Scalingo

Scalingo apps egress from a shared regional pool of IP addresses. Every app in a region leaves through the same set, and Scalingo's documentation states the list can change with 30 days' notice. Allowlisting those IPs means trusting every other Scalingo tenant on them and re-checking the list whenever Scalingo updates it. Scalingo's IPSec and OpenVPN addons do not fix this: they tunnel your app into your own private infrastructure, they are not a public fixed egress IP for a third-party allowlist.

A note on sovereignty first: Scalingo is SecNumCloud-qualified and HDS-certified on sovereign French infrastructure. QuotaGuard runs on AWS. If your requirement is French sovereign-cloud egress, QuotaGuard is not the right tool. If you run a standard Scalingo app and need a stable, controllable egress IP with EU data residency, here is what it does.

QuotaGuard gives your app a fixed network identity from a single environment variable, and it covers inbound as well as outbound.

• One-Variable Setup: Set your QuotaGuard connection URL as an environment variable with scalingo env-set, set HTTP_PROXY and HTTPS_PROXY to the same value, exclude internal hosts with NO_PROXY, then restart. No tunnel addon, no custom image.
• Two Static IPs That Are Yours: Scalingo's egress addresses are shared and change. QuotaGuard assigns two fixed IPs to your account. Your partner locks their firewall to those two and keeps it closed, with no shared-tenant exposure.
• Inbound on a Fixed Address: A bank, processor, or partner that sends you webhooks and requires a fixed destination IP gets one permanent address that forwards to your app, even as Scalingo changes underneath.
• Production-Grade Reliability: A load-balanced pair of static IPs with automatic failover. Add both to any allowlist. Starter, Production, and Business share a static IP pair; Enterprise gives you dedicated IPs.
• EU Data Residency (with one limit): QuotaGuard runs EU regions in Frankfurt, Ireland, and London. An EU region keeps outbound traffic on an EU IP, with dedicated EU IPs on Enterprise and a Data Residency add-on from $899 per month. This is EU residency on AWS, not SecNumCloud sovereign-cloud certification.
• Shield for Regulated Data: For PCI-DSS, SOC 2, or HIPAA-bound apps, QuotaGuard Shield uses SSL passthrough so QuotaGuard never decrypts the data flowing between your app and the destination.

Add-on note: this targets Scalingo's shared, changing egress IPs for standard apps needing third-party allowlisting. It is not a sovereignty solution.