This analysis describes what Supabase's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Customers handling health data who do not obtain a Business Associate Agreement are in breach of this agreement and potentially exposed to regulatory risk.
The updated terms introduce new provisions for Beta Releases, which are provided without warranties, support obligations, or liability for damages including data loss, business interruption, or security vulnerabilities. Supabase reserves the right to delete all Customer Data submitted to Beta Releases at any time without notice, and may modify, suspend, or discontinue any Beta Release without advance notice. The terms also clarify that the contracting entity depends on your purchase method: Supabase Inc. (US) if purchased through a cloud marketplace, or Supabase Pte. Ltd. (Singapore) otherwise. Fee payment mechanisms now include direct account purchases and cloud marketplace purchases, with refunds processed through the marketplace rather than directly by Supabase.
View change record →A reader who handles protected health information must sign a Business Associate Agreement with Supabase before using the services to store or process that data.
How other platforms handle this
your parent(s) or legal guardian(s) are responsible for: (i) your activities while using our Services; (ii) your compliance with this Policy; and (iii) ensuring your use of the Services doesn't violate any child protection laws.
You are not permitted to access or use our Services in any jurisdiction or country if it would be contrary to the law or regulation of that jurisdiction or if it would subject us to the laws of...
Don't create or share defamatory or libelous content that could damage someone's reputation or falsely portray them in a harmful way.
"Customer may not store or process protected health information (as defined in HIPAA) using the Services unless Customer signs a Business Associate Agreement with Supabase.Excerpt from Supabase's Terms of Service
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
Customers handling health data who do not obtain a Business Associate Agreement are in breach of this agreement and potentially exposed to regulatory risk.
A reader who handles protected health information must sign a Business Associate Agreement with Supabase before using the services to store or process that data.
ConductAtlas has identified this type of provision across 237 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Supabase.