Munaf Khatri: Supabase is one part of your HIPAA compliance

T2Covered by 1 source · first reported by Planet PostgreSQL at 29 Oct, 12:00 UTC

If you store PHI on Supabase, you need a signed BAA and a project set to High Compliance. That takes care of the platform. It doesn't cover your RLS policies, your functions or your audit tables, and a HIPAA review will ask about those too. Supabase's shared responsibility model says the same. It…

cloud

Sources

• T2Munaf Khatri: Supabase is one part of your HIPAA compliancePlanet PostgreSQL29 Oct, 12:00