Supabase

supabase.com · facts updated 1 hour ago

Privacy facts at a glance
Jurisdictions
US · SG
Retention
Data retention is mentioned as a section topic but no specific retention period is stated in the excerpts provided.
DPA available
Yes
Certifications
SOC 2 Type 2 · HIPAA · ISO 27001
GDPR addressed
Yes
CCPA addressed
Yes
Named subprocessors
Stripe GitHub

Tracked documents

Privacy policy
https://supabase.com/privacy checked 1 hour ago
Terms of service
https://supabase.com/terms checked 1 hour ago
Data processing agreement
https://supabase.com/legal/dpa checked 1 hour ago
Security / trust page
https://supabase.com/security checked 1 hour ago

Recent changes

minor Data processing agreement 1 hour ago

Supabase's data processing agreement shows only a file size change from 101.8K to 101.9K with no visible textual content differences in the diff.

minor Security / trust page 1 hour ago

Supabase's security/trust page changed only in a file size indicator (101.8K to 101.9K) with no substantive content additions or removals.

minor Terms of service 1 hour ago

Supabase updated their Terms of Service version date to 1 May 2026, with the diff showing only a file size increment and no substantive content changes visible in the provided additions/removals.

minor Privacy policy 1 hour ago

Supabase's privacy policy diff appears to reflect primarily reformatting and structural changes (navigation layout, heading formatting, text block restructuring) with no substantive changes to data collection, processing purposes, retention, transfers, or other material terms visible in the truncated diff.

Public summary; per-account review history visible to subscribers tracking this vendor.

Track Supabase in your workspace.

Get notified when Supabase adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.

Start tracking — 14-day trial
No card required.