Supabase
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | partial | 0 / 8 |
| Purposes | 7 / 7 | |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | 6 / 6 | |
| Security page | 5 / 5 | |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 87 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Supabase's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/supabase"><img src="https://thirdpartyindex.com/badge/supabase.svg" alt="Supabase transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/supabase)Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center | snapshot | ||
| Subprocessor list | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot | ||
| security.txt | snapshot | ||
| Status page statuspage | snapshot |
Subprocessors
23 third parties, 1 affiliate. CSV · Atom
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Active Campaign, LLC d/b/a Postmark | Communication with Authorized Users in connection with the provision of the Services and support | ||
| Amazon Web Services, Inc | Provision of hosting services | ||
| Atlassian Corporation Plc | Provision of status page services | ||
| Braintrust Data, Inc | Provision of monitoring and tracing | ||
| Clay Labs Inc. | Provision of customer insight services | ||
| Clazar, Inc | Provision of marketplace services | ||
| Cloudflare, Inc | Provision of hosting services | ||
| ConfigCat Korlátolt Felelősségű Társaság | Feature flagging | ||
| Fly.io, Inc | Provision of hosting services | ||
| FrontApp, Inc | Communication with Authorized Users in connection with the provision of the Services and support | ||
| Functional Software, Inc d/b/a Sentry | Error monitoring and tracing | ||
| Github, Inc | Authorized Users account authentication | ||
| Google, LLC | Provision of hosting services | ||
| Hex Technologies, Inc | Provision of data analytics services | ||
| Hubspot, Inc | Communication with Authorized Users in connection with the provision of the Services and support | ||
| Latacora, LLC | Managed Security Service Provider | ||
| Notion Labs, Inc | Communication with Authorized Users in connection with the provision of the Services and support | ||
| OpenAI, LLC | Provision of natural language processing and generation services | ||
| PandaDoc, Inc | Communication with Authorized Users in connection with the provision of the Services and support | ||
| Slack Technologies, LLC | Communication with Authorized Users in connection with the provision of the Services and support | ||
| Sublime Security Inc | Email Security | ||
| Upstash, Inc | Provision of serverless data hosting services | ||
| Vercel, Inc | Provision of hosting services |
Listed as a subprocessor by (15)
Purposes as each company states them.
Anaconda anaconda.com Database and backend infrastructure
Braintrust braintrust.dev Cloud provider
Browserbase browserbase.com Backend Platform; Provides a backend platform (database hosting, authentication, APIs, and real-time updates). Responsible for securely storing and processing customer data in databases, authenticating users, and enabling real-time data interactions. Browserbase maintains control over data input, schema design, and application logic.
Conveo conveo.ai Cloud provider; Use as our GTM data infrastructure Stores call recording analysis, customer data, and enrichment data to run out GTM intent engine
Deepgram deepgram.com A firebase alternative for building production-grade applications with a Postgres database, Authentication, instant APIs, Realtime, Functions, Storage and Vector embeddings.
Elasticsearch elastic.co Account, API key, and prepaid-wallet database
Estuary estuary.dev Database & API Services
GitGuardian gitguardian.com Backend database services for internal operational tooling
Hyperbolic hyperbolic.ai
LangChain langchain.com Authentication and backend services for LangSmith; Database provider
Plain plain.com Use as our GTM data infrastructure. Stores call recording analysis, customer data, and enrichment data to run out GTM intent engine. It receives signals from RB2B, LinkedIn Ads, and Attio to provide a fit and intent score used by Cargo (through Polytomic/Plain).
Quo quo.com Cloud provider; Database and Auth hosting
Resend resend.com Database and user authentication
Sendbird sendbird.com Backend infrastructure used to support internal operational tooling and analytics workflows
Upstash upstash.com
Service status
10 incidents in the last 11 days (4 major or critical, 6 minor, 0 with no stated impact) · typically resolved in 2 h · longest major: 2 h 1 min
| Began | Incident | Impact | Lasted |
|---|---|---|---|
| Project Lifecycle Issues in eu-west-1 | major | 2 h 1 min evidence | |
| Permission errors in the Supabase Dashboard | critical | 1 h 12 min evidence | |
| Supabase CLI CI workflow failures | minor | 1 h 42 min evidence | |
| Storage search failing for restored projects | minor | 24 h 29 min evidence | |
| Increased error rate in project creation and project restore | major | 1 h 28 min evidence | |
| Supavisor connection disruptions in EU West 1 (Ireland) | minor | 1 h 30 min evidence | |
| Project creations are degraded in multiple regions | minor | 31 min evidence | |
| Project Lifecycle Activity Degradation | major | 2 h evidence |
As Supabase's status page reports its own incidents (scheduled maintenance left out), read every few hours since .
Changes
None since tracking began.