Information for IT teams

Fresh Start Report is a browser-based subscription service that shows USDA produce market data — shipping-point prices, movement, and weather across growing regions. Your colleague has asked to use it.

This page has everything you need to approve us. Nothing here requires installing software or changing your firewall.

Domains to allow

Please allowlist by hostname, not IP address. Our application and database are served through CDNs with dynamically assigned addresses, so there is no stable IP range to provide. This is standard for services hosted on Vercel and Supabase.

The Supabase hostname is easy to miss. If freshstartreport.com is allowed but that hostname is not, the site will load but sign-in will fail.

Email

We send transactional email only — password resets, sign-in links, and account notices. No marketing email is sent to users who have not asked for it.

One specific request: please exempt our links from scanning and rewriting

If your mail security scans, rewrites, or pre-fetches URLs in inbound messages, please exempt freshstartreport.com.

Our sign-in and password-reset emails contain single-use links. When a scanner opens one automatically, the link is consumed before the recipient ever clicks it — the person then sees an expired-link error and cannot get in.

We have seen this happen in practice, to a real customer, within eight seconds of delivery. Our mail arrives at your servers normally; the issue is the automated click, not the delivery.

The setting is usually called link protection, URL rewriting, Safe Links, or time-of-click protection, depending on your product.

Pre-approving our Microsoft app

If your organization restricts which third-party applications users may consent to, an administrator can approve ours in advance:

These permissions allow sign-in and reading the user's name and email address. They do not grant access to mailboxes, files, calendars, Teams, or directory data. We cannot read, send, or modify anything in your tenant.

Our publisher identity has been verified by Microsoft, which required Microsoft to confirm our company's legal registration and our ownership of freshstartreport.com.

Google Workspace

No administrator action is normally required. Sign-in uses standard Google OAuth requesting only the user's name and email address.

What we handle, and where

Data we store: the user's email address and name, their subscription status, and their saved preferences within the product. The market data itself is public USDA information. Users do not upload files to our service.

Payment data: handled entirely by Stripe. Card numbers never reach our systems.

Hosting: United States. Application and database in AWS us-west-1 via Supabase; email delivery in AWS us-east-1 via Resend. Data is encrypted in transit and at rest.

Subprocessors: Vercel (hosting), Supabase (database and authentication), Stripe (payments), Resend (transactional email), Google Workspace (our own business email).

What we do not require

• No software or agent installed on any device
• No browser extension
• No VPN or network changes
• No inbound firewall rules — all traffic is outbound HTTPS initiated by the user's browser
• No access to your directory, mail, or file systems

Questions

info@freshstartreport.com

Fresh Start Report LLC · Patagonia, Arizona