Identity & Access
Email/password and Google sign-in via Lovable Cloud. Leaked-password protection enabled. Session control and global sign-out are available in member settings.
Trust
Infrastructure of silence.
This page is maintained by Quantus Pulse to answer common security and privacy questions about the platform. It describes current, enabled controls — it is not a certification.
Data Posture
All member-facing tables enforce row-level security. Role checks use a dedicated security-definer function. The Data API is granted only to the roles each policy permits.
Encryption
Data is encrypted at rest and in transit by the underlying Lovable Cloud platform. Sensitive vault material is namespaced per principal and never co-mingled.
Operational Controls
Edge functions validate JWTs in-code and enforce typed input validation. Brute-force protection lockouts apply to authentication endpoints.
Shared Responsibility
Quantus Pulse owns app-layer controls and operational practices. Lovable Cloud provides the underlying database, auth, storage, and functions infrastructure. Members are responsible for credential hygiene and device security.
Read our full Compliance Policies.