High, provisions that significantly limit your legal rights, authorize broad data collection, or create material financial exposure.
Medium, provisions worth knowing about but with partial protections or limited scope.
Low, standard terms with minimal consumer impact.
Objective measurements
Counted directly from the archive for Supabase — documents, captured versions, and detected changes.
2
Documents tracked
9
Versions captured
6
Changes · 12 mo
6
Changes · all-time
26.6 d
Avg between changes
9
Days since change
76 d
Longest stable stretch
ConductAtlas User-Protection Index
Provisional · scored on 5 of 6
29.3/100
Consumer tier · provisional until more dimensions are known
Baseline29.3 here · corpus average 31.4 across 191 scored platformsMiddle 50%Q1 18.4 · median 30.8 · Q3 42.3
Higher = more protective of you, the user/customer — a deliberately user-protective lens, not a universal “good vs bad” score.
Computed algorithmically from Supabase’s cited governance stances; no dimension we haven’t confidently read is ever counted against the score. Free, reproducible, and never purchasable.
Consumer tier · 29.3/100 · provisional · scored on 5 of 6
HighInternational transfer may reduce data protection level
Users' personal data may receive weaker legal protections after international transfer, potentially limiting their rights and remedies.
HighHIPAA PHI Requires Business Associate Agreement
Customers handling health data who do not obtain a Business Associate Agreement are in breach of this agreement and potentially exposed to regulatory risk.
HighMandatory Individual Arbitration Requirement
Mandatory individual arbitration eliminates the option of litigation and requires disputes to be resolved through a private process.
HighSupabase will not access database content without consent
Users retain a consent-based barrier against Supabase accessing the data they store and manage within the Service.
HighSupabase AI tool collects query inputs and generated outputs
Both sides of every AI tool interaction — the user's prompt and the AI's response — are collected by Supabase, meaning the full content of those exchanges is retained.
This document explains what data Supabase collects about you, how it uses and shares that data, and your rights around it. Supabase collects everything you submit to its AI tools …
Last updated May 5, 2026
· Privacy policy
10 provisions5 versions captured1 significant changeVersion history →
This document is Supabase's Terms of Service, which binds you the moment you access or use the services—not just when you click accept. All disputes must go through private, individual …
Last updated May 5, 2026
· Terms of service
8 provisions4 versions captured1 significant changeVersion history →
Recent Changes
May 15, 2026 · Supabase Privacy PolicyMedium
Supabase updated its privacy policy on May 15, 2026 to disclose expanded use of business contact information for sales and marketing outreach, expanded sharing of personal information with the marketing …
Supabase updated its legal entity from a Delaware corporation to a Singapore-based company and refined several procedural details in its Terms of Service. Key changes include clarifying how agreement acceptance …
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
ConductAtlas tracks 2 Supabase documents including terms of service, privacy policy, and other governance documents. Every document is captured daily with cryptographic verification.
How many policy changes has Supabase made in the past year?
Supabase has made 6 policy changes in the past 12 months across the documents ConductAtlas tracks.
How many provisions has ConductAtlas classified for Supabase?
ConductAtlas has classified 28 provisions across Supabase's tracked documents. 2 are rated high severity, 17 medium, and 9 low.
Can I get alerts when Supabase changes their policies?
Yes. Monitor subscribers ($4.99/month) can add Supabase to their watchlist and receive same-day email alerts whenever any tracked document changes.
You're already tracking a platform
Monitoring is a paid feature. Monitor emails you the same day a platform you choose changes its terms.