| Supabase (managed cloud backend) | Primary database, authentication, storage buckets and serverless edge functions | Account data, organisation and monitor configuration, monitoring results, audit logs, encrypted vault records | EU / US regions |
| Cloudflare | DNS, CDN, TLS termination and edge protection for the application and status pages | IP addresses, request metadata | Global edge network |
| Resend | Transactional email delivery (alerts, invitations, reports, password resets) | Recipient email address, message content, delivery metadata | US / EU |
| Browserless.io | Headless browser execution for synthetic browser checks and screenshots | Target URLs, check step definitions, any credentials the customer supplies for a check | EU / US |
| Telegram (Bot API) | Optional alert delivery to customer-configured Telegram chats | Alert content, chat identifier | Global |
| Namecheap | Domain availability, registration and renewal as reseller registrar | Domain names, registrant / admin / technical / billing contact details | US |
| Google (Gemini via Lovable AI Gateway) | AI security assistant responses and domain name suggestions | Prompt content submitted by the user and related monitor context | US |
| Firecrawl | Backlink discovery and search-index lookups | Domain names and public search queries | US |
| ip-api.com | IP geolocation for the network path-trace visualisation | Resolved IP addresses of monitored hosts | EU |
| Have I Been Pwned (Pwned Passwords) | Breached-password checks during sign-up and password change | First five characters of a SHA-1 password hash only (k-anonymity); never the password | Global |