Security, from the facts already on this site

This page repeats only what HAVGATE already states about how the product is hosted and protected. It does not add a certification, a region or a control that is not written down elsewhere on the site.

Where the company is, and where the data are

HAVGATE is a Swiss company: CHE-348.223.043, Utigenstrasse 7, Central Switzerland, contact@havgate.com, +41 41 534 68 61. The data-security page states that the application runs on Lovable Cloud and Supabase, on AWS, and that stored data are encrypted with AES-256. Connections use TLS 1.3. The same page's sub-processor table lists Lovable Cloud as EU / US, Supabase as US, and AWS as US. That table is not a statement that QMS data sit in Switzerland. Do not describe the hosting region as Switzerland.

Backups, access and model training

• The data-security page states automatic daily backups with point-in-time recovery, and encrypted backups.
• It states two-factor authentication with TOTP authenticator apps.
• It states that customer content is not used to train AI models.
• The audit product page states 99.9% uptime. That sentence lives there. It is not a separate certificate.

What belongs to the hosts, not to HAVGATE

The data-security page links host attestations and lists SOC 2 Type II, ISO/IEC 27001 and GDPR among the programmes of Supabase or AWS. Those are the hosts' programmes. HAVGATE does not claim its own SOC 2 report or its own ISO 27001 certificate on that page. Copy the sentence with the host's name attached, or do not copy it.

The longer designed page, including the shared-responsibility table, is /data-security. This URL is the short public summary for startups writing a supplier questionnaire.