Sub-processors
We use a small number of carefully chosen providers to run FoodSafe Formulate. Each is bound by data protection terms at least as protective as our own.
Last updated: 14 October 2026
01Hosting, database and authentication
Lovable Cloud (with its underlying infrastructure provider) — application database, file storage, sign-in and backups. Purpose: core hosting of Customer Data.
02Application delivery
Cloudflare — global edge hosting, content delivery and protection against attacks. Purpose: serving the application securely.
03Payments
Stripe Payments UK Ltd / Stripe, Inc. — subscription billing, invoices, customer portal and card processing. Purpose: taking payments. Stripe is an independent controller for some payment data under its own privacy policy.
04AI drafting
Lovable AI Gateway and the large-language-model providers it routes to (such as Google and OpenAI). Purpose: producing draft text such as product descriptions on request. Only the content needed for the draft is sent; outputs remain drafts until approved by a person.
05Email
Resend (Plus Five Five, Inc.) — delivery of sign-in links, password resets, invitations and service notices. Purpose: sending account and service emails. Only the recipient address and the message content are shared.
06Changes
We will update this page and give customers at least 30 days' notice of new sub-processors. To be notified or to object, email privacy@foodsafeformulate.co.uk.
These documents are provided for information about how FoodSafe Formulate operates. They do not constitute legal advice to you.