Almanac uses separate network routes for search, browsing, sandbox work, and connected services. Each route has its own control.
| Route | What it can reach | Where to manage it |
|---|---|---|
| Web Search | Public websites allowed by your website rules | Settings > Web Search |
| Browser | Rendered public pages, with read-only access | Plugins |
| Sandbox | Approved package registries and code hosts, or nothing | Settings > Configuration |
| Connectors | The service associated with each connector | Plugins or organization settings |
Control Web Search
Go to Settings > Web Search to choose which websites Almanac may use.
- Allowed websites: When the list is empty, Web Search can use any public website. Adding a website limits search to that domain, its subdomains, and any other domains you add.
- Blocked websites: Almanac won’t use a blocked website, even when it also appears in the allowed list.
Use an allowed list when you want answers drawn from a defined set of sources, such as society guidelines, primary journals, or drug references.
Website rules control where Almanac reads information. They don’t control what you enter in a conversation. See Privacy and data.
Use Browser
Some pages need to be rendered before their content appears. Browser opens these pages in an isolated environment and reads what is shown.
Browser has read-only access to public pages. It doesn’t sign in, submit forms, or use your credentials or browser session. See Browser.
Control sandbox access
Code Almanac runs in the sandbox has no access to the open web.
Go to Settings > Configuration > Sandbox network access, then choose:
- Disabled: Prevent all outbound connections.
- Package managers only: Allow access to approved package registries and code hosts. This is the default.
Package manager access doesn’t provide access to the general web. Packages contain third-party code, so review requests to install unfamiliar ones.
See The sandbox.
Review connectors
Each connector communicates only with the service it supports. An EHR connector reaches your EHR, while a mail connector reaches the connected mailbox.
Organizations may approve connectors centrally when work involves sensitive data. See Plugins and skills.
Follow managed settings
Your organization may manage network settings you can’t change. Managed settings are marked as read-only.
See Managed configuration and HIPAA configuration.