Are connections to other systems necessary? If yes, which systems and using which protocols?

Outbound: Analytics provider (Clarity, Mixpanel, or similar, sensitive data is anonymized in the browser before transmission, audit trail available for client verification), transmitted exclusively via TLS from the browser.