Change to CORS policy

TL;DR - We're updating our CORS policy. If this impacts you, let us know.

To make our APIs even more secure we're updating the CORS policy assigned to them. This change will set the origin, whereas previously it was a wildcard origin. This means going forward you should ensure that you are not calling our APIs from a web browser, but instead calling them from a server. Learn more about CORS here.

This change is included in the documents API and authorisations API that will release tomorrow. We will introduce the CORS change to our other APIs on March 29th 2022.

We can whitelist domains, this feature will be available via our new developer portal later this year. If you require us to white-label a domain prior to the site being available then please contact us and we can arrange that for you.