125 Total
56 High severity
54 Medium severity
15 Low severity

Key Facts

What is each party's aggregate liability limited to?
Supabase limits each party's aggregate liability to the total amounts paid and/or payable to Supabase under the agreement in the twelve months immediately preceding the claim.
When does this agreement take effect?
Supabase requires that this agreement takes effect when a user clicks the 'I Accept' button or by accessing or using the services.
Does this agreement take effect when a user clicks the 'I Accept' button or by accessing or using the services?
Supabase requires that this agreement takes effect when a user clicks the 'I Accept' button or by accessing or using the services.
May a user participate as a plaintiff or class member in any class, collective, private attorney general, or representative action or proceeding?
Supabase restricts a user's right to participate as a plaintiff or class member in any class, collective, private attorney general, or representative action or proceeding.
What damages does Supabase exclude from liability?
Supabase excludes both parties' liability for consequential, incidental, indirect, exemplary, special, enhanced, or punitive damages, as well as increased costs, diminution in value, or lost business.
Are fees paid by the customer non-refundable?
Supabase requires that fees paid by the customer are non-refundable.
What agreement must a customer sign with Supabase to store or process protected health information?
Supabase prohibits customers from storing or processing protected health information (as defined in HIPAA) using the services unless the customer signs a Business Associate Agreement with Supabase.
Does a user waive the right to seek relief in a court of law?
Supabase requires that a user expressly waives the right to seek relief in a court of law and to have a jury trial on their claims.
Does a user waive the right to have a jury trial on their claims?
Supabase requires that a user expressly waives the right to seek relief in a court of law and to have a jury trial on their claims.
What does Supabase require to resolve disputes?
Supabase requires the exclusive use of final and binding arbitration on an individual basis to resolve disputes.
Stay ahead of the changes
Track Supabase and get the diff the day its terms change.
Summary

This document is Supabase's Terms of Service, which binds you the moment you access or use the services—not just when you click accept. All disputes must go through private, individual arbitration rather than court, though new customers have thirty days to opt out by emailing legal@supabase.io. Fees you pay are non-refundable, damages you can recover are strictly capped, and health data cannot be stored on Supabase without a separate agreement.

Analysis

This agreement establishes the terms under which Supabase provides its services, binding users upon clicking 'I Accept' or upon first access or use. It imposes mandatory individual arbitration with express jury-trial and court-relief waivers, and a class-action prohibition, subject to a thirty-day opt-out right for new customers via email to legal@supabase.io. Both parties' aggregate liability is capped at fees paid or payable in the twelve months preceding a claim, and all consequential, incidental, indirect, exemplary, special, enhanced, and punitive damages are excluded; all fees paid are non-refundable and all services are provided 'as is' with all warranties disclaimed. Supabase prohibits storage or processing of HIPAA-defined protected health information without a signed Business Associate Agreement and storage of payment cardholder data without prior written approval, while providing customers with indemnification against third-party claims that Supabase's services infringe or misappropriate US copyrights or trade secrets.

What this means for you

As a Supabase user, you are bound by this agreement from the moment you access or use the services. Your ability to recover damages is limited to fees paid in the prior twelve months, and categories of loss such as lost business or consequential harm are entirely excluded. You cannot join class actions or bring claims in court, and any fees you pay are non-refundable. If you are a new customer and wish to preserve your right to litigate, you can opt out of the arbitration agreement by emailing legal@supabase.io within thirty days of accepting this agreement.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

3 important changes detected

3 versions captured · Last updated: July 2026

What changed Supabase revised its Terms of Service in an update detected on July 31, 2026, making predominantly formatting and punctuation changes throughout the document. The substantive revisions include clarifying that the Terms govern Cloud Services access unless a separate Order or agreement explicitly states different terms, and adding a new definition for 'Data Processing Addendum' that references a specific URL or separately executed agreement. These changes establish a clearer hierarchy for which terms apply when multiple agreements exist and formalize the role of data processing documentation.
Why this matters The updated Terms of Service establish that the stated terms govern your access to Cloud Services, except where you have entered into a separate Order or agreement with Supabase that explicitly incorporates different terms, in which case those other terms will govern. The revision formalizes a tiered approach to multiple agreements and adds explicit reference to a Data Processing Addendum. These changes clarify which terms apply when multiple agreements are in effect, reducing potential disputes over term hierarchy.
View full change record →

May 6, 2026

medium
What changed Supabase updated its legal entity from a Delaware corporation to a Singapore-based company and refined several procedural details in its Terms of Service. Key changes include clarifying how agreement acceptance works (clicking an explicit 'I Accept' button rather than implicit sign-up), updating documentation URLs, and adding a new section addressing AI-powered support tools. The shift to Singapore incorporation may affect which laws govern disputes and how certain consumer protections apply depending on your location.
Why this matters The relocation of Supabase's legal entity from Delaware to Singapore may affect which jurisdiction's courts and laws apply to disputes, potentially impacting your ability to pursue claims in US courts and changing which consumer protection laws govern your relationship. The requirement to explicitly click 'I Accept' rather than accepting through sign-up or service use clarifies consent but does not substantively change the agreement's terms. The new section on AI-powered tools discloses that Supabase may use AI chatbots for customer support; review that section to understand how such tools may process your inquiries.
View full change record →

May 5, 2026 low

Supabase changed its corporate structure from a Singapore entity (SUPABASE PTE. LTD.) to a Delaware corporation (Supabase, Inc.) on May 5, 2026, updated its office address, and modified the mechanism …

View change record →
Featured, High severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

125 provisions
12 featured
21 clause types
56 high severity
General Contract Terms 29 10 high
Show all 29 general contract terms provisions
Refunds & Chargebacks 2 2 high
Disclosure and Transparency Requirements 1
Stay ahead of the changes

Monitoring

Supabase has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Aggregate Liability Cap at Twelve Months Fees and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
DMA
European Union
View official text ↗
FAA
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured July 31, 2026 01:15 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000681
Version ID CA-V-005408
SHA-256 b582b4bde8947e2d717659cc8b26faf9e839efbdba9c1b8a9fe2c9ef0dd57ead
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans