> For the complete documentation index, see [llms.txt](https://docs.docontrol.io/docontrol-user-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.docontrol.io/docontrol-user-guide/faqs/domains-and-ips.md).
# Domains and IPs
FAQs on how DoControl handles domains and IPs
By sharing assets only with trusted domains, you limit your organization's external exposure and mitigate the external risk of multi-SaaS data and permission sprawl.
IT teams generally work with a defined list of **trusted IP** ranges they allocate and manage. These IPs are valid indicators of a legitimate network, while IPs outside these ranges are considered to be **non-trusted**.
Q. What are the different types of domains in DoControl?
A. DoControl categorizes domains into three types:
* **External** domains (domains with external users who have access to your organization's assets)
* **Internal** domains (domains managed by your organization)
* **Trusted** domains (a subset of internal and external domains considered safe for sharing)
Q. Which apps have external domains that are tracked by DoControl?
A. Currently, DoControl supports external domains for Google Workspace and Slack apps.
Q. Can I remove internal domains from my list?
A. No, you cannot remove internal domains because they are trusted by definition and are automatically managed by your organization.
Q. There are domains that are directly related to our company. How do I indicate that these domains are not private or non-trusted?
A. You can whitelist domains by marking them as trusted:
1. Go to **Inventory > Domains and IPs > External domains**.
2. Select the relevant domain and click **Mark as trusted domains.**
OR
1. Go to **Inventory > Domains and IPs > Trusted domains**.
2. Click **Add trusted domains.**
3. Manually add your list of trusted domains and click **Save**.
Q. How many trusted domains can I add to DoControl?
A. You can add up to 1000 trusted domains to your DoControl environment.
Q. What happens when I mark an external domain as trusted?
A. It appears in both the External domains tab and the Trusted domains tab, allowing you to reference it in workflow conditions.
Q. What formats are supported when adding trusted domains?
A. You can add trusted domains in two formats:
* Standard domain format (domain.com) or
* Subdomain format (sub.domain.com)
For multiple domains, you can paste comma-separated values or values from a spreadsheet, using **Tab** or **Enter** keys to separate between domains.
Q. Can I use trusted domains in workflow automation?
A. Yes, after defining your trusted domains list, you can use them as conditions in workflows with comparators such as:
* In trusted domains: True or false
* Not in trusted domains: True or false
Q. Why would I want to remove a domain from my trusted list?
A. You might remove a domain from your trusted list if your organization stops working with a specific vendor or partner, helping to limit external exposure and reduce security risks.
Q. What's the difference between "Total collaborators" and "Total collaborations"?
A. Total collaborators refers to the **unique number** **of external users** with access to your assets, while Total collaborations counts the total number of **external shares** across all assets.
For example, if two assets are each shared with the same two external users, you would have 2 collaborators but 4 collaborations.
Q. How can trusted IPs help with security?
A. Trusted IPs help reduce risk by enabling you to detect events that don't originate from your organization's approved IP ranges, which could indicate potential account takeover attempts.
You can also set workflow conditions to flag or disallow activity from untrusted IPs or countries.
Q. What IP address format does DoControl support?
A. DoControl supports only IPv4 IP addresses in valid CIDR (Classless Inter-Domain Routing) format, such as 10.0.0.1/24.
Q. What information does DoControl automatically calculate for IP ranges?
A. When you add an IP range in CIDR format, DoControl automatically calculates and displays the first IP address in the range, the last IP address, and the total number of IPs in that range.
Q. Can I use trusted IP conditions in all workflow events?
A. Not all SaaS events contain IP fields, so the availability of IP-based conditions depends on whether the specific event type includes IP address information.
{% hint style="success" %}
For more information, see [Domains](/docontrol-user-guide/saas-data-monitoring/inventory/inventory-domains.md).
{% endhint %}
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.
Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:
```
GET https://docs.docontrol.io/docontrol-user-guide/faqs/domains-and-ips.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.