/RLS
Works alongside Row Level Security.
CipherStash encryption layers on top of Supabase RLS. Defense in depth without compromises.
§ 00·0x00/SUPABASE + CIPHERSTASH
SUPABASE PARTNER
Build privacy-first apps on Supabase.
CipherStash is the encryption layer for privacy-first Supabase apps. Your database stores only ciphertext. Supabase never sees your plaintext, and neither do we.
10K operations/month freeNo credit card requiredWorks with existing Supabase projects
§ 01·0x01/INTEGRATION PATHS
Three ways to encrypt.
Every path gives you the same encryption guarantees. Pick the one that fits your stack.
/SDK
Works with any Postgres client connected to Supabase.
Define a schema, encrypt fields, and query ciphertext. Works with any driver or ORM.
/SUPABASE-JS
Same API. Automatic encryption.
The encryptedSupabase wrapper gives you the Supabase JS SDK you already know with transparent encryption underneath.
/PRISMA-NEXT
Encrypted fields in your Prisma Next data contract.
Declare encrypted fields directly in the data contract. Prisma Next manages the columns and encrypted indexes for you.
§ 02·0x02/SETUP
Three steps to encrypted Supabase data.
01
Install
Install the SDK.
One command to set up encryption in your project.
02
Setup
Setup the database.
Bootstrap your database for full searchable encryption capabilities.
03
Query
Start encrypting.
Pick any of the three integration paths above and start encrypting. Your existing queries keep working.
§ 03·0x03/ECOSYSTEM
Built for Supabase developers.
Encryption that fits into the Supabase ecosystem, not against it.
/SEARCH
Searchable encryption.
Equality, free text search, and range queries all work on encrypted data, with sub-millisecond overhead. No decryption round-trips.
/SCHEMA
Schema-first encryption.
Define your encryption schema once, then use it everywhere. Fully typed and compatible with your stack.
/INDEXES
Postgres indexes work with encrypted data.
Create indexes on encrypted columns just like you would with plaintext columns.
/PARTNER
Supabase partner.
CipherStash is a Supabase partner. Audited, trusted, and supported.
§ 04·0x04/USE CASES
Built for HealthTech and FinTech.
Supabase encrypts your database at rest by default. Field-level encryption goes further, and two industries already need it.
/HEALTHTECH
HIPAA-ready on the plan you already have.
ePHI encrypted at the field level, identity-bound decryption, and every access logged. A proposed HIPAA update would make ePHI encryption mandatory. Get ahead of it.
HIPAA →/FINTECH
PCI DSS 4, met on Supabase.
Disk encryption alone stopped counting for stored cardholder data in March 2025. Render PAN unreadable at the field level, queries intact.
PCI DSS 4 →§ 05·0x05/PRIVACY-FIRST
Control follows the data, not the perimeter.
Every value is encrypted with its own key and decrypted only under policy. Row Level Security controls which rows return. CipherStash keeps the values encrypted wherever they go.
§ 06·0x06/GET STARTED
Make your Supabase project privacy-first today.
Add CipherStash encryption in minutes. Free tier includes 10K operations/month.