Last updated: 13 September 2026
Each provider receives only what its purpose needs. Where a provider is outside the UK or EEA, we rely on the data processing terms in its agreement with us, which incorporate the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Hosts the website and app, edge routing, and routes AI requests through AI Gateway | United States |
| Supabase | Database, authentication and file storage | United States (N. Virginia) |
| Inngest | Background jobs and schedules | United States |
| Stripe | Billing | United States |
| Resend | Transactional email | United States |
| PostHog | Product analytics, with consent | EU (Frankfurt) |
| Google Analytics | Marketing site analytics, with consent | United States |
| Sentry | Error and performance monitoring | EU (Germany) |
| Arcjet | Bot and abuse protection | United States; API runs in multiple regions |
| Cloudflare | Turnstile bot verification on sign-in, sign-up and the public domain audit form | United States; global network |
| Cossistant | Support chat on the marketing site and in the app | United States |
| Mintlify | Hosts docs.devtune.ai | United States |
| OpenRouter | Routes AI requests to model providers | United States |
| Bright Data | Runs tracked prompts on AI platforms | Israel and United States |
| OpenAI (direct API) | Runs tracked prompts during onboarding and where configured for a platform | United States |
| Perplexity (direct API) | Runs tracked prompts during onboarding and where configured for a platform | United States |
| Google (direct API) | Runs tracked prompts during onboarding and where configured for a platform | United States |
| DataForSEO | Search volume estimates | Estonia; servers in the EU and United States |
| Firecrawl | Fetches public pages from customer websites for audits | United States |
Requests routed through Vercel AI Gateway, OpenRouter and Bright Data reach model providers including Anthropic, OpenAI, Google, DeepSeek, xAI and Perplexity, and some tracked prompts go directly to the OpenAI, Perplexity and Google APIs. Providers receive the request under their own terms. Vercel AI Gateway keeps no prompts or responses after a request completes. OpenRouter does not use inputs or outputs for training and lets us exclude providers that do.
AI model providers — customer-requested tests, reports, and managed-agent analyses
These only receive or supply data when you connect them from a project, and you can disconnect at any time.
| Provider | Purpose | Location |
|---|---|---|
| Search Console and Google Analytics 4 imports | United States | |
| Slack | Running and following agents from Slack | United States |
| Cloudflare | Pulling crawler logs for AI Traffic from your own account | Your Cloudflare account |
We update this page when a provider is added or removed. For how we use data and your rights, see the Privacy Policy.