Live data from Hacker News

Supabase Is SOC2 Compliant

supabase.com

1–9 of 9 posts

Re: Supabase Is SOC2 Compliant

#3
Just to be clear, this seems to suggest that Supabase the company/product is SOC compliant, not that any product/service that you build on Supabase is automatically SOC compliant. Is that correct?

Re: Supabase Is SOC2 Compliant

#6
post #3

Just to be clear, this seems to suggest that Supabase the company/product is SOC compliant, not that any product/service that you build on Supabase is automatically SOC compliant. Is that correct?

It's generally accepted that a SOC2 report of a SaaS provider covers the controls that are the responsibility of the company to manage.

Re: Supabase Is SOC2 Compliant

#7
post #3

Just to be clear, this seems to suggest that Supabase the company/product is SOC compliant, not that any product/service that you build on Supabase is automatically SOC compliant. Is that correct?

Yes. If you built a product on top of supabase and your company wanted to get soc2 compliant, it helps that supabase, one of your vendors, is also compliant.

Re: Supabase Is SOC2 Compliant

#8
post #2

Vanta seems to be running away with the SOC2 market.

Having used a few of these systems, Vanta is great if you enjoy 1) their sales reps brutally trashing their competition on every pre-sales call and 2) getting inundated with unimportant compliance alerts due to their over-emphasis on compliance automation.