2 Documents
28 All provisions 2 High severity 17 Medium severity 9 Low severity
5 Changes · 12 mo
Jul 31, 2026 Last change

High, provisions that significantly limit your legal rights, authorize broad data collection, or create material financial exposure. Medium, provisions worth knowing about but with partial protections or limited scope. Low, standard terms with minimal consumer impact.

Objective measurements
Counted directly from the archive for Supabase — documents, captured versions, and detected changes.
2
Documents tracked
6
Versions captured
5
Changes · 12 mo
5
Changes · all-time
21.2 d
Avg between changes
11
Days since change
76 d
Longest stable stretch
ConductAtlas User-Protection Index
Provisional · scored on 5 of 6
29.3/100
Consumer tier · provisional until more dimensions are known
How is this scored? →
Baseline 29.3 here · corpus average 31.4 across 191 scored platforms Middle 50% Q1 18.4 · median 30.8 · Q3 42.3

Higher = more protective of you, the user/customer — a deliberately user-protective lens, not a universal “good vs bad” score. Computed algorithmically from Supabase’s cited governance stances; no dimension we haven’t confidently read is ever counted against the score. Free, reproducible, and never purchasable.

Consumer tier · 29.3/100 · provisional · scored on 5 of 6
Data sharing & sale weight 20% 0.0
AI training on your data weight 18% not stated
Content ownership & licence weight 15% 45.0
Liability & warranties weight 10% 0.0
Governance Coverage
Contract Terms
32 provisions · 10 high · 14 med
Data Usage
23 provisions · 8 high · 11 med
Arbitration
19 provisions · 7 high · 10 med
Privacy Rights
18 provisions · 2 high · 15 med
Data Sharing
16 provisions · 9 high · 5 med
Data Collection
12 provisions · 3 high · 9 med
Liability Limitation
11 provisions · 8 high · 3 med
Data Retention
10 provisions · 2 high · 8 med
Acceptable Use
10 provisions · 8 high · 1 med
Enforcement Actions
9 provisions · 6 high · 3 med
Quick Facts
Arbitration: Required
AI Training: Not stated
Data Retention: Deleted; 60-day window
Class Action: Waived
Key Governance Provisions
High International transfer may reduce data protection level

Users' personal data may receive weaker legal protections after international transfer, potentially limiting their rights and remedies.

High HIPAA PHI Requires Business Associate Agreement

Customers handling health data who do not obtain a Business Associate Agreement are in breach of this agreement and potentially exposed to regulatory risk.

High Mandatory Individual Arbitration Requirement

Mandatory individual arbitration eliminates the option of litigation and requires disputes to be resolved through a private process.

High Supabase will not access database content without consent

Users retain a consent-based barrier against Supabase accessing the data they store and manage within the Service.

High Supabase AI tool collects query inputs and generated outputs

Both sides of every AI tool interaction — the user's prompt and the AI's response — are collected by Supabase, meaning the full content of those exchanges is retained.

Document Coverage
Privacypolicy Termsofservice
Last change detected: Jul 31, 2026 Changes (12 months): 5 Documents monitored: 2 Provisions tracked: 28
Compare With Similar Platforms
Atlassian Datadog Fly.io GitHub Notion Postman Segment Twilio

Documents

Supabase Privacy Policy

Medium

This document explains what data Supabase collects about you, how it uses and shares that data, and your rights around it. Supabase collects everything you submit to its AI tools …

Last updated May 5, 2026 · Privacy policy
10 provisions 3 versions captured 1 significant change Version history →

Supabase Terms of Service

Medium

This document is Supabase's Terms of Service, which binds you the moment you access or use the services—not just when you click accept. All disputes must go through private, individual …

Last updated May 5, 2026 · Terms of service
8 provisions 3 versions captured 1 significant change Version history →

Recent Changes

May 15, 2026 · Supabase Privacy Policy Medium

Supabase updated its privacy policy on May 15, 2026 to disclose expanded use of business contact information for sales and marketing outreach, expanded sharing of personal information with the marketing …

View change record →
May 6, 2026 · Supabase Terms of Service Medium

Supabase updated its legal entity from a Delaware corporation to a Singapore-based company and refined several procedural details in its Terms of Service. Key changes include clarifying how agreement acceptance …

View change record →
📈 Policy Drift Analysis View all changes →

High Severity Provisions (2)

View all high severity provisions → Compare Supabase with other platforms →

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Applicable Regulations

CCPA/CPRA
California, USA
View official text ↗
Colorado AI Act
US-CO
View official text ↗
CFAA
United States Federal
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
DMA
European Union
View official text ↗
DSA
European Union
View official text ↗
ePrivacy Directive
European Union
View official text ↗
FAA
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Texas AI Act
Texas, USA
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗

Compare with Similar Platforms

Atlassian
developer_tools
Datadog
developer_tools
Fly.io
developer_tools
GitHub
developer_tools
Notion
developer_tools
Postman
developer_tools
Segment
developer_tools
Twilio
developer_tools

Frequently Asked Questions

What Supabase documents does ConductAtlas track?

ConductAtlas tracks 2 Supabase documents including terms of service, privacy policy, and other governance documents. Every document is captured daily with cryptographic verification.

How many policy changes has Supabase made in the past year?

Supabase has made 5 policy changes in the past 12 months across the documents ConductAtlas tracks.

How many provisions has ConductAtlas classified for Supabase?

ConductAtlas has classified 28 provisions across Supabase's tracked documents. 2 are rated high severity, 17 medium, and 9 low.

Can I get alerts when Supabase changes their policies?

Yes. Monitor subscribers ($4.99/month) can add Supabase to their watchlist and receive same-day email alerts whenever any tracked document changes.