1. Current providers
| Provider | What they do for us | Where | What data |
|---|---|---|---|
| Lovable (Lovable Labs Incorporated) | Builds and hosts the website and app | Sweden / EU, with global edge hosting | All service data passes through hosting; server logs (IP address, browser) |
| Supabase, Inc. (via Lovable Cloud) | Database, sign-in and authentication, sign-in emails | Cloud region chosen for the project; company in the United States | Account details, all data stored in the app |
| Cloudflare, Inc. | Runs the app's server code and delivers pages | Global network; company in the United States | Requests to the app, IP address, browser details |
| Anthropic, PBC | Claude API: explanations, research briefs, digests and price checks, including web search | United States | Company name, Simulator and hiring figures, research questions, sector, region, competitors and topics |
| GitHub, Inc. (Microsoft) | Runs the scheduled daily security and research checks | United States | Domain names and company names/numbers to check; results sent back to our database |
| Microsoft Corporation | Calendar connection, only if you connect a Microsoft 365 account | Per your Microsoft 365 tenant | Read-only calendar access; your sign-in with Microsoft |
| Google LLC | Calendar connection, only if you connect a Google account | United States / global | Read-only calendar access; your sign-in with Google |
| Companies House | Public register lookups for the Cyber Security building | United Kingdom | Company number only |
| urlscan GmbH (urlscan.io) | Checks suspicious lookalike websites | Germany | Domain names only |
| crt.sh (Sectigo) and certificate transparency logs | Finds certificates issued for your domains and lookalikes | United Kingdom / global | Domain names only |
| RDAP registries (rdap.org, Nominet) | Looks up when a domain was registered | United Kingdom / global | Domain names only |
2. Changes
We will update this page when we add or change a provider.
Last updated 16 October 2026 · Version 1.0