Lovable is a Swedish vibe coding platform and company. Founded in Stockholm in 2023, it provides software that allows users to enter prompts to automate software development.
Summary from Wikipedia.
Publicly advertised compliance posture
As observed on September 8, 2026 on the organization’s public trust center.
-
SOC 2
Independent CPA audit of controls for security, availability, and confidentiality.
-
ISO 27001
International standard for an information security management system, certified by accredited bodies.
-
GDPR
Public claim of alignment with the EU General Data Protection Regulation.
Compliance timeline
-
2023
Company founded
-
September 2025
Trust center first observed in public web archives
-
September 8, 2026
Posture last observed by Trust Index
Roughly 2 years elapsed between founding and the earliest archived capture of a public trust center. Archive coverage is incomplete, so the page may have existed earlier.
Subprocessors
Third parties Lovable discloses on its trust center. Linked entries have their own profile in the Trust Index.
45% chain trust: 13 of 29 disclosed subprocessors are themselves in the Trust Index.
- Google Cloud Platform Customer applications and databases
- Cloudflare Edge routing, DNS & Workers
- Anthropic (Claude) Customer prompts, generated code, AI interactions
- Amazon Web Services Customer applications, databases, file storage
- Whitecircle.ai Safety and Security
- Stripe Payment processing
- Braintrust Observability and Quality
- Customer.io Customer engagement
- OpenRouter LLM inference routing
- OpenAI Customer prompts, generated code, AI interactions
- Google Gemini Customer AI prompts and responses
- Posthog Data analytics
- HubSpot Marketing & CRM
- Supabase Customer databases, user authentication data
- Rudderstack Customer analytics and usage data
- ClickHouse Customer analytics and usage data
- GitHub Code Repository
- Browserbase Customer projects
- Vercel Deployment backend for customer apps
- Hex Customer & Platform analytics
- Castle.io Data analytics and fraud detection
- Grafana Log/trace/metrics storage
- Mailgun Transactional email, email domain management
- Intercom Customer support communications
- Sentry Performance monitoring
- Turbopuffer Indexing customer data to power search
- TanStack Application stack for customer apps
- Pierre Customer Code Repository
- ElevenLabs Speech-to-text, text-to-speech, and music generation for voice and audio features
About this data
The Trust Index reports only what organizations publicly advertise. A missing framework here means no public claim was observed as of September 8, 2026; it never means an organization is non-compliant. HIPAA entries reflect a public claim of compliance; no HIPAA certification exists. Corrections are welcome and verified against public evidence. Read the full methodology.
