Medallia Experience Cloud IP addresses and host names

IP addresses and host names of Medallia Experience Cloud data centers for allow lists.

For Medallia's dedicated colocation data centers, Medallia, Inc. maintains exclusive ownership of every public IP address and hostname in our environment. Medallia customers can be confident that communications with Medallia via these addresses happen in a secure manner that prevents communications from being hijacked or re-routed.

For Medallia's Oracle Cloud-based data centers, Medallia leverages individual IP addresses assigned by OCI to Medallia. Though rare, IP rotations may occur; enroll via Medallia Support to receive change notifications.

Important: Medallia, Inc. occasionally rotates its IP addresses within dedicated /24 network blocks. If your company designates IP addresses that allow access to your systems, follow the industry-standard practice of designating entire blocks to minimize future changes and down-time. For this reason Medallia does not publish the individual IP addresses of specific hosts.

If you depend on IP addresses, check this page quarterly for updates. For more information, see Revision history.

Important: To identify the IP addresses for GovCloud instances, contact Medallia Support to request the information.

This topic was last updated on 15 September 2026.

Reporting

Some Medallia Web reporting reports use third-party services to enhance reporting. To support Medallia Web reporting, companies need to allow access to the hosts as described in Reporting hostnames. Custom reports that include non-Medallia, Inc. content might also need to add company-specific hosts to the Content security policy (CSP) for their instance configuration.

Import and export

For import and export access, allow the IP addresses and hosts listed in the data center your company connects to.

MMFT hostnames

We use Medallia media file transfer (MMFT) hosts across the globe for bulk file storage. MMFT uses the naming convention filestash.{dc}.medallia.{tld} for the endpoints (on port 22 for SFTP and port 443 for S3), where:

  • {dc} is the Medallia data center abbreviation (such as sc4, sea1, fra1, etc.).
  • {tld} is the Medallia top-level domain for your instance (such as com, eu, com.au, etc.).
Note: Digital Feedback uses the same CIDR netblocks. However, Digital Feedback also uses third-party Content delivery networks (CDNs) for fast and distributed file resources. When allowing IP addresses for Digital, include the IP addresses for the appropriate CDN provider, one of:
  • Akamai — Akamai has tens of thousands of IP addresses that may change. Contact Akamai for assistance.
  • Fastly — See Accessing Fastly's IP ranges.

Reporting hostnames

Add these servers to company firewall allow-lists for users to access Medallia Web reporting. Always use https as the protocol. Failure to include the necessary host(s) may cause blank report pages and 403 Forbidden errors.

URLs to allow (HTTPs for all)

Purpose

Medallia Alchemy Experience Reporting

Medallia Setup reports

cdn.medallia.comcdn.appsol.medallia.com

Medallia's content delivery networks for serving static assets such as JavaScript, CSS, and images.

 Cancel iconCancel icon
*.kampyle.comMedallia solution for collecting feedback, statistics and metrics on reporting.Cancel icon—
rum-gateway.medallia.comMedallia solution for collecting performance metrics. Data-center specific.Cancel icon—
col.eum-appdynamics.com Medallia, Inc. solution for monitoring performance.Cancel icon—
static.medallia.com

Anti Cheating Engine (ACE) and other resources

Cancel iconCancel icon

bugreport.medallia.com

Bug reports URL

Cancel iconCancel icon

www.google-analytics.com

Google Analytics (fonts, images, script)

Cancel iconCancel icon

fonts.gstatic.com
fonts.googleapis.com

Google Fonts

— Cancel icon

chart.googleapis.com

Google Charts

— Cancel icon

cdnjs.cloudflare.com

Codemirror and other JS

— Cancel icon

maxcdn.bootstrapcdn.com
netdna.bootstrapcdn.com

Bootstrap JS

— Cancel icon

Survey hostnames

Add these servers to company firewall allow-lists for users to access Survey engine production and sandbox instances. Always use https as the protocol. Failure to include the necessary host(s) may cause blank report pages and 403 Forbidden errors.

