{"version":1,"updated":"2026-08-04","documentation":"https://zursum.com/en/network-requirements","diagnostics":"https://zursum.com/en/network-check","allowlist":["zursum.com","www.zursum.com","empatia.ai","www.empatia.ai","*.retellai.com","*.livekit.cloud","js.stripe.com","api.stripe.com","checkout.stripe.com","*.sentry.io","va.vercel-scripts.com","*.lencr.org"],"groups":[{"id":"application","title":{"en":"Application","es":"Aplicación"},"description":{"en":"The product itself. Blocking these makes the platform unreachable.","es":"El producto en sí. Si se bloquean, la plataforma no es accesible."},"endpoints":[{"host":"zursum.com","ports":"443","protocols":["HTTPS"],"required":true,"purpose":{"en":"Web application","es":"Aplicación web"}},{"host":"www.zursum.com","ports":"443","protocols":["HTTPS"],"required":true,"purpose":{"en":"Web application (canonical host)","es":"Aplicación web (host canónico)"}},{"host":"empatia.ai","ports":"443","protocols":["HTTPS"],"required":false,"purpose":{"en":"Alternate brand domain","es":"Dominio de marca alternativo"}},{"host":"www.empatia.ai","ports":"443","protocols":["HTTPS"],"required":false,"purpose":{"en":"Alternate brand domain","es":"Dominio de marca alternativo"}}]},{"id":"voice","title":{"en":"Real-time voice","es":"Voz en tiempo real"},"description":{"en":"Practice conversations run over WebRTC. This is the section most often missed: media needs UDP, not just HTTPS.","es":"Las conversaciones de práctica usan WebRTC. Esta es la sección que más se pasa por alto: el audio necesita UDP, no solo HTTPS."},"endpoints":[{"host":"*.retellai.com","ports":"443","protocols":["HTTPS","WSS"],"required":true,"purpose":{"en":"Voice session signalling and transcription","es":"Señalización y transcripción de la sesión de voz"},"probeUrl":"https://api.retellai.com/"},{"host":"*.livekit.cloud","ports":"443","protocols":["HTTPS","WSS"],"required":true,"purpose":{"en":"WebRTC media server","es":"Servidor de medios WebRTC"},"probeUrl":"https://turn.livekit.cloud/"},{"host":"*.livekit.cloud","ports":"3478","protocols":["UDP"],"required":true,"purpose":{"en":"STUN/TURN — carries the actual audio. Without outbound UDP the call connects but stays silent.","es":"STUN/TURN — transporta el audio real. Sin UDP saliente la llamada conecta pero queda muda."}},{"host":"*.livekit.cloud","ports":"443","protocols":["TCP"],"required":false,"purpose":{"en":"TURN over TLS — fallback when UDP is blocked. Degraded quality but functional.","es":"TURN sobre TLS — alternativa cuando UDP está bloqueado. Calidad degradada pero funcional."}}]},{"id":"payments","title":{"en":"Payments","es":"Pagos"},"description":{"en":"Only required for self-service checkout. Not needed for enterprise contracts billed by invoice.","es":"Solo necesario para el checkout self-service. No hace falta en contratos empresariales facturados por factura."},"endpoints":[{"host":"js.stripe.com","ports":"443","protocols":["HTTPS"],"required":false,"purpose":{"en":"Payment form","es":"Formulario de pago"}},{"host":"api.stripe.com","ports":"443","protocols":["HTTPS"],"required":false,"purpose":{"en":"Payment processing","es":"Procesamiento de pagos"},"probeUrl":"https://api.stripe.com/"},{"host":"checkout.stripe.com","ports":"443","protocols":["HTTPS"],"required":false,"purpose":{"en":"Hosted checkout","es":"Checkout alojado"}}]},{"id":"telemetry","title":{"en":"Error monitoring","es":"Monitoreo de errores"},"description":{"en":"Crash reporting. Blocking these degrades our ability to support you, but the product still works.","es":"Reporte de fallos. Bloquearlos reduce nuestra capacidad de dar soporte, pero el producto sigue funcionando."},"endpoints":[{"host":"*.sentry.io","ports":"443","protocols":["HTTPS"],"required":false,"purpose":{"en":"Error reporting","es":"Reporte de errores"}},{"host":"va.vercel-scripts.com","ports":"443","protocols":["HTTPS"],"required":false,"purpose":{"en":"Anonymous usage analytics","es":"Analítica de uso anónima"}}]},{"id":"tls","title":{"en":"Certificate validation","es":"Validación de certificados"},"description":{"en":"Needed by TLS-inspection appliances to build and revalidate our certificate chain. Blocking these is a common cause of false 'connection is not private' warnings.","es":"Lo necesitan los equipos de inspección TLS para construir y revalidar nuestra cadena de certificados. Bloquearlos es una causa habitual de falsas advertencias de «la conexión no es privada»."},"endpoints":[{"host":"*.lencr.org","ports":"80, 443","protocols":["HTTPS","TCP"],"required":true,"purpose":{"en":"Let's Encrypt intermediate certificate (AIA) and revocation list (CRL) distribution","es":"Distribución del certificado intermedio (AIA) y de la lista de revocación (CRL) de Let's Encrypt"}}]},{"id":"email","title":{"en":"Email","es":"Correo electrónico"},"description":{"en":"Sender domain for invitations and notifications. Allowlist it in your secure email gateway so onboarding invites are not quarantined.","es":"Dominio remitente de invitaciones y notificaciones. Agrégalo a la lista de permitidos de tu gateway de correo para que las invitaciones de alta no queden en cuarentena."},"endpoints":[{"host":"emails.zursum.com","ports":"—","protocols":[],"required":true,"purpose":{"en":"Envelope sender for all transactional email (SPF/DKIM/DMARC aligned)","es":"Remitente de todo el correo transaccional (alineado con SPF/DKIM/DMARC)"}}]}],"trustAnchors":[{"name":"ISRG Root X1","authority":"Let's Encrypt (ISRG)","note":{"en":"RSA root, trusted by every major OS since 2021.","es":"Raíz RSA, incluida en todos los sistemas operativos principales desde 2021."}},{"name":"ISRG Root X2","authority":"Let's Encrypt (ISRG)","note":{"en":"ECDSA root.","es":"Raíz ECDSA."}},{"name":"ISRG Root YR","authority":"Let's Encrypt (ISRG)","note":{"en":"RSA root issued in 2025. Cross-signed by ISRG Root X1, so an up-to-date store is not strictly required — but older inspection appliances may need it imported explicitly.","es":"Raíz RSA emitida en 2025. Está firmada de forma cruzada por ISRG Root X1, así que no es estrictamente necesaria — pero los equipos de inspección antiguos pueden requerir importarla explícitamente."}},{"name":"ISRG Root YE","authority":"Let's Encrypt (ISRG)","note":{"en":"ECDSA counterpart of Root YR, also cross-signed by ISRG Root X1.","es":"Contraparte ECDSA de Root YR, también firmada de forma cruzada por ISRG Root X1."}}]}