Security & privacy

This page is maintained by Anstella and answers common questions about security and privacy in the service. It is not an independent certification or audit — it describes what is enabled in the application today.

Access & authentication

Anstella is a public tool and requires no sign-in to calculate employer cost or market salary. Administrative endpoints (e.g. the salary cache prewarm) are protected by a server-only secret and are not reachable from the browser.

Platform & hosting

The service runs on Lovable Cloud. Backend, database and edge functions run in the EU. Traffic is encrypted with TLS in transit and the database is encrypted at rest by the platform provider. Anstella is responsible for the application code and configuration; Lovable is responsible for the underlying platform.

Data we collect

No personal data. Anstella has no forms for email or contact details, and all calculations run in your browser. Our platform provider may temporarily log IP and request metadata for operational and security purposes.

Subprocessors & data sources

• Lovable Cloud (hosting, database, edge functions) – EU.
• Statistics Sweden (SCB) – public PxWeb API for salary statistics. No personal data is sent to SCB.

Cookies & analytics

Only strictly necessary cookies are set by default. Other cookies (e.g. analytics or advertising) are only set after you actively opt in.

Reporting & security contact

Think you found a vulnerability or security issue? Reach out and we will get back to you. Please include a description and steps to reproduce.

What this page does not claim

This page is not a certificate or audit report. We make no claims of SOC 2, ISO 27001, GDPR compliance or other formal frameworks without separate documentation.