Trust center

Security and compliance facts in one place. We hold no SOC 2 or ISO 27001 certification.

Last updated: October 19, 2026

Hosting

AI-Primed's website, server code, database, authentication and email delivery are provided by Lovable Cloud. See Lovable's trust documentation. Storage region: US East (Lovable Cloud / AWS / Cloudflare).

Encryption

  • In transit: the site and backend are served only over HTTPS (TLS).
  • At rest: AES-256 standard encryption for stored databases and backups.

Authentication and access controls

  • Sign-in is handled by Lovable Cloud authentication; passwords are hashed, never stored in plain text.
  • Database row-level rules keep each customer's projects and audits private to their account.
  • Admin screens require a separately stored admin role, checked on the server.
  • Internal access: Only accounts holding the admin role can use admin screens, checked on the server; named staff and access logging: Not yet documented.

Sub-processors

  • Hosting: Lovable (Lovable Cloud)
  • Database: Lovable Cloud
  • Email delivery: Lovable Cloud email (sender domain notify.ai-primed.com)
  • Payments: Stripe
  • Error monitoring: None — errors are recorded in our own database, with web addresses, emails and quoted text stripped first
  • Analytics: No new processor — consent-based anonymous product events and consent proof stay in our existing Lovable Cloud database

Data retention

Deleting an account starts a 30-day grace period, after which its data is purged; billing and deletion records are kept as required by law. AI agent visit records store only agent name, path and time. Specific retention periods are listed in the Privacy Policy.

Documents

Version 1.0 — effective October 19, 2026.