Connect a custom domain

• Custom domains come with Pro. On Free, the Brand tab shows a Pro note in place of Add domain. See Free and Pro.
• Only an admin can add, check, change or remove a domain. See Roles and permissions.
• Use a hostname whose DNS you control. A subdomain such as trust.example.com is the usual choice. A bare domain such as example.com works too, but takes A records rather than a CNAME.
• A hostname under prvcy.center can't be used, and each hostname can belong to only one of your hubs.

1. Go to Privacy Center › Brand.
2. On Hub details, select Add domain. For a brand hub, open the brand and choose Custom domain under Address, or add the brand straight onto a domain (see Add a brand hub).
3. In Add a custom domain, type the Hostname and select Add domain.

The hostname is attached to the host that serves your Privacy Center, and the change is written to your audit log. A Custom domain card then shows the hostname, where it stands and four steps: Attached to the hub's host, Prove the domain is yours, Point it at your hub and Certificate issued and serving. A step that needs you is marked Your move.

The card lists the exact records your hostname needs, each with a Copy button. Add them at your DNS provider:

• A TXT record, only if the card asks for one. It's needed when the hostname is already known to another Vercel project, Vercel being the host that serves your Privacy Center.
• A CNAME on the hostname, for a subdomain, or an A record on the domain itself, for a bare domain.

Each record's name is shown relative to your domain, with the full name beneath it, because providers differ in which they ask for. Copy the values from the card rather than from a guide elsewhere: they're specific to your hostname.

DNS changes can take up to 48 hours to reach everyone. Until the domain is live, your page keeps answering at its usual address.

You don't have to watch the card. After you add the domain it's checked every thirty seconds at first and then less often, for up to three days, and the card updates itself. Check now asks again straight away. Every domain is also re-checked every six hours. When a domain goes live, or stops being served, your workspace is notified.

Your hub, its policies and every brand hub without a hostname of its own answer at the new hostname, and the workspace address redirects there. A brand's own hostname works the same way: its path under your address redirects to it. The certificate is renewed automatically.

• Change domain attaches a new hostname in place of the current one. The old hostname stops answering the moment the new one is attached, and the page keeps answering at its usual address until the new one is live.
• Remove, confirmed with Remove domain, gives the hostname up and takes it off the host. It stops answering for everyone, and the hub is served at its usual address again. You can add the same hostname again later.

Both acts are written to your audit log.

Nothing is deleted. The hostname stays attached and keeps being checked, but it's marked Paused and isn't served: visitors to it are redirected to the workspace address on the same path, and the workspace address stops redirecting to it. While it's paused you can still remove it, but you can't change it. Upgrading to Pro again serves it from the next visit, with nothing to set up twice.