Openwake · evidence pack

Supabase

https://supabase.com · record 616 · read 2026-10-13 · rules/v1 · generated 2026-10-23 04:21 UTC

Facts

Trains on customer data
unclear
No supporting text found in the documents read.
privacy policy · https://supabase.com/privacy · confidence 0.20
Opt-out mechanism
* Nevada: Chapter 603A of the Nevada Revised Statutes permits a Nevada resident to opt out of future sales of certain covered information that a website operator has collected or will collect about the resident.
“* Nevada: Chapter 603A of the Nevada Revised Statutes permits a Nevada resident to opt out of future sales of certain covered information that a website operator has collected or will collect about the resident.”
privacy policy · https://supabase.com/privacy · confidence 0.50
AI features
present
“This includes any inputs you provide to our AI-powered support tools and outputs generated in response to your inputs.”
privacy policy · https://supabase.com/privacy · confidence 0.55
Model providers named
none named
No supporting text found in the documents read.
privacy policy · https://supabase.com/privacy · confidence 0.20
Retention
60 days
“(f) Contact information – if you have an account with us, we retain this for as long as you have an account on our services, and for 60 days after you close your account.”
privacy policy · https://supabase.com/privacy · confidence 0.50
Hosting regions
not stated
No supporting text found in the documents read.
privacy policy · https://supabase.com/privacy · confidence 0.20
Subprocessor notice
5 days
“Customer shall notify Supabase if it objects to the proposed change to the Authorized Sub-processors (including, where applicable, when exercising its right to object under clause 9(a) of the SCCs) by providing Supabase with written notice of the objection within five (5) days after Supabase has provided notice to Customer of such proposed change (an “Objection”).”
dpa · https://supabase.com/legal/dpa · confidence 0.55

Subprocessors (0)

NameCategoryLocationQuoted from
None listed.

Sources read

DocumentURLReadContent hashLedger
dpahttps://supabase.com/legal/dpa2026-09-0675e337dac79e15ed…seq 478
privacy_policyhttps://supabase.com/privacy2026-10-13e3aee2931775c5d6…seq 53175
Ledger proof for this record.
seq 53395 · key 2f898a895f05b7a0 · 2026-10-13T05:19:29.268Z
hash cdd5978113e5f852f717a490c7c1a928147a9d417d4942a90b738b8321ab247b
prev 2cec18c5e40f29dbd9e70ac6e0f9ff5ce7a513416eefdb3dc76e89adffbd1e89
payload 455f1bb236c6d29b857361aea0b42d0af13039b9637a948be820d58b2f805b58
signature rDaauYh9CCjkn6gQDUVTBV/IOlJl8taqvN016re6QpOL8Ik28kTXZXdPolaMmWPiYsEqdYMAGabRFuQy8uYKAg==
anchored 2026-10-13 at head seq 53553 29b831e17d49be9d0c48e24c727cfa82ce9b500faacabb488dae167a42404d31
Fetch /v1/keys; for each ledger entry recompute sha256(prev_hash|kind|ref_id|payload_hash|created_at ISO) and verify the Ed25519 signature over that hash. Anchors are committed to git; compare the anchored head with the chain.