IT allowlisting for Timeliner
Everything a company network or email filter needs to allow so your team and your clients can review videos, get notifications and sign in - no call needed.
The web addresses below are read from this site's own configuration, so they always match what the app actually loads.
Opens your browser's print dialog - choose Save as PDF.
Web addresses
Allow these over HTTPS (port 443). The sign-in and data address also needs secure WebSockets (wss://) for live updates.
| Address | What it's for | Protocol | Who needs it |
|---|---|---|---|
timeliner.io | The app, client portal and review links | https:// | Everyone, including clients |
platform.timeliner.io | Sign-in, data and live updates | https:// + wss:// | Everyone, including clients |
media.timeliner.io | Videos, images, files, downloads and uploads | https:// | Everyone, including clients |
7b5cdad82d9b1f2712c7476da2089f46.r2.cloudflarestorage.com | Our storage provider's main address (some older links) | https:// | Everyone, including clients |
timeliner.7b5cdad82d9b1f2712c7476da2089f46.r2.cloudflarestorage.com | File uploads, file and video links | https:// | Everyone, including clients |
dl.timeliner.io | Downloading several files as one ZIP | https:// | Everyone, including clients |
timeliner-zip-stream.timeliner-io-account.workers.dev | Older ZIP download links, and traffic between our own servers - new downloads don't need it | https:// | Optional |
player.vimeo.com | The short welcome video clients see on their first visit | https:// | Optional |
www.loom.comwww.youtube.comwww.youtube-nocookie.com | Tutorial and help videos | https:// | Optional |
view.officeapps.live.com | Previews of Word, Excel and PowerPoint files | https:// | Optional |
checkout.stripe.combilling.stripe.com | Subscription checkout and billing (account owners) | https:// | Your team only |
timeliner.io
The app, client portal and review links
- Protocol
- https://
- Who needs it
- Everyone, including clients
platform.timeliner.io
Sign-in, data and live updates
- Protocol
- https:// + wss://
- Who needs it
- Everyone, including clients
media.timeliner.io
Videos, images, files, downloads and uploads
- Protocol
- https://
- Who needs it
- Everyone, including clients
7b5cdad82d9b1f2712c7476da2089f46.r2.cloudflarestorage.com
Our storage provider's main address (some older links)
- Protocol
- https://
- Who needs it
- Everyone, including clients
timeliner.7b5cdad82d9b1f2712c7476da2089f46.r2.cloudflarestorage.com
File uploads, file and video links
- Protocol
- https://
- Who needs it
- Everyone, including clients
dl.timeliner.io
Downloading several files as one ZIP
- Protocol
- https://
- Who needs it
- Everyone, including clients
timeliner-zip-stream.timeliner-io-account.workers.dev
Older ZIP download links, and traffic between our own servers - new downloads don't need it
- Protocol
- https://
- Who needs it
- Optional
player.vimeo.com
The short welcome video clients see on their first visit
- Protocol
- https://
- Who needs it
- Optional
www.loom.comwww.youtube.comwww.youtube-nocookie.com
Tutorial and help videos
- Protocol
- https://
- Who needs it
- Optional
view.officeapps.live.com
Previews of Word, Excel and PowerPoint files
- Protocol
- https://
- Who needs it
- Optional
checkout.stripe.combilling.stripe.com
Subscription checkout and billing (account owners)
- Protocol
- https://
- Who needs it
- Your team only
Check my network
Tests, from this browser, whether each web address that can be tested is reachable. Run it on the network your clients will use.
- timeliner.ioThe app, client portal and review linksNot checked yet
- platform.timeliner.ioSign-in, data and live updatesNot checked yet
- media.timeliner.ioVideos, images, files, downloads and uploadsNot checked yet
- 7b5cdad82d9b1f2712c7476da2089f46.r2.cloudflarestorage.comOur storage provider's main address (some older links)Not checked yet
- timeliner.7b5cdad82d9b1f2712c7476da2089f46.r2.cloudflarestorage.comFile uploads, file and video linksNot checked yet
- dl.timeliner.ioDownloading several files as one ZIPNot checked yet
- player.vimeo.comThe short welcome video clients see on their first visitNot checked yet
Reachable means the network answered. A company proxy that shows its own block page can still look reachable, so if something still fails inside the app, ask IT to check their logs for the addresses above. Addresses not listed here can only be tested inside the app.
Email senders
Allow these sender addresses so invitations, notifications and sign-in codes are not blocked or held in quarantine.
Sending domains: timeliner.io
- noreply@timeliner.ioRequiredShown as: TimelinerReview invitations, comments, approvals and other workflow notifications · Sign-in codes, password resets and billing alerts
- noam@timeliner.ioShown as: Noam TryberPersonal emails from our team
- contact@timeliner.ioShown as: Noam from TimelinerProduct tips, onboarding and digest emails
- robert@timeliner.ioShown as: Robert from TimelinerPersonal emails from our team
Email authentication (SPF / DKIM / DMARC)
Our email is sent through Resend on Amazon SES and is DKIM-signed for timeliner.io. We don't publish a fixed list of sending IP addresses, so allow our mail by sender domain and a passing DKIM / DMARC check rather than by IP address.
- resend._domainkey.timeliner.io (TXT)
DKIM public key (selector: resend)Signs notification and account email - resend._domainkey.mail.timeliner.io (TXT)
DKIM public key (selector: resend)Signs product-tip email - send.timeliner.io (TXT)
v=spf1 include:amazonses.com -allBounce address (SPF) for notification and account email - send.mail.timeliner.io (TXT)
v=spf1 include:amazonses.com ~allBounce address (SPF) for product-tip email - _dmarc.timeliner.io (TXT)
v=DMARC1; p=quarantine; adkim=r; aspf=rDMARC policy for timeliner.io and its subdomains - timeliner.io (TXT)
v=spf1 include:_spf.google.com -allOur staff mailboxes (Google Workspace)
Email records last checked: October 1, 2026.