License Verification
On launch, Draftable Clean verifies the product license by connecting to Draftable license servers.As of v26.7.0, license activation follows the Windows system proxy settings and authenticates using the signed-in user’s Windows credentials. This allows activation to succeed on networks that require an authenticated corporate proxy.
Software updates and downloads
If you use the default per-user installer, Draftable Clean checks for updates on launch and downloads them automatically. With the machine-wide MSI, your administrator downloads and installs updates; the application does not update automatically.Outlook add-in cloud connections
The Outlook add-in loads fromdl.draftable.com over HTTPS (443) on every machine where you use it, including when Draftable Clean is installed with the machine-wide MSI. Allow the following connections in addition to localhost access:
This is not an exhaustive Microsoft allow-list. Your organization’s Outlook and Microsoft sign-in requirements may include additional endpoints. Localhost access alone is not sufficient to load the add-in.
Outlook add-in (localhost)
The Draftable Clean Outlook Add-in communicates with the desktop application vialocalhost. Some corporate security tools, firewalls, or endpoint protection software may flag or block localhost network calls - ensure these are permitted for the add-in to function correctly.
As of v26.6.0, Draftable Clean serves this
localhost communication through an in-app REST API by default, automatically falling back to the Draftable Clean Windows service where required. This makes new installations less dependent on a separately running Windows service for everyday use. The localhost connectivity requirement above is unchanged.DMS Integrations
If you use Draftable Clean’s iManage, NetDocuments, or SharePoint integrations to open or save files, network connectivity to those services is required.SharePoint Online
The SharePoint integration added in v26.7.0 covers SharePoint Online and OneDrive for Business. It connects through the Microsoft Graph API and signs in with a Microsoft work or school account.Sign-in uses your organization’s Microsoft identity provider, so the Microsoft sign-in endpoints your tenant already relies on must also be reachable. Personal Microsoft accounts are not supported.Users can sign in with more than one work or school account, and Graph requests are routed per tenant. If your organization operates in a sovereign cloud, Draftable Clean uses the corresponding regional Microsoft Graph endpoint in place of
graph.microsoft.com.Microsoft Purview protected files
If your administrator turns on support for files protected by Microsoft Purview, the computer must reach Microsoft’s sign-in service and Microsoft’s Azure Rights Management (protection) service when a protected file is opened. The file itself is decrypted locally and is not sent to Draftable.
If these services cannot be reached, users see “Couldn’t reach the Microsoft protection service. Check your connection and try again.”

