Skip to content

Supabase compliance, certifications and attestations

Data platforms · 3 certifications held · read Sep 24, 2026

CertificationEvidence
SOC reports
SOC 2
Type II

Vendor page

Sep 24, 2026
ISO standards
ISO/IEC 27001
Held

Vendor page

Sep 24, 2026
Health
HIPAA (BAA)
Held

Vendor page

Sep 24, 2026

From public trust centers and registries on the date shown. Confirm scope with the vendor. Logos via logo.dev; trademarks belong to their owners.

About Supabase

Postgres development platform.

No public evidence found for

SOC reports
SOC 1, SOC 3
ISO standards
ISO 27017, ISO 27018, ISO 27701, ISO 9001, ISO 22301, ISO 20000, ISO 27799
AI governance
ISO 42001, STAR AI
US government
FedRAMP, DoD IL, GovRAMP, TX-RAMP, CMMC, 800-171, 800-53, FIPS 140, ITAR, CJIS, IRS 1075, 508/VPAT
Finance
PCI DSS, PCI 3DS, SWIFT, 17a-4, GLBA, SOX, FFIEC, MAS TRM, APRA, OSFI, FISC, DORA
Health
HITRUST, HDS, NHS DSPT, PHIPA
Life sciences (GxP)
GxP, Part 11, Annex 11, CSV
Privacy and cloud
DPF, CBPR, EU CoC, CSA STAR
Regional programs
Cyber Ess., G-Cloud, C5, ENS, SecNum, IRAP, ISMAP, MTCS, K-ISMS, TISAX
Education
FERPA, HECVAT, COPPA

Compare with Palantir, Snowflake, MongoDB, Databricks, Splunk

Company profile
Across fru.devblogsFree tiersincidentsleadersPaydaysregionsReleasesslasstartupsConferencestitles

Certification changes by email

Wednesdays: vendors that gained or lost a certification, only in weeks with a change.

Double opt-in. Unsubscribe any time.