Lovable: Trust page changed

Trust / securityChanged (not classified) (rule)Changed 2026-10-27 08:58 UTCtrust.lovable.dev

Summary

Lovable added a notice stating its internal review found no impact from PHP vulnerabilities CVE-2026-109618, CVE-2026-109619 and CVE-2026-115560, the LiteLLM 1.107.0 supply-chain compromise, or Brotli vulnerability CVE-2026-111497. The trust page also removed an AIUC-1 certification announcement; this does not establish that the certification itself was withdrawn.

Machine-written from the diff below (Sol; type: other). Check the diff before relying on it.

What changed

~~Struck in red~~ is what Lovable removed; blue is what they added. Muted text is unchanged context.

Added#1

…Opens in new tab Updates View all Security nothing here Security SOC2 Type II released Published ‹date› Hi…

…Opens in new tab Updates View all Security A note on the recent industry security news Published ‹date› Hi all, Lovable has reviewed our systems internally and determined that they are not impacted by the recent industry security incidents and vulnerabilities outlined below. Our review covered the PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619 and CVE-2026-115560), the LiteLLM 1.107.0 supply-chain compromise, the Brotli vulnerability (CVE-2026-111497), the eMudhra/emSign certificate-authority compromise, and the Railway security incident. If you have any additional questions, please reach out to your account executive. Cheers Lovable Security team Read more Read more about A note on the recent industry security news Security SOC2 Type II released Published ‹date› Hi…

Removed#2

…more Read more about Lovable's sub-processor list updated Security Lovable is now AIUC-1 certified Published ‹date› Hi all, We are happy and proud to annouce that Lovable is certified by AIUC-1 Opens in new tab , the leading third-party standard for AI security, safety, and reliability. Lovable is the first coding agent in the world receiving this certification. Please find the full audit report in the Trust Center. Cheers Read more Read more about Lovable is now AIUC-1 certified Opens in new tab Ask Lovable a question…

…more Read more about Lovable's sub-processor list updated removed Opens in new tab Ask Lovable a question…

Compared with the previous archived version (#982 to #8899). Text is normalized before comparing: dates, counters and tokens show as ‹date›, ‹count›, ‹tok›, and noise-only edits are hidden. Rewindex shows changed passages with a few words of context, not a copy of the page. View the live page (opens in new tab).

Archive proof

Rewindex commits each page capture it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Oct 17
Before captured 19:44 UTC
In the 2026-10-17 checkpoint, timestamped by FreeTSA and DigiCert on Oct 19, 23:18 UTC. Record hash a89a09d9e02679e3…
Download proof
Oct 27
After captured 08:58 UTC
In the 2026-10-27 checkpoint, timestamped by DigiCert and FreeTSA on Oct 28, 00:41 UTC. Record hash 2c1304fd4ea44f6d…
Download proof

History of this page

Tuesday, October 27

1 page change

Content changed
08:58Page change
Trust pagechangedthis change
Lovable added a notice stating its internal review found no impact from PHP vulnerabilities CVE-2026-109618, CVE-2026-109619 and CVE-2026-115560, the LiteLLM 1.107.0 supply-chain compromise, or Brotli vulnerability CVE-2026-111497. The trust page also removed an AIUC-1 certification announcement; this does not establish that the certification itself was withdrawn.

Cite this

Trust page changed on Lovable’s Trust page, changed 2026-10-27 08:58 UTC (change 1 of 1).

Title: Trust page changed
Vendor: Lovable
Date: 2026-10-27 08:58 UTC
URL: https://rewindex.com/change/p8899

All Lovable changes Lovable profile Markdown JSON