Supabase as a production backendnot just as a Firebase replacement.
Scroll uses Supabase on nearly all its projects: business applications, SaaS, Next.js sites, AI tools. We know the platform’s strengths, its blind spots, and what needs to be configured correctly from the start to avoid reworking everything in production.
per tableMigrations versionedSupabase in our projects —
real-world use cases.
No demo. Six configurations we actually deploy, from custom application backends to sovereign hosting — each with its own requirements.
Custom application backend
PostgreSQL schema designed for the use case, versioned migrations, Row Level Security configured from the start. Not an auto-generated schema that needs fixing later.
Authentication and role management
Supabase Auth with JWT, fine-grained role and permission management via RLS, SSO possible (SAML, OIDC for enterprise contexts). Multi-provider authentication configured and tested.
Backend for AI applications
Vector embeddings storage via pgvector, API for LLM agents, MCP servers that expose Supabase data to the model in a controlled way. The database as the AI’s memory.
Firebase replacement
Migration from Firebase (Firestore, Auth, Storage) to Supabase: rethought relational schema, exported and restructured data, migrated authentication. Zero downtime.
Replacing Airtable
For teams that have outgrown Airtable: migration of bases to PostgreSQL, recreation of automations in n8n, and building a custom business interface if needed.
Sovereign hosting
Self-hosted Supabase on OVH or Scaleway for contexts where data cannot leave controlled infrastructure (healthcare, finance, sensitive data).
The topics we address from the start —
not in an emergency in production.
"Using Supabase" and "building a production Supabase backend" are not the same thing. The difference lies in four topics we address during design, not after an incident.
Row Level Security
Supabase’s RLS is powerful and dangerous if misconfigured. A missing or overly permissive RLS policy exposes data. We define and test RLS policies for each table from the schema design stage.
Evolving data schema
A poorly designed schema is expensive to fix once the application is in production. We design the schema with foreseeable evolutions in mind, using versioned migrations via Supabase’s migration tool.
Performance under load
PostgreSQL is performant, and so is Supabase—if indexes are properly set and queries are well-written. We audit slow queries, identify N+1 issues, and configure connection pooling before they become a problem.
Backups and recovery plan
Supabase Cloud offers automatic backups. In self-hosted setups, this must be explicitly configured. We define the backup and disaster recovery strategy from the start, not after an incident.
How Supabase integrates
into a Scroll stack.
Supabase provides the core: data, auth, storage, serverless, real-time, vectors. Around it, open-source components complete the architecture: frontend, back-office, automations, sovereign infra.
Cloud or self-hosted —
how we decide.
Both are genuine Supabase. The choice comes down to one real criterion: can your data be hosted on AWS EU, or must it remain on infrastructure you control?
Supabase Cloud
EU RegionFor most projects: quick start, automatic backups, managed updates, no ops to handle. Data is hosted on AWS eu-west (Ireland), GDPR-compliant for most use cases.
No strict sovereignty constraints, no dedicated ops team, priority on speed to production.
Self-hosted Supabase
OVH / ScalewayFor projects where data cannot leave a controlled infrastructure: healthcare, finance, data covered by demanding client contracts, public sector. We deploy and maintain the Supabase infrastructure on OVH or Scaleway.
Sensitive data, contractual location requirements, contexts where AWS is not acceptable.
Frequently asked questions
The most common questions we hear during scoping. If yours isn’t here, reach out!
Supabase is in your stack or you’re evaluating it — we can review it together.
Technical scoping, audit of your existing setup, or starting from scratch: we adapt to where you are.
75011 Paris