Custom Domain

Present EaseLab public experiences under your own hostname — e.g., results.citydiagnostics.com instead of the default shared app URL. Custom domains strengthen brand trust for report lookup and marketing pages.

Architecture

flowchart LR
    DNS[Customer DNS] --> CNAME[CNAME to EaseLab edge]
    CNAME --> TLS[Automatic TLS]
    TLS --> ROUTER[Tenant resolver]
    ROUTER --> APP[Public portal routes]
    ROUTER --> TEN[Tenant branding]

EaseLab resolves tenant context from the Host header after DNS points to the platform load balancer.

Eligibility

Custom domains typically require:

Requirement	Detail
Plan tier	Marketing / enterprise feature
Verified tenant	Active subscription
DNS access	Customer controls domain registrar
HTTPS	Auto certificate via platform

Check Usage & Limits for plan feature flags.

Setup workflow

1. Register domain in lab settings

1. Open Settings → Domain (or platform-assisted onboarding).
2. Enter desired hostname (subdomain recommended).
3. EaseLab displays required DNS records.

2. Configure DNS

Record	Value
CNAME	results → edge.easelab.example
TXT	_easelab-verify.results.example.com → easelab-verify=<token>

Propagation may take up to 48 hours — usually minutes.

3. Verify and provision TLS

sequenceDiagram
    participant Admin
    participant EaseLab
    participant CA as Certificate Authority
    Admin->>EaseLab: Add domain
    EaseLab->>Admin: DNS instructions
    Admin->>DNS: Publish CNAME
    EaseLab->>CA: Request certificate
    CA->>EaseLab: Issued cert
    EaseLab->>Admin: Domain active

4. Update patient communications

Replace default URLs in:

• SMS templates
• Printed receipt footers
• Email signatures
• Website CTAs

Subdomain vs apex

Use results.yourlab.com (subdomain) rather than apex yourlab.com — simpler CNAME without conflicting A records for corporate website.

Staff portal vs public domain

Surface	Typical hostname
Staff login	app.easelab.com or staff.yourlab.com
Patient public	results.yourlab.com
Marketing site	www.yourlab.com (may be separate CMS)

Not all deployments split staff onto custom domain — confirm with platform admin.

Branding interaction

Once domain is active:

Asset	Loaded per tenant
Logo	Settings upload
Favicon	Optional
Page title	Lab legal name
Support phone	Footer

Security considerations

Topic	Guidance
TLS 1.2+	Enforced at edge
HSTS	Recommended after stable go-live
Phishing	Educate patients to bookmark official domain
Certificate renewal	Automated — monitor expiry alerts

DNS hijacking

Protect registrar account with MFA. Attacker controlling DNS can intercept patient reports.

Testing checklist

Test	Pass
HTTPS padlock valid	☐
Report lookup loads	☐
Home sampling form submits	☐
PDF download works	☐
Mobile Safari / Chrome	☐
Old URL redirects optional	☐

Troubleshooting

Symptom	Fix
Certificate pending	Wait for DNS propagation
Wrong tenant branding	Host header mapping — contact support
Mixed content warnings	Ensure all assets HTTPS
404 on paths	Path prefix config
Email links still old domain	Update templates

Rollback

To revert to default URL:

1. Remove custom domain in settings.
2. Update SMS and print templates.
3. Keep DNS CNAME until traffic drains (optional).

Related documentation

• Public Portal Overview
• Report Lookup
• Billing: Usage & Limits
• Tenant Portal: Settings