Last updated: 23 June 2026
Security & Platform
This page is maintained by Vakmeister and describes the security and hosting measures surrounding the Vakmeister platform. Our backend runs on Lovable Cloud, a managed platform that uses Supabase and Cloudflare. This page is a factual description of our setup, not an independent certification.
Hosted on Lovable Cloud
Vakmeister runs on Lovable Cloud, Lovable's managed platform. The underlying infrastructure consists of Supabase (database, authentication, storage) and Cloudflare (edge hosting & network). Both providers are used by thousands of businesses worldwide.
Data in the EU
Our database and file storage run by default in a European data center (EU/EEA region). Transfers outside the EEA only take place with appropriate safeguards such as the EU Standard Contractual Clauses.
Encryption in transit and at rest
All traffic runs via TLS 1.2+. Data in the database and in storage buckets is encrypted at rest. Passwords are never stored, only secure hashes.
Daily backups
The database is automatically backed up daily by the platform, with point-in-time recovery within the provider's retention period. File storage is stored redundantly.
Access & roles
Access to production is only open to specifically authorized Vakmeister employees via two-factor authentication. Within the Platform, role-based access (RBAC) and row-level security per customer account apply.
Monitoring & incidents
We monitor availability, errors and suspicious traffic. In the event of a (suspected) data breach, we follow the GDPR procedure: notifying the Dutch Data Protection Authority within 72 hours and, where required, affected individuals.
Main sub-processors
Vakmeister engages a limited number of sub-processors to deliver the service. We enter into a data processing agreement with all of these parties.
- Lovable - managed hosting & platform (Lovable Cloud).
- Supabase - database, authentication and file storage (EU region), used via Lovable Cloud.
- Cloudflare - edge hosting, CDN and DDoS protection, used via Lovable Cloud.
- E-mail, payment and support tools - an up-to-date overview is available on request via support@vakmeister.nl.
Shared responsibility
Security is a shared responsibility. Lovable, Supabase and Cloudflare secure the underlying infrastructure. Vakmeister configures the platform, manages access and determines how data is processed. As a customer, you are responsible for strong passwords, managing users within your own account and the content you place on the Platform.
Certifications
Vakmeister itself does not (yet) hold a formal ISO 27001 or SOC 2 certification. The underlying suppliers publish their own compliance documentation, which you can request via support@vakmeister.nl or directly from Lovable, Supabase and Cloudflare. We are transparent: if a claim is not listed here, we do not make it.
Reporting a vulnerability
Think you have found a security issue? Please e-mail us as soon as possible at support@vakmeister.nl with a description and steps to reproduce. We respond within 5 business days. We ask that you do not disclose the issue publicly before we have had a chance to fix it (responsible disclosure).
Read more
See also our privacy statement and the terms and conditions.