# Supabase Supabase declares [23 subprocessors](https://thirdpartyindex.com/vendors/supabase#subprocessors), plus 1 of its own affiliates, in [its subprocessor list](https://supabase.com/legal/subprocessor-list/June-1-2026.pdf), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/4563)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [OpenAI](https://thirdpartyindex.com/vendors/openai). No published changes since we first read it on 2026-09-22. [85 tracked vendors](https://thirdpartyindex.com/vendors/supabase#used-by) name Supabase as a subprocessor, including [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch), [Deepgram](https://thirdpartyindex.com/vendors/deepgram) and [Resend](https://thirdpartyindex.com/vendors/resend). Supabase (supabase.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/supabase - Documents last verified: 2026-11-11 - Transparency rating: 87/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 0/8 (partial); Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 22 tracked vendors directly, 191 within two hops, 502 within three; 85 tracked vendors rely on it directly, 588 within two hops, 2324 within three - Cite as: Supabase, Third Party Index, https://thirdpartyindex.com/vendors/supabase (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://trust.supabase.io/ | 2026-11-11 | 2026-10-26 | | Subprocessor list | https://supabase.com/legal/subprocessor-list/June-1-2026.pdf | 2026-11-11 | 2026-09-22 | | Data processing addendum | https://supabase.com/legal/customer-resources/data-processing-addendum | 2026-11-11 | 2026-09-21 | | Privacy policy | https://supabase.com/privacy | 2026-11-11 | 2026-11-03 | | Terms | https://supabase.com/terms | 2026-11-11 | 2026-10-12 | | Security page | https://supabase.com/security | 2026-11-11 | 2026-09-21 | | security.txt | https://supabase.com/.well-known/security.txt | 2026-11-11 | 2026-09-21 | | Status page | https://status.supabase.com/ | 2026-11-11 | 2026-11-11 | ## Subprocessors (23) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Active Campaign, LLC d/b/a Postmark](https://thirdpartyindex.com/vendors/postmark.md) | Communication with Authorized Users in connection with the provision of the Services and support | — | 2026-09-22 | | [Amazon Web Services, Inc](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Provision of hosting services | — | 2026-09-22 | | [Atlassian Corporation Plc](https://thirdpartyindex.com/vendors/atlassian.md) | Provision of status page services | — | 2026-09-22 | | [Braintrust Data, Inc](https://thirdpartyindex.com/vendors/braintrust.md) | Provision of monitoring and tracing | — | 2026-09-22 | | [Clay Labs Inc.](https://thirdpartyindex.com/vendors/clay.md) | Provision of customer insight services | — | 2026-09-22 | | [Clazar, Inc](https://thirdpartyindex.com/vendors/clazar.md) | Provision of marketplace services | — | 2026-09-22 | | [Cloudflare, Inc](https://thirdpartyindex.com/vendors/cloudflare.md) | Provision of hosting services | — | 2026-09-22 | | [ConfigCat Korlátolt Felelősségű Társaság](https://thirdpartyindex.com/vendors/configcat.md) | Feature flagging | — | 2026-09-22 | | [Fly.io, Inc](https://thirdpartyindex.com/vendors/fly-io.md) | Provision of hosting services | — | 2026-09-22 | | [FrontApp, Inc](https://thirdpartyindex.com/vendors/front.md) | Communication with Authorized Users in connection with the provision of the Services and support | — | 2026-09-22 | | [Functional Software, Inc d/b/a Sentry](https://thirdpartyindex.com/vendors/sentry.md) | Error monitoring and tracing | — | 2026-09-22 | | [Github, Inc](https://thirdpartyindex.com/vendors/github.md) | Authorized Users account authentication | — | 2026-09-22 | | [Google, LLC](https://thirdpartyindex.com/vendors/google-cloud.md) | Provision of hosting services | — | 2026-09-22 | | [Hex Technologies, Inc](https://thirdpartyindex.com/vendors/hex.md) | Provision of data analytics services | — | 2026-09-22 | | [Hubspot, Inc](https://thirdpartyindex.com/vendors/hubspot.md) | Communication with Authorized Users in connection with the provision of the Services and support | — | 2026-09-22 | | Latacora, LLC | Managed Security Service Provider | — | 2026-09-22 | | [Notion Labs, Inc](https://thirdpartyindex.com/vendors/notion-com.md) | Communication with Authorized Users in connection with the provision of the Services and support | — | 2026-09-22 | | [OpenAI, LLC](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | Provision of natural language processing and generation services | — | 2026-09-22 | | [PandaDoc, Inc](https://thirdpartyindex.com/vendors/pandadoc.md) | Communication with Authorized Users in