| Party | Function | Data reaching it | Region | Status |
|---|---|---|---|---|
| Lovable (hosting and platform) | Website delivery, server-side application logic, deployment, platform logs | Request metadata, session tokens, request and response bodies, error text | Undisclosed | Not verified |
| Supabase (via Lovable Cloud) | Database, authentication, document storage | All governed content, credentials, uploaded documents | AWS eu-west-1 (Ireland) | Partly verified |
| AWS | Underlying infrastructure for the database, auth and storage | As above | Ireland | Verified |
| Lovable AI Gateway | Routing of AI requests | Document text, claim text, retrieved passages | Undisclosed | Not verified |
| Model provider behind the configured alias | Inference | Document text, claim text, retrieved passages | Undisclosed | Not verified |
| Brave Search | Discovery of candidate sources | Claim-derived query strings | Undisclosed | Not verified |
| Original source websites | Passage retrieval | Server-side HTTP request originating from KLARMASS | Wherever the source is hosted | Varies by source |
| IONOS | Domains, DNS, mailboxes | Email sent to KLARMASS addresses, DNS queries | Germany (mail); DNS anycast | Partly verified |
| Sender of account emails | Confirmation and password-reset messages | Email address, one-time links | Undisclosed | Not verified |
Where region, contract status or provider identity is shown as not verified, no public statement about that element may be derived. This register is updated as verification progresses.