Current sub-processors
| Provider | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Lovable Cloud (Supabase) | Hosting, database, authentication, file storage | European Union | Intra-EEA processing; encryption at rest and in transit |
| Cloudflare | Edge delivery, DDoS protection | Global edge network | UK IDTA / EU SCCs where applicable |
| Lovable AI Gateway | AI inference for guidance, generation and analysis features | European Union and United States | UK IDTA / EU SCCs; no model training on Customer Data |
| Stripe Payments Europe Ltd | Billing, invoicing, VAT handling | Ireland | Intra-EEA processing |
Notification of changes
We notify customers in advance of new sub-processors via in-product announcement and email. Customers may object on reasonable data-protection grounds during the notice period.