Data centerURLs to allow (HTTPs for all)SBX URLs (HTTPs for all)Region
Canada (can) data centersurvey.medallia.casurveysbx.sbx.can.medallia.caAmericas
Denver (us2) data centersurvey2.medallia.comsurveysbx.sbx.den.medallia.comAmericas
Phoenix (dvt1) data centersurvey12.medallia.comsurvey12sbx.sbx.dvt1.medallia.comAmericas
Sacramento (smf1) data centersurvey10.medallia.comsurvey10sbx.sbx.smf1.medallia.comAmericas
Seattle (sea1) data center

  • survey3.medallia.com

  • ​​survey-usw1-2.medallia.com

surveysbx.sbx.sea1.medallia.comAmericas
Santa Clara (sc4) data center

  • survey.medallia.com

  • survey6.medallia.com

  • survey-usw1-1.medallia.com

  • surveywire.medallia.com

surveysbx.sbx.sc4.medallia.comAmericas
Tokyo (hnd1) data centersurvey8.medallia.comsurvey8sbx.sbx.hnd1.medallia.comAPAC
Singapore (sin1) data centersurvey4.medallia.comsurvey4sbx.sbx.sin1.medallia.comAPAC
Sydney (syd1) data centersurvey.medallia.com.ausurvey.sbx.syd1.medallia.com.auAPAC
United Arab Emirates (dxb1) data center survey11.medallia.comsurvey11sbx.sbx.dxb1.medallia.comAPAC
Jeddah (jed1) data centersurvey5.medallia.comsurvey5sbx.sbx.jed1.medallia.comEMEA
Amsterdam (ams2) data centersurvey3.medallia.eusurvey3sbx.sbx.ams2.medallia.euEurope
Frankfurt (fra1) data centersurvey2.medallia.eusurvey2sbx.sbx.fra1.medallia.euEurope
United Kingdom/Europe (lon) data centersurvey.medallia.eusurveysbx.sbx.lon.medallia.euEurope

Amsterdam (ams2) data center

Abbreviationams2
CIDR blocks

147.75.246.0/24

Description Host
Email domain to production

express.ams2.medallia.eu

Email domain to sandbox

express.sbx.ams2.medallia.eu

SFTP/FTP Pull import to production feed serverfeed11.medallia.eu
SFTP/FTP Pull import to sandbox feed serverfeed11sbx.sbx.ams2.medallia.eu
Import to production SFTPfilestash.ams2.medallia.eu

Canada (can) data center

Abbreviationcan
CIDR blocks

147.75.178.0/24
147.75.179.0/24
147.75.248.0/24

Failover data centeryul1
Description Host
Email domain to production

express.can.medallia.ca

Email domain to sandbox

sbx.can.medallia.ca

SFTP/FTP Pull import to production feed serverfeed.medallia.ca
SFTP/FTP Pull import to sandbox feed serverfeedsbx.sbx.can.medallia.ca
Import to production SFTPfilestash.can.medallia.ca

Denver (us2) data center

Abbreviationus2 (den)
CIDR blocks

199.102.177.0/24
147.75.252.0/24

Description Host
Email domain to productionexpress.den.medallia.com
Email domain to sandboxsbx.den.medallia.com
SFTP/FTP Pull import to production feed serverfeed2.medallia.com
SFTP/FTP Pull import to sandbox feed serverfeedsbx.sbx.den.medallia.com
Import to production SFTPfilestash.den.medallia.com

Frankfurt (fra1) data center

Abbreviationfra1
CIDR blocks147.75.180.0/24
Failover data centerams2
DescriptionHost
Email domain to productionexpress.fra1.medallia.eu
Email domain to sandboxexpress.sbx.fra1.medallia.eu
SFTP/FTP Pull import to production feed serverfeed2.medallia.eu
SFTP/FTP Pull import to sandbox feed serverfeed2sbx.sbx.fra1.medallia.eu
Import to production SFTPfilestash.fra1.medallia.eu

Jeddah (jed1) data center

Abbreviationjed1
IP addressesNo CIDR blocks available, individual applications only:

  • Web access to Reporting application and Survey engine:

    • 144.24.223.222

  • Exports from or feed pulls (to/from client server) by Reporting application:

    • 193.122.77.224

  • MMFT (Filestash):

