{"license":"CC BY 4.0","attribution":"AI Dispatch — https://aidispatch.news","methodology":"https://aidispatch.news/methodology","generated_at":"2026-10-08T13:49:14.746Z","entity":{"name":"Lovable","slug":"lovable","type":"agent","subtype":"ai-coding-agents","developer":null,"homepage_url":"https://lovable.dev","summary":null,"description":"Integrates: Connects to Slack, Notion and HubSpot, reachable from Lovable in Telegram.","description_source":"derived_from_fields","url":"https://aidispatch.news/agents/lovable/","published_at":"2026-08-01T17:48:48.617104+00:00","updated_at":"2026-10-08T08:39:29.083202+00:00"},"fields":[{"key":"initiative","label":"Initiative","category":"agency","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"context_window","label":"Context window","category":"models","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"safety_policy","label":"Safety policy","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"indemnification","label":"Indemnification","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"usage_restrictions","label":"Usage restrictions","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"liability_cap","label":"Liability cap","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"settlement_mechanism","label":"Settlement mechanism","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"user_base","label":"User base","category":"impact","status":"present","value":"Millions of builders","not_yet_interpreted":false,"quote":"Millions of builders are already turning ideas into reality","source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"open_weights","label":"Open weights","category":"models","status":"present","value":"Replicate connector gives apps access to thousands of open-source AI models","not_yet_interpreted":false,"quote":"Replicate lets apps run thousands of open-source AI models","source_url":"https://lovable.dev/changelog","retrieved_at":"2026-09-23T22:07:31.690162+00:00","review":null,"superseded_quote":null},{"key":"action_space","label":"Action space","category":"agency","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"price_point","label":"Price point","category":"practicality","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"safety_evaluations","label":"Safety evaluations","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"insurance_carriers","label":"Insurance carriers","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"audit_trail","label":"Audit trail","category":"assurance","status":"present","value":"All publishing events are logged with user attribution","not_yet_interpreted":false,"quote":"Production publishing can require explicit approval, and all publishing events are logged with user attribution.","source_url":"https://lovable.dev/security","retrieved_at":"2026-09-23T22:07:14.67965+00:00","review":null,"superseded_quote":null},{"key":"deployment_scale","label":"Deployment scale","category":"impact","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"tool_use","label":"Tool use","category":"ecosystem","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"model_card","label":"Model or system card","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"dispute_process","label":"Dispute process","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"environment","label":"Operating environment","category":"agency","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"red_teaming","label":"Red teaming","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"coverage_limits","label":"Coverage limits","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"regulatory_alignment","label":"Regulatory alignment","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"fine_tuning","label":"Fine-tuning","category":"models","status":"present","value":"Apps can run the customer's own fine-tuned models.","not_yet_interpreted":false,"quote":"apps powered by your own fine-tuned models","source_url":"https://lovable.dev/changelog","retrieved_at":"2026-09-23T22:07:31.690162+00:00","review":null,"superseded_quote":null},{"key":"autonomy_level","label":"Autonomy level","category":"agency","status":"present","value":"An AI agent can automatically resolve non-breaking security scan findings when auto-fix is enabled by workspace admins","not_yet_interpreted":false,"quote":"Workspace admins can enable auto-fix to let the agent resolve non-breaking findings during basic scans","source_url":"https://lovable.dev/security","retrieved_at":"2026-09-23T22:07:14.67965+00:00","review":null,"superseded_quote":null},{"key":"high_risk_domains","label":"High-risk domains","category":"impact","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"third_party_evals","label":"Third-party evaluations","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"explainability","label":"Explainability","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"eval_coverage","label":"Evaluation coverage","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"support_model","label":"Support model","category":"practicality","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"multi_agent","label":"Multi-agent","category":"ecosystem","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"incident_reporting","label":"Incident reporting","category":"safety","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"audit_trail_immutable","label":"Tamper-evident log","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"sla_terms","label":"SLA