connection with the provision of the Services and support | — | 2026-09-22 | | [Slack Technologies, LLC](https://thirdpartyindex.com/vendors/slack.md) | Communication with Authorized Users in connection with the provision of the Services and support | — | 2026-09-22 | | [Sublime Security Inc](https://thirdpartyindex.com/vendors/sublime-security.md) | Email Security | — | 2026-09-22 | | [Upstash, Inc](https://thirdpartyindex.com/vendors/upstash.md) | Provision of serverless data hosting services | — | 2026-09-22 | | [Vercel, Inc](https://thirdpartyindex.com/vendors/vercel.md) | Provision of hosting services | — | 2026-09-22 | Read from ([evidence](https://thirdpartyindex.com/evidence/4563)). CSV: https://thirdpartyindex.com/vendors/supabase/subprocessors.csv AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai ### Its own affiliates (1) - Supabase, Inc. ## Web Technologies Supabase's homepage made 142 requests to 4 domains, and 3 services controlled by another company. Loaded on 2026-11-03 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 3 third parties by category: Advertising 1 (usually detected as Advertising: Google Cloud); Cookie compliance 1 (usually detected as Cookie compliance: Usercentrics); Issue trackers 1 (usually detected as Issue trackers: Sentry). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (3) - Usercentrics: 7 requests to usercentrics.eu - Sentry: 2 requests to sentry.io (its subprocessor list names it too) - Google Cloud: 1 request to google.com (its subprocessor list names it too) ### First party (1) - Supabase: 132 requests to supabase.com; Framer Motion, Google Analytics, Google Tag Manager, HSTS, Lucide, Next.js 16.4.3, Next.js App Router, Open Graph, PWA, Priority Hints, Radix UI, React, Sentry, Vercel, Webpack 1 tracked company loaded by the homepage is not in Supabase's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (85) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [Aijency](https://thirdpartyindex.com/vendors/aijency.md): Stores your data - [Aimdoc](https://thirdpartyindex.com/vendors/aimdoc.md) - [Anaconda](https://thirdpartyindex.com/vendors/anaconda.md): Database and backend infrastructure - [Arphie](https://thirdpartyindex.com/vendors/arphie.md) - [Axiom](https://thirdpartyindex.com/vendors/axiom.md): Enabling more efficient sales and marketing operations by providing managed database hosting for those systems.; Internal go-to-market tooling - [Betterworks](https://thirdpartyindex.com/vendors/betterworks.md): Cloud-based service provider used to host backend services. - [Bigmind](https://thirdpartyindex.com/vendors/bigmind.md): User metadata - [Blended Teaching](https://thirdpartyindex.com/vendors/blended-teaching.md): primary database (PostgreSQL) and sign-in (Supabase Auth, since 30 September 2026) - [Braintrust](https://thirdpartyindex.com/vendors/braintrust.md): Cloud provider - [Browserbase](https://thirdpartyindex.com/vendors/browserbase.md): Backend Platform; Provides a backend platform (database hosting, authentication, APIs, and real-time updates). Responsible for securely storing and processing c… - [BugHerd](https://thirdpartyindex.com/vendors/bugherd.md): Database platform - [Bullseye](https://thirdpartyindex.com/vendors/bullseye.md): Database hosting (PostgreSQL), webhook processing, data storage - [Cekura](https://thirdpartyindex.com/vendors/cekura.md): IT infrastructure - [Chatbase.co](https://thirdpartyindex.com/vendors/chatbase-co.md): Cloud provider - [Cometly](https://thirdpartyindex.com/vendors/cometly.md): Cloud database and backend platform used to store and manage application data, which may include customer personal data such as names, emails, and account detai… - [Confident AI](https://thirdpartyindex.com/vendors/confident-ai.md): Database management and storage - [Conveo](https://thirdpartyindex.com/vendors/conveo.md): Cloud provider; Use as our GTM data infrastructure Stores call recording analysis, customer data, and enrichment data to run out GTM intent engine - [Critical Cloud](https://thirdpartyindex.com/vendors/critical-cloud.md): Application database hosting - [Day AI](https://thirdpartyindex.com/vendors/day-ai.md): Cloud provider - [Deepgram](https://thirdpartyindex.com/vendors/deepgram.md): A firebase alternative for building production-grade applications with a Postgres database, Authentication, instant APIs, Realtime, Functions, Storage and Vecto… - [Demi](https://thirdpartyindex.com/vendors/demi.md) - [Elasticsearch](https://thirdpartyindex.com/vendors/elasticsearch.md): Account, API key, and prepaid-wallet database - [Estuary](https://thirdpartyindex.com/vendors/estuary.md): Database & API Services - [Fini](https://thirdpartyindex.com/vendors/fini.md): Managed database services - [Firecrawl](https://thirdpartyindex.com/vendors/firecrawl.md) - [Firmable](https://thirdpartyindex.com/vendors/firmable.md): Database - [FlowEQ](https://thirdpartyindex.com/vendors/floweq.md): Customer data storage - [FluencyRank](https://thirdpartyindex.com/vendors/fluencyrank.md): Database and authentication - [FullFunnel](https://thirdpartyindex.com/vendors/fullfunnel-co.md): Database and backend infrastructure - [GitGuardian](https://thirdpartyindex.com/vendors/gitguardian.md): Backend database services for internal operational tooling - [Gravity](https://thirdpartyindex.com/vendors/gravity.md): Application database and authentication - [Grayn](https://thirdpartyindex.com/vendors/grayn.md): Database hosting & user authentication - [Helply](https://thirdpartyindex.com/vendors/helply.md): Cloud provider - [Hyperbolic](https://thirdpartyindex.com/vendors/hyperbolic.md) - [Hyros](https://thirdpartyindex.com/vendors/hyros.md): Managed database and backend infrastructure - [Invopop](https://thirdpartyindex.com/vendors/invopop.md) - [Klarent](https://thirdpartyindex.com/vendors/klarent.md): IT infrastructure - [Knock2](https://thirdpartyindex.com/vendors/knock2.md): Database, authentication, and backend infrastructure - [Kudosity](https://thirdpartyindex.com/vendors/kudosity.md): Backend and database services - [KugelAudio](https://thirdpartyindex.com/vendors/kugelaudio.md): Account and billing data (email, name, organisation, usage counters) and configuration data created by the customer (voice names, voice reference transcripts, s… - [Laminar](https://thirdpartyindex.com/vendors/laminar-sh.md): all platform metadata (user projects, workspaces, etc.) - [Langbly](https://thirdpartyindex.com/vendors/langbly.md): Database and authentication - [LangChain](https://thirdpartyindex.com/vendors/langchain.md): Authentication and backend services for LangSmith; Database provider - [Lead Mapper](https://thirdpartyindex.com/vendors/lead-mapper.md): Data storage (USA) - [LeadMagic](https://thirdpartyindex.com/vendors/leadmagic.md): Cloud database hosting, data storage, and backend infrastructure. - [LightTable](https://thirdpartyindex.com/vendors/lighttable.md): Managed database hosting - [Lovable](https://thirdpartyindex.com/vendors/lovable.md): Customer databases, user authentication data - [Magic School](https://thirdpartyindex.com/vendors/magic-school.md): Cloud provider; Infrastructure Hosting - [Morphed](https://thirdpartyindex.com/vendors/morphed.md): Postgres database, authentication, file storage, and pgvector retrieval where enabled - [MyTraffic](https://thirdpartyindex.com/vendors/mytraffic.md): User authentication (email, phone) - [NextFluent](https://thirdpartyindex.com/vendors/nextfluent.md): Primary database, auth, storage - [NoteLinker](https://thirdpartyindex.com/vendors/notelinker.md): Secure, encrypted database hosting and authentication (US) - [One Horizon](https://thirdpartyindex.com/vendors/one-horizon.md): Database hosting and logins - [Optiverse](https://thirdpartyindex.com/vendors/optiverse.md): Cloud provider; Database provider - [Origami](https://thirdpartyindex.com/vendors/origami.md): Database, storage, and related infrastructure - [Pepperwire](https://thirdpartyindex.com/vendors/pepperwire.md): Hosts the database holding account, connection, and message records - [Periskope](https://thirdpartyindex.com/vendors/periskope.md): Database, authentication, storage, backend infrastructure, and related platform services. - [PhoneBurner](https://thirdpartyindex.com/vendors/phoneburner.md) - [Plain](https://thirdpartyindex.com/vendors/plain.md): Use as our GTM data infrastructure. Stores call recording analysis, customer data, and enrichment data to run out GTM intent engine. It receives signals from RB… - [Pollen](https://thirdpartyindex.com/vendors/pollen.md): Database and file storage for accounts, records, and uploaded documents - [PowerSync](https://thirdpartyindex.com/vendors/powersync.md): Product analytics - [Predixtions](https://thirdpartyindex.com/vendors/predixtions.md): Website database for contact forms and analytics - [PromoteKit](https://thirdpartyindex.com/vendors/promotekit.md): database hosting and authentication. - [Quo](https://thirdpartyindex.com/vendors/quo.md): Cloud provider; Database and Auth hosting - [Raycast](https://thirdpartyindex.com/vendors/raycast.md): Managed Database and Backend Services for the Glaze app. Feature request storage for the Raycast app.; Transfer Mechanism(s): SCCs and UK Addendum - [Real