Ultimarii runs in your web browser. There’s nothing to install. This page covers what your computer and connection need so it runs well — and lets you test both.
One moment.
Sends a 24 MB test file to Ultimarii’s storage the same way the app uploads your documents, then deletes it automatically. Nothing from your computer is sent — the test file is random data generated in your browser. This is the check that most often explains “uploads don’t work at the office”.
Most problems on a work computer aren’t your computer — they’re a setting on the company network. Try these first, in order:
If Ultimarii works outside the office but not on it, copy this and send it to whoever manages your network. It’s written for them, and it names the specific settings involved.
Hello, We use a web application called Ultimarii, and it works correctly outside our network but not on it. It has some specific requirements that corporate proxies and TLS-inspection appliances often interfere with. Could you check the following for our tenant hostname on *.ultimarii.app? 1. HTTP/2 must be preserved end-to-end. Some inspection appliances terminate HTTP/2 and re-originate to the client as HTTP/1.1. The application opens 15-20 concurrent long-lived connections per session, so under HTTP/1.1's six-connection-per-origin limit it stalls with no error shown. 2. Long-lived GET responses must not be buffered. The application streams results progressively; a proxy that buffers the full response before forwarding makes it appear frozen. 3. Idle/read timeout should be at least 60 seconds (120 preferred) on any proxy, VPN concentrator or firewall in the path. Shorter timeouts cause connections to be cut and re-established in a loop. 4. Document uploads go directly from the browser to Azure Blob Storage over HTTPS, in 8 MB blocks. Please confirm that: - outbound HTTPS to Azure Storage is permitted - if internal DNS hosts a privatelink.blob.core.windows.net zone, it does not shadow the public name we use - no upload size or request body limit below ~10 MB applies to these requests 5. These destinations need to be reachable over HTTPS: - our tenant hostname on ultimarii.app - *.clerk.com, *.clerk.accounts.dev, api.clerk.com (sign-in) - challenges.cloudflare.com (sign-in verification) - *.blob.core.windows.net (document upload and viewing) - api.electric-sql.cloud (live data updates) - posthog.ultimarii.app, *.ingest.us.sentry.io (diagnostics) - *.appcues.com, *.appcues.net (in-app guidance) - fonts.googleapis.com, fonts.gstatic.com (fonts) - res.cdn.office.net, teams.microsoft.com, *.cloud.microsoft, *.office.com (if we use the Microsoft Teams tab) 6. WebAssembly and web workers created from blob: URLs must not be disabled by browser policy - the PDF viewer needs both. Note: WebSockets are not required. Everything runs over ordinary HTTPS. Thank you.