terms","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"outcome_based_pricing","label":"Outcome-based pricing","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"model_provider","label":"Model provider","category":"models","status":"present","value":"Google is a model provider (Gemini) for app AI features","not_yet_interpreted":false,"quote":"Gemini 3.7 Flash is now the default model","source_url":"https://lovable.dev/changelog","retrieved_at":"2026-09-23T22:07:31.690162+00:00","review":null,"superseded_quote":null},{"key":"human_oversight","label":"Human oversight","category":"agency","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"documented_incidents","label":"Documented incidents","category":"impact","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"open_source","label":"Open source","category":"ecosystem","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"marketplace_presence","label":"Marketplace presence","category":"ecosystem","status":"present","value":"Listed on the Slack App Marketplace","not_yet_interpreted":false,"quote":"installs Lovable from the Slack Marketplace","source_url":"https://lovable.dev/changelog","retrieved_at":"2026-09-23T22:07:31.690162+00:00","review":null,"superseded_quote":null},{"key":"model_swappable","label":"Model swappable","category":"models","status":"present","value":"Apps can specify their own model instead of the Lovable default","not_yet_interpreted":false,"quote":"Apps that already specify a model are unaffected","source_url":"https://lovable.dev/changelog","retrieved_at":"2026-09-23T22:07:31.690162+00:00","review":null,"superseded_quote":null},{"key":"goal_complexity","label":"Goal complexity","category":"agency","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"insurance_available","label":"Insurance available","category":"assurance","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"compliance_certs","label":"Compliance certifications","category":"assurance","status":"present","value":"Supports SOC 2 and GDPR requirements; provides security documentation and data protection agreements for enterprise review","not_yet_interpreted":false,"quote":"Lovable supports SOC 2 and GDPR requirements and provides security documentation and data protection agreements for enterprise review.","source_url":"https://lovable.dev/security","retrieved_at":"2026-09-23T22:07:14.67965+00:00","review":null,"superseded_quote":null},{"key":"data_handling","label":"Data handling","category":"safety","status":"present","value":"Customer data resides in the region selected (EU, US, or Asia Pacific) and does not move across regions by default","not_yet_interpreted":false,"quote":"Customer data is hosted in Lovable Cloud in supported regions including the EU, US, and Asia Pacific. Data residency is region-specific and does not move across regions by default.","source_url":"https://lovable.dev/security","retrieved_at":"2026-09-23T22:07:14.67965+00:00","review":null,"superseded_quote":null},{"key":"permission_scopes","label":"Permission scopes","category":"assurance","status":"present","value":"Role-based, server-side-enforced permissions across viewing, editing, approving, and publishing","not_yet_interpreted":false,"quote":"Permissions are role-based and enforced server-side across viewing, editing, approving, and publishing.","source_url":"https://lovable.dev/security","retrieved_at":"2026-09-23T22:07:14.67965+00:00","review":null,"superseded_quote":null},{"key":"supported_regions","label":"Supported regions","category":"practicality","status":"present","value":"Regional data hosting available in the EU, US, and Asia Pacific","not_yet_interpreted":false,"quote":"Lovable Cloud supports regional data hosting in the EU, US, and Asia Pacific.","source_url":"https://lovable.dev/security","retrieved_at":"2026-09-23T22:07:14.67965+00:00","review":null,"superseded_quote":null},{"key":"runtime_governance","label":"Runtime governance","category":"assurance","status":"present","value":"Workspace admins can block publishing on critical security-scan findings.","not_yet_interpreted":false,"quote":"Workspace admins can enable auto-fix to let the agent resolve non-breaking findings during basic scans, and can block publishing on critical findings.","source_url":"https://lovable.dev/security","retrieved_at":"2026-09-23T22:07:14.67965+00:00","review":null,"superseded_quote":null},{"key":"availability","label":"Availability","category":"practicality","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"pricing_model","label":"Pricing model","category":"practicality","status":"present","value":"Charged per request against the owning workspace's Run credits.","not_yet_interpreted":false,"quote":"Lovable charges each request to the workspace that owns the project, under Run credits.","source_url":"https://lovable.dev/changelog","retrieved_at":"2026-09-23T22:07:31.690162+00:00","review":null,"superseded_quote":null},{"key":"base_models","label":"Base models","category":"models","status":"present","value":"App AI features default to Gemini 3.7 Flash","not_yet_interpreted":false,"quote":"Gemini 3.7 Flash is now the default model","source_url":"https://lovable.dev/changelog","retrieved_at":"2026-09-23T22:07:31.690162+00:00","review":null,"superseded_quote":null},{"key":"api_access","label":"API access","category":"ecosystem","status":"present","value":"A Lovable API collection is published in the Postman API Network.","not_yet_interpreted":false,"quote":"The Lovable API collection is