Intelligence](https://thirdpartyindex.com/vendors/real-intelligence.md): Cloud hosting, PostgreSQL database, authentication, object storage - [Reditus](https://thirdpartyindex.com/vendors/reditus.md): IT infrastructure - [Reelist](https://thirdpartyindex.com/vendors/reelist.md): database and user auth - [Resend](https://thirdpartyindex.com/vendors/resend.md): Database and user authentication - [Rev](https://thirdpartyindex.com/vendors/rev.md): Data storage - [Runbear](https://thirdpartyindex.com/vendors/runbear.md): Cloud provider; Runbear uses Supabase as primarily store user data - [Sazabi](https://thirdpartyindex.com/vendors/sazabi.md): Relational database hosting - [Sendbird](https://thirdpartyindex.com/vendors/sendbird.md): Backend infrastructure used to support internal operational tooling and analytics workflows - [Sherpa](https://thirdpartyindex.com/vendors/sherpa.md) - [SparkGrid Software](https://thirdpartyindex.com/vendors/sparkgrid-software.md): Database infrastructure - [telli](https://thirdpartyindex.com/vendors/telli.md) - [Tightknit](https://thirdpartyindex.com/vendors/tightknit.md): Postgres hosting (USA) — https://supabase.com - [TitanX](https://thirdpartyindex.com/vendors/titanx.md): Supabase provides TitanX with an open-source backend-as-a-service (BaaS) solution, offering a range of tools to manage databases and APIs. - [Trustmary](https://thirdpartyindex.com/vendors/trustmary.md): Cloud infrastructure hosting - [Uhubs](https://thirdpartyindex.com/vendors/uhubs.md) - [Upstash](https://thirdpartyindex.com/vendors/upstash.md) - [Vapi](https://thirdpartyindex.com/vendors/vapi.md): Authentication - [West Tennessee Consulting](https://thirdpartyindex.com/vendors/west-tennessee-consulting.md): managed database and file storage - [Whatslink](https://thirdpartyindex.com/vendors/whatslink.md): application database, authentication and file storage (EU region). - [Wonderchat](https://thirdpartyindex.com/vendors/wonderchat.md): Supabase is an open source Firebase alternative database provider. Read more about their GDPR Compliance policy here: https://supabase.com/privacy ## Service status Incidents it reported on its own status page. - Last 90 days: 81 reported incidents (22 major or critical, 38 minor, 21 with no impact stated) - Typical time to resolve: 2 h 1 min - Status page last read: 2026-11-12 - 2026-11-11: Project Lifecycle Issues in ap-northeast-1 (minor) - 2026-11-08: Interruption in connections to Supavisor in eu-west-2 (no impact stated) - 2026-11-06: Increased Errors with Project Lifecycle Operations in US-West-2 (minor) - 2026-11-05: Intermittent 502/503 errors for pg\_net calls to Edge Functions (minor) - 2026-11-04: Storage issues in us-east-1 and eu-central-1 (minor) - 2026-11-04: Intermittent errors on Supavisor Shared Pooler in us-east-2 (minor) - 2026-11-03: Management API Postgres config updates overwriting previous updates (no impact stated) - 2026-11-02: Storage uploads failing in us-east-1 (minor) ## Incidents reported by Supabase's subprocessors Incidents reported in the last 30 days on their own status pages by 9 vendors Supabase lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-11-12: [Fly.io](https://thirdpartyindex.com/vendors/fly-io#status), which Supabase lists as a subprocessor, reported LAX region outage (critical) - 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Unable to start new Workspace Agent runs (critical) - 2026-11-11: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Impact across multiple GitHub products including Actions, Pages, and Copilot products. (critical) - 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Elevated errors affecting logins, sign-ups, and ChatGPT features (minor) - 2026-11-11: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Incident with Webhooks (minor) - 2026-11-11: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Supabase lists as a subprocessor, reported US issues feed throwing intermittent errors (minor) - 2026-11-11: [Fly.io](https://thirdpartyindex.com/vendors/fly-io#status), which Supabase lists as a subprocessor, reported Intermittent errors pushing images to Fly.io Registry (no impact stated) - 2026-11-11: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Supabase lists as a subprocessor, reported Account emails not being delivered (major) - 2026-11-10: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Supabase lists as a subprocessor, reported EU region replay ingestion latency (minor) - 2026-11-10: [Vercel](https://thirdpartyindex.com/vendors/vercel#status), which Supabase lists as a subprocessor, reported Elevated Sandbox and Blob request latency and errors (minor) - 