For the complete documentation index, see llms.txt. This page is also available as Markdown.

Developers / IT teams

URLs and IP address ranges to whitelist

To ensure FormSG functions properly in your network environment, specific URLs and IP addresses may need to be whitelisted in your organisation's firewall or proxy settings.

FormSG

Domain name
Purpose

https://s3.ap-southeast-1.amazonaws.com/prod-virus-scanner-guardduty-quarantine

Uploading Attachments for Respondents

https://s3.ap-southeast-1.amazonaws.com/prod.virus.scanner.quarantine

Uploading Attachments for Respondents

https://s3.ap-southeast-1.amazonaws.com/images.form.gov.sg

Uploading Images for Form Admins

https://s3.ap-southeast-1.amazonaws.com/logos.form.gov.sg

Uploading Logos for Form Admins

IP Addresses

IP address
Purpose

52.76.82.38 / 52.74.128.195 / 122.248.228.153

Webhooks will be fired from these IPs (Production)

3.0.137.48 / 18.140.124.240

Webhooks will be fired from these IPs (Non-production)

External Domains

Domain name
Purpose

a.stripecdn.com api.stripe.com atlas.stripe.com auth.stripe.com b.stripecdn.com billing.stripe.com buy.stripe.com c.stripecdn.com checkout.stripe.com climate.stripe.com connect.stripe.com dashboard.stripe.com express.stripe.com f.stripecdn.com files.stripe.com hcaptcha.com hooks.stripe.com invoice.stripe.com invoicedata.stripe.com js.stripe.com m.stripe.com m.stripe.network manage.stripe.com merchant-ui-api.stripe.com pay.stripe.com payments.stripe.com q.stripe.com qr.stripe.com r.stripe.com stripe.com terminal.stripe.com uploads.stripe.com verify.stripe.com pm-hooks.stripe.com

Stripe domains used by FormSG Payment

*.hcaptcha.com

Used by Stripe to deter bots and spam

How do I embed FormSG onto a website?

You can do this by going into your form and clicking on the "Share" button on the top right. Then click on "Embed".

If you embed FormSG within your site using an iframe, any form responses will still be sent to the form admin. The form responses cannot be 'intercepted' by the parent website hosting the iframe.

We don't have guidelines for how to embed the form into your website as the look and feel would differ between websites. It is not necessary to set the sandbox attribute as the website you are embedding is FormSG, not an external untrusted third party site.

Does FormSG team provide direct support for setting up webhooks?

We currently do not provide direct support for setting up the webhooks as this can be mostly self served using our SDK.

We may assist to help answer some of your queries and investigate set-up issues but this will not be considered an urgent priority.

Why is FormSG attempting a retry even though our system has processed it successfully?

Our webhooks require an acknowledgement (a HTTP 200 OK response) within 10 seconds. If the acknowledgement is delayed or missing, FormSG might retry sending it because it assumes a failure.

Example of this is becoming an issue is when your system performs other tasks (such as sending out emails) before acknowledging the webhook. The best practice is to acknowledge the webhook on receipt.

Last updated

Was this helpful?