There are four domains to whitelist for the application to be functional:

www.sutori.com
assets.sutori.com
d1ox703z8b11rg.cloudfront.net
hstry-education-production.s3.us-west-2.amazonaws.com
owcqxq3rnb.execute-api.us-east-1.amazonaws.com

We also have an in-app chat that may be of use to teachers who require support. For that you would need to enable the domains "crisp.chat" and "crisp.im".

Finally, a student or teacher can embed various resources into their stories. This can be a YouTube video, a Flipgrid video, a Quizlet, a Tweet,... Naturally, for this feature to work, the respective service should be whitelisted.

Teachers! if needed, forward this to your tech department.