Supabase

supabase.com · facts updated 1 day ago

Privacy facts at a glance

Jurisdictions: US · SG
Retention: The documents reference a 'Data retention and security' section but do not state a specific retention period in the excerpts provided.
DPA available: Yes
Certifications: SOC 2 Type 2 · HIPAA · ISO 27001
GDPR addressed: Yes
CCPA addressed: Yes

Named subprocessors

Stripe GitHub Cloudflare Vanta Snyk

Tracked documents

https://supabase.com/privacy checked 7 hours ago

https://supabase.com/terms checked 6 hours ago

Data processing agreement

https://supabase.com/legal/dpa checked 5 hours ago

Security / trust page

https://supabase.com/security checked 6 hours ago

Data processing agreement 1 day ago

Document updated.

Security / trust page 1 day ago

Document updated.

Data processing agreement 3 days ago

Document updated.

Security / trust page 3 days ago

Document updated.

Public summary; per-account review history visible to subscribers tracking this vendor.

Get notified when Supabase adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.

No card required.