now in the Postman API Network.","source_url":"https://lovable.dev/changelog","retrieved_at":"2026-09-23T22:07:31.690162+00:00","review":null,"superseded_quote":null},{"key":"protocols_supported","label":"Protocols supported","category":"ecosystem","status":"present","value":"Runs an MCP server that works with locally-run MCP clients supporting OAuth.","not_yet_interpreted":false,"quote":"The Lovable MCP server now works with any MCP client that runs on your computer and supports OAuth.","source_url":"https://lovable.dev/changelog","retrieved_at":"2026-09-23T22:07:31.690162+00:00","review":null,"superseded_quote":null},{"key":"integrations","label":"Integrations","category":"practicality","status":"present","value":"Connects to Slack, Notion and HubSpot, reachable from Lovable in Telegram.","not_yet_interpreted":false,"quote":"Lovable in Telegram can now work in your connected tools, such as Slack, Notion, or HubSpot","source_url":"https://lovable.dev/changelog","retrieved_at":"2026-09-23T22:07:31.690162+00:00","review":null,"superseded_quote":null},{"key":"deployment_options","label":"Deployment options","category":"practicality","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null},{"key":"target_sectors","label":"Target sectors","category":"impact","status":"no_public_information","value":null,"not_yet_interpreted":false,"quote":null,"source_url":"https://lovable.dev","retrieved_at":"2026-08-04T21:30:12.06099+00:00","review":null,"superseded_quote":null}],"trust_gap_scores":[{"dimension":"runtime_governance","score":2,"rationale":"Permissions are role-based and enforced server-side across viewing, editing, approving and publishing, and workspace admins can block publishing on critical security-scan findings. That is authority enforced at run time, stated on the vendor's own /security page. Not 3: no spend cap, no limit on the agent's own action scope, and no customer-configurable authority ceiling is published.","rubric_version":"v1","scored_by":"fact-checker-2026-10-08","judged":true,"scored_at":"2026-10-08T08:38:53.736993+00:00","superseded_scores":[{"score":2,"rationale":"Scored from 2 evidenced field(s): runtime_governance, permission_scopes. Automated score; capped at 2 pending review.","rubric_version":"v1-auto","scored_by":"spark-verifier","judged":false,"scored_at":"2026-09-24T08:00:00.129336+00:00"}],"rests_on_flagged_absence":null,"evidence_newer_than_judgement":null},{"dimension":"audit_trail","score":1,"rationale":"All publishing events are logged with user attribution, so a record of consequential actions exists. Not 2 or 3: nothing is published about tamper-evidence, hash-chaining, retention, or customer review or export of that log. Scored 1 and therefore a trust gap.","rubric_version":"v1","scored_by":"fact-checker-2026-10-08","judged":true,"scored_at":"2026-10-08T08:38:53.736993+00:00","superseded_scores":[{"score":1,"rationale":"Scored from 1 evidenced field(s): audit_trail. Automated score; capped at 2 pending review.","rubric_version":"v1-auto","scored_by":"spark-verifier","judged":false,"scored_at":"2026-09-24T08:00:00.129336+00:00"}],"rests_on_flagged_absence":null,"evidence_newer_than_judgement":null},{"dimension":"compliance","score":1,"rationale":"The /security page states Lovable \"supports SOC 2 and GDPR requirements\" and provides security documentation and data protection agreements for enterprise review. That is a support claim, not a certification: no certificate, auditor, report date or audit scope is published. Scored 1 and deliberately not read as certified - the hedge in the vendor's own wording is the finding.","rubric_version":"v1","scored_by":"fact-checker-2026-10-08","judged":true,"scored_at":"2026-10-08T08:38:53.736993+00:00","superseded_scores":[{"score":1,"rationale":"Scored from 1 evidenced field(s): compliance_certs. Automated score; capped at 2 pending review.","rubric_version":"v1-auto","scored_by":"spark-verifier","judged":false,"scored_at":"2026-09-24T08:00:00.129336+00:00"}],"rests_on_flagged_absence":null,"evidence_newer_than_judgement":null},{"dimension":"outcome_settlement","score":0,"rationale":"An evidenced zero rather than an absence: the changelog states each request is charged to the workspace that owns the project under Run credits, so payment is per usage regardless of result, which is rubric 0 as written. No escrow, milestone release or clawback on failure is published.","rubric_version":"v1","scored_by":"fact-checker-2026-10-08","judged":true,"scored_at":"2026-10-08T08:38:53.736993+00:00","superseded_scores":null,"rests_on_flagged_absence":null,"evidence_newer_than_judgement":null},{"dimension":"insurance_indemnity","score":0,"rationale":"No public evidence found. insurance_available, insurance_carriers, coverage_limits and indemnification are all recorded no_public_information against the captured pages. Reported as a finding, not as a gap in our checking.","rubric_version":"v1","scored_by":"fact-checker-2026-10-08","judged":true,"scored_at":"2026-10-08T08:38:53.736993+00:00","superseded_scores":[{"score":0,"rationale":"No public information on 4 evidenced field(s): insurance_available, insurance_carriers, coverage_limits, indemnification. Checked against 7 captured page(s); none mentions this dimension. Automated score; absence recorded as 0.","rubric_version":"v1-auto","scored_by":"spark-verifier","judged":false,"scored_at":"2026-09-25T20:00:00.169834+00:00"}],"rests_on_flagged_absence":null,"evidence_newer_than_judgement":null}]}