Supabase, Inc. Due Diligence
Run due diligence on Supabase, Inc.: check incident history and compliance and get alerts when suppliers or ownership change.
United States · owned by Independent (United States) · supabase.com · 11 vendors
Supabase is an open-source developer platform that provides a suite of tools to build scalable and secure backends. It is often positioned as an alternative to Google's Firebase.
Resilience scores
- Digital Sovereignty: 82
- Digital Resilience: 5
- Financial Resilience: 8
Disruption prediction
Supabase, Inc.: 3 critical incidents expected in the next three months, based on its recorded incident history.
Forecast estimates are rounded up to whole numbers.
No active incident reported (its status page, as of 2026-11-09 23:55 UTC)
8 of Supabase, Inc.'s 11 vendors have incident tracking.
Technology vendors
- Amazon Web Services (aws) — Technology — United States
- Internet Security Research Group (ISRG) — Technology — United States
- Mailgun — Technology — United States
- and 8 more
Services catalogue
8 services in catalogue across 4 categories; runs on 11 sub-vendors.
- Real-time Database
- Backend-as-a-Service
- Edge Functions
Insights
Last updated 2026-07-12 · revision 15
11 direct vendors, 167 subvendors
Direct vendors by controlling owner country (sample)
- United States: 9
- Germany: 1
- Sweden: 1
Subvendors by controlling owner country (sample)
- India: 1
- United States: 122
- Australia: 2
Compliance
8 in-scope frameworks identified; showing 3.
ISO 27001 (source) — Evidence found
Evidence: https://supabase.com/security, https://supabase.com/dashboard/org/_/documents
SOC 2 (source) — Evidence found
Evidence: https://supabase.com/security, https://supabase.com/docs/guides/security/soc-2-compliance, https://supabase.com/dashboard/org/_/documents
CPRA — Evidence found
Evidence: https://supabase.com/privacy, https://supabase.com/legal
Financials
Three-year financials
- 2025:
- 2024:
- 2023:
Financial Resilience Score: 8/10
Supabase is a very well-capitalized private company with approximately $1B raised in total funding, including a fresh $500M Series F led by GIC at a $10B pre-money valuation. This provides a long cash runway even at aggressive burn rates. The investor syndicate is blue-chip (Coatue, Felicis, Y Combinator, Mozilla, Craft, Lightspeed, Stripe, Salesforce Ventures, GIC), and Stripe's reinvestment is a strong positive signal. Growth metrics are exceptional: database launches grew 600% YoY, registered developers reached ~10M (doubling in 8 months), and over 60% of new databases are launched via AI coding tools, positioning Supabase strongly in the AI tailwind. The open-source moat (100k+ GitHub stars, 1,500+ contributors) reduces CAC, and enterprise credentials (SOC 2 Type 2, HIPAA, ISO 27001) support upmarket expansion. However, no audited financials are disclosed—revenue, EBIT, and equity figures are unavailable. The company is likely still loss-making given typical patterns for hyper-growth infrastructure companies, and Series F proceeds are partly for employee secondaries. Competitive pressure from Neon, PlanetScale, Firebase, AWS, MongoDB, and Vercel/Convex is significant, and the $10B valuation is demanding with down-round risk if SaaS multiples contract.
Key strengths: ~$1B in total capital raised, including $500M Series F led by GIC, Blue-chip investor syndicate including Stripe reinvestment and Salesforce Ventures, 600% YoY growth in database launches, ~10 million registered developers, doubling in 8 months, 60%+ of new databases launched via AI coding tools (strong AI tailwind), Open-source moat with 100k+ GitHub stars and 1,500+ contributors, Enterprise compliance credentials (SOC 2 Type 2, HIPAA, ISO 27001), Diversified product surface (DB, Auth, Realtime, Storage, Functions, Vector)
Risk factors: No public financials disclosed—unit economics and burn rate unverifiable, Likely still loss-making with meaningful COGS from managed Postgres at scale, Intense competition from Neon, PlanetScale, Firebase, AWS RDS/Aurora, MongoDB Atlas, Vercel/Convex, Free-tier / cost-of-abuse exposure amplified by AI-generated projects, Demanding $10B pre-money valuation with down-round risk if SaaS multiples contract, Key-person / founder-led with small executive team, Regulatory/data-sovereignty risk given global customer base on US-parent entity
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.