Snapshot 164411
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Lovable's Trust Center At Lovable, security isn't just a feature, it's foundational to everything we build. Our security-first mindset drives our development processes, infrastructure decisions, and organizational policies. We treat the data entrusted to us, whether from our customers, their end users, or anyone who interacts with our organization - with the utmost care and responsibility. Security is embedded in our DNA, enabling us to deliver innovative solutions without compromising on protection. security@lovable.dev Privacy PolicyOpens in new tab Compliance SOC 2 Type II AIUC-1 SOC 2 Type I ISO 27001:2022 GDPR Resources View all Certifications AIUC-1 Certification - Audit Report - 2026 SOC 2 Type I - 2026 SOC 2 Type II Privacy Privacy Policy Opens in new tab Data Processing Agreement Opens in new tab Transfer Impact Assessment Connectors Explainer Opens in new tab Security papers Product Security Brief Opens in new tab Secure Your App Opens in new tab Lovable Security Whitepaper Controls View all Infrastructure security Production inventory maintained Continuity and Disaster Recovery plans established Configuration management View 1 more Infrastructure security control Data and Privacy Data protection assessment Key management implemented Data retention procedures established View 4 more Data and Privacy controls Internal Security Procedures Incident management procedures followed Third-party agreements established Vendor management program established View 3 more Internal Security Procedures controls Risk & Compliance Management Management review process Risks assessments performed Risk management program established View 1 more Risk & Compliance Management control Product security External support resources available Service description communicated Company commitments externally communicated View 1 more Product security control IT & Operational Security Data backup and recovery policy Security policies and procedures Information access restriction View 2 more IT & Operational Security controls Subprocessors View all Google Cloud Platform • Customer applications, databases and platform infrastructure. Services: Google Kubernetes Engine, Cloud Run, Spanner, Cloud KMS, Vertex AI EU (Netherlands, europe-west4) https://cloud.google.comOpens in new tab Amazon Web Services • Customer applications, databases, file storage and AI model inference. Services: S3, SES, Bedrock UK (London, eu-west-2) for storage, cache and secrets. US (Oregon, us-west-2) for Bedrock. https://aws.amazon.com/Opens in new tab Microsoft (Azure AI Foundry) • AI model inference for the AI Gateway EU: West Europe, France Central, Germany West Central. US: East US 2, West US 3, South Central US https://ai.azure.comOpens in new tab Supabase • Customer databases, user authentication data EU (by default) https://supabase.com/Opens in new tab Updates View all Security A note on the recent industry security news Published October 27, 2026 Hi all, Lovable has reviewed our systems internally and determined that they are not impacted by the recent industry security incidents and vulnerabilities outlined below. Our review covered the PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619 and CVE-2026-115560), the LiteLLM 1.107.0 supply-chain compromise, the Brotli vulnerability (CVE-2026-111497), the eMudhra/emSign certificate-authority compromise, and the Railway security incident. If you have any additional questions, please reach out to your account executive. Cheers Lovable Security team Security SOC2 Type II released Published October 5, 2026 Hi all, We're pleased to share that Lovable has completed its SOC 2 Type II audit, covering the observation period from February 1 to August 1, 2026. The report is available on our Trust Center upon request. The report was issued with no exceptions noted. Security is foundational to what we build, and we're grateful for your trust. If you have questions about the report or our security program, reach out to security@lovable.dev. Thanks, The Lovable Security Team General Sub-processor list update Published October 2, 2026 Hi everyone, We have some updates for you; Lovable's sub-processor list has been reviewed and updated. We reviewed how customer data moves through Lovable and updated this list to match. We added providers that were already supporting the service but were not yet listed here, and corrected the purpose, location or link on a few existing entries. No new processing has started as a result of this update. Please reach out to privacy@lovable.dev if you have any questions. Best Lovable Security & Privacy teams Compliance Lovable's sub-processor list updated Published August 20, 2026 Hey there! 