    • 207.127.99.145

  • API GW:

    • 144.24.223.222

  • Sandboxes:

    • 158.101.225.130

DescriptionHost
Email domain to productionexpress5.medallia.com
Email domain to sandboxexpress5.sbx.medallia.com
Import to production SFTPfilestash.jed1.medallia.com

Montreal (yul1) data center

Abbreviationyul1
CIDR blocks147.75.254.0/24
Description Host
Email domain to productionexpress.yul.medallia.ca
Email domain to sandboxexpress.sbx.yul.medallia.ca
SFTP/FTP Pull import to production feed serverfeed2.medallia.ca
SFTP/FTP Pull import to sandbox feed serverfeed2sbx.sbx.yul1.medallia.ca

Phoenix (dvt1) data center

Abbreviationdvt1
IP addressesNo CIDR blocks available, individual applications only:

  • Web access to the Reporting application:

    • 161.153.97.184

  • Web access to Survey engine:

    • 129.153.92.49

  • Exports from or feed pulls (to/from client server) by the Reporting application:

    • 161.153.35.237

  • MMFT (Filestash):

    • 137.131.48.184

  • API GW:

    • 161.153.97.184

  • Sandboxes:

    • 132.226.74.30

DescriptionHost
Email domain to productionexpress12.medallia.com
Email domain to sandboxexpress12.sbx.medallia.com
Import to production SFTPfilestash.dvt1.medallia.com

Sacramento (smf1) data center

Abbreviationsmf1
CIDR blocks147.75.181.0/24
Description Host
Email domain to productionexpress.smf1.medallia.com
Email domain to sandboxexpress.sbx.smf1.medallia.com
SFTP/FTP Pull import to production feed serverfeed10.medallia.com
SFTP/FTP Pull import to sandbox feed serverfeed10sbx.sbx.smf1.medallia.com
Import to production SFTPfilestash.smf1.medallia.com

Santa Clara (sc4) data center

Abbreviationsc4
CIDR blocks147.75.251.0/24

199.102.178.0/24

Failover data centerden
Description Host
Email domain to productionexpress.medallia.com
Email domain to sandboxsbx.sc4.medallia.com
SFTP/FTP Pull import to production feed serverfeed.medallia.com
SFTP/FTP Pull import to sandbox feed serverfeedsbx.sbx.sc4.medallia.com
Import to production SFTPfilestash.sc4.medallia.com

Seattle (sea1) data center

Abbreviationsea1
CIDR blocks

147.75.243.0/24

Failover data centerden
Description Host
Email domain to productionexpress.sea1.medallia.com
Email domain to sandboxexpress.sbx.sea1.medallia.com
SFTP/FTP Pull import to production feed serverfeed3.medallia.com
SFTP/FTP Pull import to sandbox feed serverfeed3sbx.sbx.sea1.medallia.com
Import to production SFTPfilestash.sea1.medallia.com

Singapore (sin1) data center

Abbreviationsin1
CIDR blocks

147.75.176.0/24

Failover data centerAWS Singapore
Description Host
Email domain to productionexpress.sin1.medallia.com
Email domain to sandboxexpress.sbx.sin1.medallia.com
SFTP/FTP Pull import to production feed serverfeed4.medallia.com
SFTP/FTP Pull import to sandbox feed serverfeed4sbx.sbx.sin1.medallia.com
Import to production SFTPfilestash.sin1.medallia.com

Sydney (syd1) data center

Abbreviationsyd1
CIDR blocks147.75.247.0/24
Failover data centerAWS Sydney
Description Host
Email domain to productionexpress2.syd1.medallia.com.au
Email domain to sandboxexpress.sbx.syd1.medallia.com.au
SFTP/FTP Pull import to sandbox feed serverfeedsbx.sbx.syd1.medallia.com.au
Import to production SFTPfilestash.syd1.medallia.com.au

Tokyo (hnd1) data center

Abbreviationhnd1
IP addressesNo CIDR blocks available, individual applications only:

  • Web access to the Reporting application and Survey engine:

    • 150.230.210.102

  • Exports from or feed pulls (to/from client server) by the Reporting application:

