Choose where your data apps load from
An admin can allow the organization's data apps to load from more origins, listed in Settings → Data apps.
Data apps run under a strict content policy: they load scripts, styles and fonts only from jsDelivr, cdnjs and Google Fonts, and send requests only there, so an app can't send your data anywhere else.
When your apps need another server, an admin adds its origin in Settings → Data apps, such as https://api.example.com. Each must be an https:// origin with nothing after it, up to 20. The page lists the built-in origins, with what data apps use each for, next to the ones your organization added.
Allowed origins are the organization's choice, not the project's: publishing doesn't change them. The change reaches every member the next time they load a page.