Vendor registry · Hosting and infrastructure
Supabase: DPA, subprocessors and transfers
Last checked 16 September 2026. Changes to this record are tracked.
- Contracting legal entity
- Supabase Pte. Ltd
- Country of registration
- Singapore
- Transfer mechanism
- Standard contractual clauses (SCC)
Contract terms adopted by the European Commission that the vendor signs to protect personal data transferred outside the EEA. Usually part of the vendor's DPA.
- Data processing agreement
- https://supabase.com/legal/dpa
- Subprocessor list
- https://supabase.com/legal/customer-resources/subprocessor-list
- Security or trust page
- https://supabase.com/security
- Data regions
- EU, US, APAC
What to put in your subprocessor list
A ready row. Replace the purpose with what your client actually uses Supabase for.
| Subprocessor | Legal entity | Country | Purpose | Transfer | DPA |
|---|---|---|---|---|---|
| Supabase | Supabase Pte. Ltd | SG | Hosting and infrastructure | SCC | https://supabase.com/legal/dpa |