diff --git a/src/main.ts b/src/main.ts
index 006c95b..eaaaaa4 100644
--- a/src/main.ts
+++ b/src/main.ts
@@ -25,6 +25,11 @@ async function bootstrap() {
     'https://mento-analytics-api-12390052758.us-central1.run.app', // Allow requests from the swagger UI under /docs
   ];
 
+  // Dynamic patterns for preview/staging deployments
+  const allowedOriginPatterns = [
+    /^https:\/\/.*-mentolabs\.vercel\.app$/, // Vercel preview deployments (MentoLabs org)
+  ];
+
   // Add localhost for development if NODE_ENV is development
   if (process.env.NODE_ENV === 'development') {
     allowedOrigins.push(`http://localhost:${process.env.PORT || 8080}`);
@@ -37,7 +42,7 @@ async function bootstrap() {
         return callback(null, true);
       }
 
-      if (allowedOrigins.includes(origin)) {
+      if (allowedOrigins.includes(origin) || allowedOriginPatterns.some((pattern) => pattern.test(origin))) {
         callback(null, true);
       } else {
         callback(new Error(`Origin ${origin} not allowed by CORS policy`), false);