01
The list
| Provider | What it does | Processing location |
|---|---|---|
| Supabase | Database, authentication and file storage for the whole platform: accounts, workspaces, reports, knowledge base, uploads, exports and archived page snapshots. | Ireland, with access from the United States |
| Vercel | Application hosting and compute, durable execution of research runs, scheduled jobs, bot detection, web application firewall, cookieless traffic and performance measurement, and the routing of model requests to Anthropic and OpenAI. | Ireland for hosting, compute, the execution of research runs and scheduled jobs, and the durable store of research runs started from 7 October 2026; United States for bot detection, the web application firewall and the routing layer that checks the session in front of every request, all on its edge network, its traffic and performance measurement, and the durable store of research runs started before 7 October 2026; the routing of model requests in whichever region of its network a request reaches |
| Anthropic | Model inference: the consultative intake conversation and the research pipeline - its planning, its choice of which captured pages to read, and its analysis and writing from the passages read. | United States |
| OpenAI | Model inference: the research pipeline's reading of the research material for a report - each page it captured, and the files and knowledge-base material supplied for it. And speech-to-text transcription of dictated input. | United States |
| Parallel Web Systems | Open-web search: search queries written from your research request. | United States |
| Polar | Merchant of Record: checkout, payment processing, invoicing, tax and refunds. Card and bank details are held here and never reach us. | United States and European Economic Area |
| Resend | Transactional email: sign-in links and workspace invitations. | European Economic Area |
| Upstash | Short-lived rate-limit counters and idempotency keys, holding an IP address or an API key identifier for minutes to hours. | European Economic Area |
| Two things. Google sign-in, where an account holder chooses it: Google confirms the sign-in and passes us the email address, name and profile picture on that account. And Google Workspace, which provides our own mailboxes, so anything you write to us passes through it. | United States and European Economic Area |