👋 Quick update from the Lovable Trust Center: we've refreshed our sub-processor list! Head over to the Trust Center to see the latest lineup of sub-processors we work with. As always, if you have questions about any of the changes, our team is just a message away. Thank you for the trust! //Amir Lovable Security Team Read more about Sub-processor list update Lovable's Trust Center At Lovable, security isn't just a feature, it's foundational to everything we build. Our security-first mindset drives our development processes, infrastructure decisions, and organizational policies. We treat the data entrusted to us, whether from our customers, their end users, or anyone who interacts with our organization - with the utmost care and responsibility. Security is embedded in our DNA, enabling us to deliver innovative solutions without compromising on protection. security@lovable.dev Privacy PolicyOpens in new tab Compliance SOC 2 Type II AIUC-1 SOC 2 Type I ISO 27001:2022 GDPR Resources View all Certifications AIUC-1 Certification - Audit Report - 2026 SOC 2 Type I - 2026 SOC 2 Type II Privacy Privacy Policy Opens in new tab Data Processing Agreement Opens in new tab Transfer Impact Assessment Connectors Explainer Opens in new tab Security papers Product Security Brief Opens in new tab Secure Your App Opens in new tab Lovable Security Whitepaper Controls View all Infrastructure security Production inventory maintained Continuity and Disaster Recovery plans established Configuration management View 1 more Infrastructure security control Data and Privacy Data protection assessment Key management implemented Data retention procedures established View 4 more Data and Privacy controls Internal Security Procedures Incident management procedures followed Third-party agreements established Vendor management program established View 3 more Internal Security Procedures controls Risk & Compliance Management Management review process Risks assessments performed Risk management program established View 1 more Risk & Compliance Management control Product security External support resources available Service description communicated Company commitments externally communicated View 1 more Product security control IT & Operational Security Data backup and recovery policy Security policies and procedures Information access restriction View 2 more IT & Operational Security controls Subprocessors View all Google Cloud Platform • Customer applications, databases and platform infrastructure. Services: Google Kubernetes Engine, Cloud Run, Spanner, Cloud KMS, Vertex AI EU (Netherlands, europe-west4) https://cloud.google.comOpens in new tab Amazon Web Services • Customer applications, databases, file storage and AI model inference. Services: S3, SES, Bedrock UK (London, eu-west-2) for storage, cache and secrets. US (Oregon, us-west-2) for Bedrock. https://aws.amazon.com/Opens in new tab Microsoft (Azure AI Foundry) • AI model inference for the AI Gateway EU: West Europe, France Central, Germany West Central. US: East US 2, West US 3, South Central US https://ai.azure.comOpens in new tab Supabase • Customer databases, user authentication data EU (by default) https://supabase.com/Opens in new tab Updates View all Security A note on the recent industry security news Published October 27, 2026 Hi all, Lovable has reviewed our systems internally and determined that they are not impacted by the recent industry security incidents and vulnerabilities outlined below. Our review covered the PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619 and CVE-2026-115560), the LiteLLM 1.107.0 supply-chain compromise, the Brotli vulnerability (CVE-2026-111497), the eMudhra/emSign certificate-authority compromise, and the Railway security incident. If you have any additional questions, please reach out to your account executive. Cheers Lovable Security team Security SOC2 Type II released Published October 5, 2026 Hi all, We're pleased to share that Lovable has completed its SOC 2 Type II audit, covering the observation period from February 1 to August 1, 2026. The report is available on our Trust Center upon request. The report was issued with no exceptions noted. Security is foundational to what we build, and we're grateful for your trust. If you have questions about the report or our security program, reach out to security@lovable.dev. Thanks, The Lovable Security Team General Sub-processor list update Published October 2, 2026 Hi everyone, We have some updates for you; Lovable's sub-processor list has been reviewed and updated. We reviewed how customer data moves through Lovable and updated this list to match. We added providers that were already supporting the service but were not yet listed here, and corrected the purpose, location or link on a few existing entries. No new processing has started as a result of this update. Please reach out to privacy@lovable.dev if you have any questions. Best Lovable Security & Privacy teams Compliance Lovable's sub-processor list updated Published August 20, 2026 Hey there! 