inrim.it | 123 | NTP | MDM Android | | ntp.obspm.fr | 123 | NTP | MDM Android | | ptbtime1.ptb.de | 123 | NTP | MDM Android | #### Local Persistence Innovorder POS devices are designed with offline-first logic. While they can function without internet for service, synchronization with the Cloud requires these rules to be active. #### Wildcard Support We strongly recommend using wildcard matching (e.g. `*.innovorder.fr`) in your firewall rules to account for dynamic subdomains used for scaling and load balancing.