    • 150.230.98.45

  • MMFT (Filestash):

    • 152.70.111.183

  • API GW:

    • 150.230.210.102

  • Sandboxes:

    • 150.230.192.103

DescriptionHost
Email domain to productionexpress8.medallia.com
Email domain to sandboxexpress8.sbx.medallia.com
Import to production SFTPfilestash.hnd1.medallia.com

United Arab Emirates (dxb1) data center

Abbreviationdxb1
CIDR blocksNo CIDR blocks available, individual applications only:

  • Web access to the Reporting application and Survey engine:

    • 141.145.145.73

  • Exports from or feed pulls (to/from client server) by the Reporting application:

    • 141.145.147.5

  • MMFT (Filestash):

    • 84.235.241.171

  • API GW:

    • 141.145.145.73

  • Sandboxes:

    • 145.241.125.182

Description Host
Email domain to production

express11.medallia.com

Email domain to sandbox

express11.sbx.medallia.com

SFTP/FTP Pull import to production feed serverfeed11.medallia.com
SFTP/FTP Pull import to sandbox feed serverfeed11sbx.sbx.dxb1.medallia.com
Import to production SFTPfilestash.dxb1.medallia.com

United Kingdom/Europe (lon) data center

Abbreviationlon
CIDR blocks

199.102.176.0/24
147.75.249.0/24

Failover data centerams2
Description Host
Email domain to production

express.medallia.eu

Email domain to sandbox

sbx.lon.medallia.eu

SFTP/FTP Pull import to production feed serverfeed.medallia.eu
SFTP/FTP Pull import to sandbox feed serverfeedsbx.sbx.lon.medallia.eu
Import to production SFTPfilestash.lon.medallia.eu

Survey authentication service URLs

The survey authentication service, also known as Survey Authn, is in charge of providing an authentication mechanism for surveys.

Use these URLs as the entity ID when configuring Medallia as identity provider (IdP) for survey authentication. Always use https as the protocol. For information, see Configure Medallia as IdP for survey authentication.

Data centerEnvironmentURL (HTTPs for all)Description
Amsterdam (ams2) data centerProductionsurvey-authn.ams2.medallia.euUsed in production and client sandbox instances.
Canada (can) data centerProductionsurvey-authn.medallia.caUsed in production and client sandbox instances.
Denver (us2) data centerProductionsurvey-authn.den.medallia.comUsed in production instances.
Denver (us2) data centerStagingsurvey-authn-staging.den.medallia.comUsed in engineering sandbox instances.
Frankfurt (fra1) data centerProductionsurvey-authn.fra1.medallia.euUsed in production and client sandbox instances.
United Kingdom/Europe (lon) data centerProductionsurvey-authn.medallia.euUsed in production and client sandbox instances.
Santa Clara (sc4) data centerProductionsurvey-authn.medallia.comUsed in production and client sandbox instances.
Seattle (sea1) data centerProductionsurvey-authn.sea1.medallia.comUsed in production and client sandbox instances.
Seattle (sea1) data centerStagingsurvey-authn-staging.eng.sea1.medallia.comUsed in engineering sandbox instances.
Sacramento (smf1) data centerProductionsurvey-authn.smf1.medallia.comUsed in production and client sandbox instances.
Sydney (syd1) data centerProductionsurvey-authn.medallia.com.auUsed in production and client sandbox instances.
United Arab Emirates (dxb1) data centerProductionsurvey-authn.dxb1.medallia.comUsed in production and client sandbox instances.

Revision history

Revisions made to this topic.

Revision dateRevisions
15 Sep 2026 Added Phoenix (dvt1) data center.
02 Feb 2026Updated Sacramento (smf1) data center information and added survey hostnames for Sacramento (smf1), Santa Clara (sc4), and Denver (us2) data centers.
21 Jan 2026Added feed server information for United Arab Emirates (dxb1) data center.
25 Nov 2025Added United Arab Emirates (dxb1) data center.
16 Oct 2025Removed Incheon (icn1) and Phoenix (phx1) data center information.
17 Jul 2025Updated Amsterdam (ams2) data center information.