👋 Quick update from the Lovable Trust Center: we've refreshed our sub-processor list! Head over to the Trust Center to see the latest lineup of sub-processors we work with. As always, if you have questions about any of the changes, our team is just a message away. Thank you for the trust! //Amir Lovable Security Team Read more about Lovable's sub-processor list updated Lovable's Trust Center At Lovable, security isn't just a feature, it's foundational to everything we build. Our security-first mindset drives our development processes, infrastructure decisions, and organizational policies. We treat the data entrusted to us, whether from our customers, their end users, or anyone who interacts with our organization - with the utmost care and responsibility. Security is embedded in our DNA, enabling us to deliver innovative solutions without compromising on protection. security@lovable.dev Privacy PolicyOpens in new tab Compliance SOC 2 Type II AIUC-1 SOC 2 Type I ISO 27001:2022 GDPR Resources View all Certifications AIUC-1 Certification - Audit Report - 2026 SOC 2 Type I - 2026 SOC 2 Type II Privacy Privacy Policy Opens in new tab Data Processing Agreement Opens in new tab Transfer Impact Assessment Connectors Explainer Opens in new tab Security papers Product Security Brief Opens in new tab Secure Your App Opens in new tab Lovable Security Whitepaper Controls View all Infrastructure security Production inventory maintained Continuity and Disaster Recovery plans established Configuration management View 1 more Infrastructure security control Data and Privacy Data protection assessment Key management implemented Data retention procedures established View 4 more Data and Privacy controls Internal Security Procedures Incident management procedures followed Third-party agreements established Vendor management program established View 3 more Internal Security Procedures controls Risk & Compliance Management Management review process Risks assessments performed Risk management program established View 1 more Risk & Compliance Management control Product security External support resources available Service description communicated Company commitments externally communicated View 1 more Product security control IT & Operational Security Data backup and recovery policy Security policies and procedures Information access restriction View 2 more IT & Operational Security controls Subprocessors View all Google Cloud Platform • Customer applications, databases and platform infrastructure. Services: Google Kubernetes Engine, Cloud Run, Spanner, Cloud KMS, Vertex AI EU (Netherlands, europe-west4) https://cloud.google.comOpens in new tab Amazon Web Services • Customer applications, databases, file storage and AI model inference. Services: S3, SES, Bedrock UK (London, eu-west-2) for storage, cache and secrets. US (Oregon, us-west-2) for Bedrock. https://aws.amazon.com/Opens in new tab Microsoft (Azure AI Foundry) • AI model inference for the AI Gateway EU: West Europe, France Central, Germany West Central. US: East US 2, West US 3, South Central US https://ai.azure.comOpens in new tab Supabase • Customer databases, user authentication data EU (by default) https://supabase.com/Opens in new tab Updates View all Security A note on the recent industry security news Published October 27, 2026 Hi all, Lovable has reviewed our systems internally and determined that they are not impacted by the recent industry security incidents and vulnerabilities outlined below. Our review covered the PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619 and CVE-2026-115560), the LiteLLM 1.107.0 supply-chain compromise, the Brotli vulnerability (CVE-2026-111497), the eMudhra/emSign certificate-authority compromise, and the Railway security incident. If you have any additional questions, please reach out to your account executive. Cheers Lovable Security team Security SOC2 Type II released Published October 5, 2026 Hi all, We're pleased to share that Lovable has completed its SOC 2 Type II audit, covering the observation period from February 1 to August 1, 2026. The report is available on our Trust Center upon request. The report was issued with no exceptions noted. Security is foundational to what we build, and we're grateful for your trust. If you have questions about the report or our security program, reach out to security@lovable.dev. Thanks, The Lovable Security Team General Sub-processor list update Published October 2, 2026 Hi everyone, We have some updates for you; Lovable's sub-processor list has been reviewed and updated. We reviewed how customer data moves through Lovable and updated this list to match. We added providers that were already supporting the service but were not yet listed here, and corrected the purpose, location or link on a few existing entries. No new processing has started as a result of this update. Please reach out to privacy@lovable.dev if you have any questions. Best Lovable Security & Privacy teams Compliance Lovable's sub-processor list updated Published August 20, 2026 Hey there! 👋 Quick update from the Lovable Trust Center: we've refreshed our sub-processor list! Head over to the Trust Center to see the latest lineup of sub-processors we work with. As always, if you have questions about any of the changes, our team is just a message away. Thank you for the trust! //Amir Lovable Security Team