Blog · 9 Oct 2026 · Chandra

Lovable to production: a 12-point launch checklist.

An AI-built app that works in preview can still fail on launch day. These are the twelve things we check first when a founder asks us to make their app production-ready.

Security

Row-level security on every table. Run the 60-second RLS check.
No secret keys in the browser. Service-role keys, payment secret keys and third-party API keys belong in server-side functions.
Rate limits on anything that sends email, SMS or calls an AI model, or a bot will run up your bill overnight.

Sign-in and payments

Auth redirect URLs set for your real domain. Email links and Google sign-in that work in preview often break on the custom domain until it is added to your auth provider’s allowed URLs.
Payment webhooks verified. Confirm every Stripe or Razorpay webhook’s signature, and update the order or subscription from the webhook, not from the browser’s success page.
A test purchase end to end, including refund and failed-card paths.

Reliability

Error tracking (Sentry or similar), so you hear about crashes before your users tell you.
Backups you have actually restored once. Check what your database plan includes.
Indexes on the columns you filter and sort by. Pages that are instant with 10 rows can take seconds with 10,000.

Growth

SEO basics. Most AI-built apps are single-page React apps, so every page shares one title unless you add per-page titles, descriptions and a sitemap.
Analytics and uptime monitoring from day one.
Privacy policy and terms, required by payment providers, app stores and ad platforms.

Want a second pair of eyes?

We do free 20-minute audits of AI-built apps. A senior engineer looks at your app and gives you a ranked list of what's risky. Get a free audit.