Companies / Supabase
Supabase provides a Postgres database with add-on services including authentication, data APIs, edge functions, realtime data, storage, and vector embeddings. It serves developers and companies building apps.
Summarized from its homepage on 3 Nov 2026.
65 Chulia Street #38-02/03, OCBC Centre, Singapore, 049513, SG
Vendors of Supabase and the evidence for each
CloudflareCloud and infrastructureConfirmed
VercelCloud and infrastructureConfirmed
Amazon Web ServicesCloud and infrastructureConfirmed
GitHubDeveloper toolsConfirmed
Google CloudCloud and infrastructureConfirmed
HubSpotCRM and salesConfirmed
NotionProductivityConfirmed
SlackProductivityConfirmed
StripePaymentsLikely
AshbyHRLikely
47 more vendors
See Supabase's full stack and the source for every claim.
Create a free accountWork email, no card. Already have one? Log inNo public list found
We did not find a public subprocessor list. The company may still publish one, or share it privately.
Questions about Supabase
Certifications
| Standard | What the source says | Checked |
|---|---|---|
| HIPAACompany's statement | “HIPAA Compliant ISO 27001 Certified”The company's own statement of compliance. There is no official HIPAA certification or registry. | 9 Nov 2026Source |
| ISO 27001Company's statement | “ISO 27001 Certified Twitter GitHub”The company's own statement. We have not checked an accreditation registry. | 9 Nov 2026Source |
| SOC 2 Type IICompany's statement | “SOC2 Type 2 Certified HIPAA Compliant”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA. | 9 Nov 2026Source |
We last read its homepage on 9 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean Supabase lacks it.
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See Supabase's full stack
Every vendor with its source and date, and an alert when Supabase adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call