Vendor profile
Supabase: where is customer data stored and processed?
Supabase has its headquarters in Singapore. Customer data is stored and processed in the EU region the customer selects, and backups are kept in the same region. Customers can choose region, and the provider also offers regions outside the EU/EEA, which can be excluded. Account and user information may be transferred to and stored in the USA and Singapore under standard contractual clauses. Support is provided from the USA, and logs and telemetry are kept in EU-based data centres, but retention periods are not stated. The data processing agreement has been read, but it does not state where data is stored. Locations for notifications, GitHub-based login and central account systems are not stated.
See the map and sourcesWhere data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|---|---|
| Storage | Europe (country not stated) | – |
| Processing | Europe (country not stated) | – |
| Backup | Europe (country not stated) | – |
| Login and user account | Europe (country not stated) | USA, Singapore |
| Logs and telemetry | Europe (country not stated) | – |
| Support | – | USA |
Ownership and agreements
| Headquarters | Singapore |
|---|---|
| Data processing agreement | Found and read |
| Certifications | SOC 2, ISO/IEC 27001 |
Sub-processors (22)
| Name | Country | Purpose |
|---|---|---|
| Supabase, Inc. | USA | Provision of support services |
| Supabase Pte. Ltd. | Singapore | Provision of support services in marketplace related activities |
| ActiveCampaign, LLC (d/b/a Postmark) | USA | Communication with Authorized Users |
| Amazon Web Services, Inc | USA | Provision of hosting services |
| Braintrust Data, Inc | USA | Provision of monitoring and tracing |
| Cloudflare, Inc | USA | Provision of hosting services and CDN |
| ConfigCat | Hungary | Feature flagging and configuration management |
| FrontApp, Inc | USA | Communication with Authorized Users |
| Functional Software, Inc (d/b/a Sentry) | USA | Error monitoring and tracing |
| GitHub, Inc | USA | Authorized User account authentication |
| Google, LLC | USA | Provision of hosting services |
| Hex Technologies, Inc | USA | Provision of data analytics services |
| HubSpot, Inc | USA | Communication with Authorized Users |
| Latacora, LLC | USA | Managed security service provider |
| Notion Labs, Inc | USA | Communication with Authorized Users |