api.assemblyai.com for REST, streaming.assemblyai.com for streaming, and llm-gateway.assemblyai.com for LLM Gateway (with *.eu.assemblyai.com equivalents for the EU region). All connections use HTTPS or WSS (WebSocket over TLS) so that traffic is encrypted in transit.
If your network requires allowlisting fixed IP addresses for inbound webhook deliveries or audio retrieval requests, see What IP Address Should I Whitelist for AssemblyAI?.
Outputs are text payloads, so conducting file scanning on responses at the corporate firewall can be useful in maintaining a strong security posture while using our services.