2026-11-10: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which Supabase lists as a subprocessor, reported Some Notion Agent sessions may hang or stop updating (major) - 2026-11-10: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Supabase lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated) - 2026-11-10: [Front](https://thirdpartyindex.com/vendors/front#status), which Supabase lists as a subprocessor, reported Front mobile SSO login degraded (major) - 2026-11-10: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Incident with Git Operations and Pull Requests (critical) - 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Degraded availability for GPT-5.3 Codex and GPT-5.6 models in Copilot (major) - 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Elevated Errors On API (minor) - 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Incident with Actions and Checks API (critical) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Incident with Webhooks and Actions (major) - 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Increased timeouts due to surge in anonymous users (minor) - 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Elevated errors with image generation (minor) - 2026-11-08: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Increase in timeouts for some unauthenticated users (minor) - 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated) - 2026-11-06: [Fly.io](https://thirdpartyindex.com/vendors/fly-io#status), which Supabase lists as a subprocessor, reported IPv6 egress issues on a subset of IAD hosts (minor) - 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Degraded performance for multiple GitHub services (minor) - 2026-11-05: [Vercel](https://thirdpartyindex.com/vendors/vercel#status), which Supabase lists as a subprocessor, reported Build delays and degraded Vercel Dashboard performance (minor) - 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Incident with Actions (minor) - 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor) - 2026-11-05: [Postmark](https://thirdpartyindex.com/vendors/postmark#status), which Supabase lists as a subprocessor, reported Delays in activity data (no impact stated) - 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Incident with Actions (major) - 2026-11-04: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Supabase lists as a subprocessor, reported Ingestion delays across all data (minor) - 2026-11-04: [Front](https://thirdpartyindex.com/vendors/front#status), which Supabase lists as a subprocessor, reported \[us-west-1\] High API latency currently causing delays (minor) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Incident with Actions and Pages (major) - 2026-11-04: [Postmark](https://thirdpartyindex.com/vendors/postmark#status), which Supabase lists as a subprocessor, reported Delays processing Inbound messages (no impact stated) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Incident with Pull Requests, Git Operations and Issues (major) - 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Increased task-related errors for Copilot Mission Control (minor) - 2026-11-04: [Fly.io](https://thirdpartyindex.com/vendors/fly-io#status), which Supabase lists as a subprocessor, reported Emergency network maintenance on a subset of hosts in ORD (minor) - 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Incident with Git Operations (minor) - 2026-11-03: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Supabase lists as a subprocessor, reported Delays in spans and transactions processing (major) - 2026-11-03: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Supabase lists as a subprocessor, reported Sentry.io dashboard and API is down (critical) - 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Incident with API, Git, and Copilot requests (minor) - 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported File upload errors in ChatGPT (minor) - 2026-11-02: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Elevated errors on GPT-5.4 Nano (minor) - 2026-11-02: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Supabase lists as a subprocessor, reported Sentry dashboard is down (critical) - 2026-11-02: [Fly.io](https://thirdpartyindex.com/vendors/fly-io#status), which Supabase lists as a subprocessor, reported Elevated Machine start failures in ARN (minor) - 2026-11-02: [Fly.io](https://thirdpartyindex.com/vendors/fly-io#status), which Supabase lists as a subprocessor, reported Emergency maintenance in IAD (major) - 2026-11-02: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Supabase lists as a subprocessor, reported HubSpot is experiencing issues (no impact stated) - 2026-11-01: [Fly.io](https://thirdpartyindex.com/vendors/fly-io#status), which Supabase lists as a subprocessor, reported Outbound IPv4 connectivity failures in ARN, JNB, and GRU (minor) - 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Incident with Dependabot (minor) - 2026-10-30: [Fly.io](https://thirdpartyindex.com/vendors/fly-io#status), which Supabase lists as a subprocessor, reported Slow image pulls delaying Machine starts in IAD (minor) - 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor) - 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Incident with Actions, Pages, and Webhooks (major) - 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor) - 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Disruption with GitHub services (critical) - 2026-10-29: [Fly.io](https://thirdpartyindex.com/vendors/fly-io#status), which Supabase lists as a subprocessor, reported Elevated Depot Failures (no impact stated) - 2026-10-29: [Fly.io](https://thirdpartyindex.com/vendors/fly-io#status), which Supabase lists as a subprocessor, reported Elevated issues with the Machines API (minor) - 2026-10-29: [Fly.io](https://thirdpartyindex.com/vendors/fly-io#status), which Supabase lists as a subprocessor, reported Creating WireGuard peers in ARN is currently broken (no impact stated) - 2026-10-29: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Disruption with Copilot Cloud services (minor) - 2026-10-28: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Disruption with some Copilot services (critical) - 2026-10-27: [Postmark](https://thirdpartyindex.com/vendors/postmark#status), which Supabase lists as a subprocessor, reported SMS codes for two-factor authentication may not arrive (no impact stated) - 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor) - 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated) - 2026-10-27: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Elevated 404s for GitHub App s2s tokens in git/API (no impact stated) - 2026-10-26: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Incident with Actions, Issues, API Requests and Pull Requests (minor) - 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor) - 2026-10-26: [Fly.io](https://thirdpartyindex.com/vendors/fly-io#status), which Supabase lists as a subprocessor, reported Degraded networking to AWS IPs (no impact stated) - 2026-10-26: [Fly.io](https://thirdpartyindex.com/vendors/fly-io#status), which Supabase lists as a subprocessor, reported Packet loss in IAD (minor) - 2026-10-25: [Fly.io](https://thirdpartyindex.com/vendors/fly-io#status), which Supabase lists as a subprocessor, reported MPGv2 IAD control plane is read-only (minor) - 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Grok 4.6 and Grok 4.7 Service Issues (minor) - 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor) - 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated) - 2026-10-23: [Vercel](https://thirdpartyindex.com/vendors/vercel#status), which Supabase lists as a subprocessor, reported Delays in Logs and Observability data (minor) - 2026-10-23: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Supabase lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated) - 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Disruption with Dependabot Alerts (minor) - 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Delayed Actions status check results (minor) - 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Delays in customer support responses (no impact stated) - 2026-10-23: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which Supabase lists as a subprocessor, reported Users unable to access Notion (critical) - 2026-10-23: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which Supabase lists as a subprocessor, reported PHP2Shell (CVE-2026-109618, CVE-2026-109619) (no impact stated) - 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor) - 2026-10-22: [Fly.io](https://thirdpartyindex.com/vendors/fly-io#status), which Supabase lists as a subprocessor, reported Degraded Edge Performance (no impact stated) - 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor) - 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Project updates delayed (minor) - 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Incident with Actions (minor) - 2026-10-22: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which Supabase lists as a subprocessor, reported Notion MCP query\_data\_source tool is temporarily unavailable in Claude clients (major) - 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor) - 2026-10-22: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Supabase lists as a