Supabase as a production backend —not just as a Firebase replacement.
Scroll uses Supabase for nearly all its projects: business applications, SaaS, Next.js websites, AI tools. We know the platform’s strengths, its blind spots, and what needs to be configured correctly from the start to avoid reworking everything in production.
per tableMigrations versionedSupabase in our projects —
real-world use cases.
No demo. Six configurations we actually deploy, from custom application backends to sovereign hosting — each with its own specific requirements.
Custom application backend
PostgreSQL schema designed for the use case, versioned migrations, Row Level Security configured from the start. Not an auto-generated schema that needs fixing later.
Authentication and role management
Supabase Auth with JWT, fine-grained role and permission management via RLS, SSO possible (SAML, OIDC for enterprise contexts). Multi-provider authentication configured and tested.
Backend for AI applications
Vector embeddings storage via pgvector, API for LLM agents, MCP servers that expose Supabase data to the model in a controlled way. The database as the AI’s memory.
Firebase replacement
Migration from Firebase (Firestore, Auth, Storage) to Supabase — relational schema rethought, data exported and restructured, authentication migrated. Zero downtime.
Airtable replacement
For teams that have outgrown Airtable: migrating bases to PostgreSQL, recreating automations in n8n, building a custom business interface if needed.
Sovereign hosting
Self-hosted Supabase on OVH or Scaleway for contexts where data cannot leave controlled infrastructure (healthcare, finance, sensitive data).
The topics we address from the start —
not as an emergency in production.
"Doing Supabase" and "building a production-ready Supabase backend" are not the same thing. The difference lies in four key areas we address during design, not after an incident.
Row Level Security
Supabase’s RLS is powerful—and dangerous if misconfigured. A missing or overly permissive RLS policy exposes data. We define and test RLS policies for each table from the schema design phase.
Scalable data schema
A poorly designed schema from the start is costly to fix once the app is in production. We design the schema with future evolutions in mind, using versioned migrations via Supabase’s migration tool.
Performance under load
PostgreSQL is performant, and so is Supabase—if indexes are properly set and queries are well-written. We audit slow queries, identify N+1 issues, and configure connection pooling before it becomes a problem.
Backups and recovery plan
Supabase Cloud offers automatic backups. In self-hosted setups, this must be explicitly configured. We define the backup and disaster recovery strategy from the start, not after an incident.
How Supabase integrates
into a Scroll stack.
Supabase provides the core — data, auth, storage, serverless, realtime, vectors. Around it, open-source building blocks complete the architecture: frontend, back-office, automations, sovereign infra.
Cloud or self-hosted —
how to choose.
Both are genuine Supabase. The choice comes down to one real criterion: can your data be hosted on AWS EU, or must it remain on an infrastructure you control?
Supabase Cloud
EU regionFor most projects: quick start, automatic backups, managed updates, no ops to handle. Data is hosted on AWS eu-west (Ireland) — GDPR-compliant for most use cases.
No strict sovereignty constraints, no dedicated ops team, priority on speed to production.
Supabase self-hosted
OVH / ScalewayFor projects where data cannot leave a controlled infrastructure: healthcare, finance, data covered by demanding client contracts, public sector. We deploy and maintain the Supabase infrastructure on OVH or Scaleway.
Sensitive data, contractual location requirements, contexts where AWS is not acceptable.
Frequently asked questions
The most common questions we get during scoping. If yours isn’t here, reach out!
Supabase is in your stack or you're evaluating it — we can review it together.
Technical scoping, existing configuration audit, or starting from scratch: we adapt to where you are.
75011 Paris