Christopherson Business Travel | Trust Center
Trust Center
Security practices and documentation
View security documents

Resources

Policies & Procedures Reports apply to the organization, services, scope and period stated in each report.

General Security Policy

REQ_12-1

Information Security Systems Maintenance Policy

Acceptable Use Policy

REQ_12-3-5

3rd Party Integration Vendor Contacts

Acceptable Use Standard

REQ_7-1-1_and_7-1-3

Incident Reporting Policy

REQ_12-1_and_11-2

Access Control and Logging and Monitoring Standard

REQ_10-6_and_10-7_and_10-4-2-A_and_8-1-A

Access Control and Monitoring Policy

Background Check Policy

REQ_12

Business Impact Analysis

sp800-34-rev1

View all

FAQs

Subprocessors

Travelport

GDS Tools

SAP Concur

Online Bookings

Umbrella

Traveler Profiles

Magnatech

Unused Tickets

Monitoring

Continuously monitored by Secureframe
View all

Network

IPs and Domains for Whitelisting

To ensure optimal performance and uninterrupted access to our services, it is critical that you whitelist the following IP addresses and domain names in your firewall or security appliances. Whitelisting our trusted network resources will prevent any issues related to email filtering, network connectivity, or application performance.

Our IPs and domains are essential for maintaining secure communication between your infrastructure and our services. Below, you will find the technical details for the required IPs and domains, categorized by service.

Datacenter IP Range:

Block
IPv4: 192.41.84.194/26
Range
IPv4: 192.41.84.194 - 192.41.84.254
Additional IPs
IPv4: 172.181.50.33
Staging:IPv4: 4.236.57.132

Specific IPs for External Services:

SendGrid (Email Delivery):

159.183.139.139

Domains for Whitelisting

To ensure uninterrupted communication with our servers and services, whitelist the following domains at the DNS level:

  • cbtravel.com
  • cbtat.com
  • andavo.com
  • goct.com
  • christophersontravel.com

Ports and Protocols

For proper communication, please ensure the following ports are open:

  • HTTP: Port 80 (TCP)
  • HTTPS: Port 443 (TCP)
  • SMTP (Email): Port 25, 587 (for unencrypted/TLS connections), 465 (for SSL connections)

Security Recommendations

We recommend updating your firewall configurations to allow outbound traffic to these IPs and domains. Additionally, ensure that any Intrusion Detection Systems (IDS) or Intrusion Prevention Systems (IPS) are configured to trust our traffic to avoid any false-positive alerts that might block legitimate communications.

For customers using email filtering solutions, make sure the IP addresses for our email services, such as those related to SendGrid, are added to your email security provider’s safelist. This will ensure the timely delivery of critical communication.

Monitoring

Access Security

Access to Product is Restricted
Non-console access to production infrastructure is restricted to users with a unique SSH key or access key
Unique Access IDs
Personnel are assigned unique IDs to access sensitive systems, networks, and information

Communications

Privacy Policy
A Privacy Policy to both external users and internal personnel. This policy details the company's privacy commitments.