subprocessor, reported Update on PHP security vulnerability (no impact stated) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Authentication errors for some users (major) - 2026-10-21: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Supabase lists as a subprocessor, reported Increased latency processing integration webhooks (minor) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor) - 2026-10-21: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Delays for Pull Requests and Webhook deliveries (critical) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor) - 2026-10-21: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Supabase lists as a subprocessor, reported Sentry.io not loading in US region (critical) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor) - 2026-10-20: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which Supabase lists as a subprocessor, reported Security update: Preventative certificate security measures (no impact stated) - 2026-10-20: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which Supabase lists as a subprocessor, reported Unable to install connections created by other workspace members (major) - 2026-10-20: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Supabase lists as a subprocessor, reported Sentry.io not loading (major) - 2026-10-20: [Fly.io](https://thirdpartyindex.com/vendors/fly-io#status), which Supabase lists as a subprocessor, reported Capacity issues in GRU region (minor) - 2026-10-19: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Supabase lists as a subprocessor, reported Sentry is down (critical) - 2026-10-19: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported Degraded availability for GitHub Actions, GitHub Pages and Webhooks (critical) - 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported File Download errors (minor) - 2026-10-18: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which Supabase lists as a subprocessor, reported Some Notion Agent requests may stop before completion (minor) - 2026-10-16: [Fly.io](https://thirdpartyindex.com/vendors/fly-io#status), which Supabase lists as a subprocessor, reported Fly-metrics.net Grafana Dashboard Outage (major) - 2026-10-16: [Fly.io](https://thirdpartyindex.com/vendors/fly-io#status), which Supabase lists as a subprocessor, reported Platform Wide Rolling Host Reboots (major) - 2026-10-15: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported CCA Automations are delayed when starting an Automation (minor) - 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Widespread feature degradation (major) - 2026-10-15: [Fly.io](https://thirdpartyindex.com/vendors/fly-io#status), which Supabase lists as a subprocessor, reported Elevated errors creating apps and managing secrets (minor) - 2026-10-15: [Fly.io](https://thirdpartyindex.com/vendors/fly-io#status), which Supabase lists as a subprocessor, reported Partial FRA network issues (no impact stated) - 2026-10-14: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which Supabase lists as a subprocessor, reported Cursor-powered Custom Agents unable to load Notion tools (no impact stated) - 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor) - 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor) - 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor) - 2026-10-14: [Sentry](https://thirdpartyindex.com/vendors/sentry#status), which Supabase lists as a subprocessor, reported Ingestion Halted for EAP data in EU (major) - 2026-10-13: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which Supabase lists as a subprocessor, reported Form submission issues (resolved) (no impact stated) - 2026-10-13: [GitHub](https://thirdpartyindex.com/vendors/github#status), which Supabase lists as a subprocessor, reported \[Retroactive\] Actions workflow run logs delayed (minor) - 2026-10-13: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which Supabase lists as a subprocessor, reported Degraded performance in Notion and the Notion API (no impact stated) - 2026-10-13: [Fly.io](https://thirdpartyindex.com/vendors/fly-io#status), which Supabase lists as a subprocessor, reported Historical logs are currently delayed (minor) - 2026-10-13: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Supabase lists as a subprocessor, reported Degraded performance in GPT-6.1 Sol Codex and Work mode (minor) The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/supabase ## Security contact From its security.txt (https://supabase.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/404)): - Contact: https://hackerone.com/supabase - No expiry date --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api