01Compliance
SOC 2 Type II in progress · GDPR · CCPA · DPF certified.
02Sub-processors
Cloudflare, Lovable Cloud (Supabase), Stripe, Lovable AI Gateway. Updated quarterly.
03Data residency
EU and US regions. Choose at workspace creation; never silently moved.
04Incident response
Status incidents published within 30 minutes. Postmortem within 5 business days.