Flows360 uses third-party providers to operate and support the service. A provider is listed here where it acts as a subprocessor of Customer Personal Data.
Current verified subprocessor
Lovable
Purpose: Application development, platform infrastructure and related hosting/service capabilities used by Flows360.
Data: Customer or application data processed through relevant Lovable services, depending on Flows360 configuration.
Role: Subprocessor where Lovable processes Customer Personal Data on behalf of Flows360.
Safeguards: Contractual data-processing protections under Lovable's Data Processing Agreement and applicable international-transfer safeguards.
Lovable states that it maintains SOC 2 Type II and ISO 27001:2022 compliance/certification controls and GDPR-related contractual protections.
Other infrastructure providers
Additional providers will be listed once confirmed to actually process Customer Personal Data as Flows360 subprocessors. A software dependency is not automatically a subprocessor merely because it is present in the software.