Architecture and migration
Sizing, target environment, data transfer, cutover and recovery are resolved before production operations.

WZ-IT plans, installs and operates Supabase as managed hosting, in your cloud or on premises. Depending on the target design, we also provide migration, secure network and identity integration, monitoring, backups, updates, integrations and further development.
Companies worldwide trust WZ-IT
The following are trademarks of their respective owners: Supabase (Supabase, Inc.). WZ-IT is an independent service provider and has no business, partnership, or contractual relationship with these companies. We offer independent migration, installation, hosting, and operations services.

Supabase is a powerful open-source alternative to Firebase built on PostgreSQL. It provides all the backend features needed by modern web applications, including database, authentication, storage, and serverless functions in a unified platform.
As an independent service provider, we support you in implementing, configuring, and optimizing this versatile backend platform for your projects. Leverage the flexibility and power of Supabase for your next web application or software project.
We install, host and operate Supabase for your company - either on our secure, privacy-focused infrastructure in Germany or other locations, as well as on-premise in your own environment.
We provide 24/7 monitoring, backups and maintenance for your Supabase instance. Human response times and support coverage follow the selected service level.
Migration & cloud exit
Database, auth, storage, functions, RLS and the application are assessed together, rehearsed and switched to the target environment through a planned cutover.
Utilize the full power of PostgreSQL with auto-generated REST and GraphQL APIs for your applications.
Implement secure user logins with email/password, magic links, OAuth, and multi-factor authentication.
Object storage, buckets and access policies can be integrated into the application. CDN and image transformations depend on the selected self-hosted architecture.
TypeScript functions can run in the Supabase runtime. A globally distributed edge deployment is not automatically included with self-hosting and must be designed separately.
Store and search vector embeddings for AI features right alongside your relational data.
Subscribe to database changes, synchronize user states, and broadcast messages in real-time via websockets.
Get automatically generated REST and GraphQL APIs for your PostgreSQL database without additional development effort.
Implement granular security policies at the database level for layered protection of your application data.
For self-hosting, database, storage, Realtime and Functions are sized for measured load and separated or scaled deliberately when required.
Build modern web applications with Supabase as backend. From simple CRUD operations to complex data processing.
With real-time updates, user authentication, and auto-generated APIs, you can focus on frontend development.
The perfect solution for your individual requirements
Supabase does not need to run in isolation. An application can run through Coolify in the cloud while ERP, CMS or operational data remain on premises and connect through an App Node or private network paths.
Postgres, auth, storage, realtime and the application using them are sized together.
Local ERP, CMS and DMS systems stay at their operating location and are reached only through defined paths.
Deployment, backup, monitoring, updates and recovery are organised with explicit responsibility.
As an alternative to managed hosting in the data centre, WZ-IT provides the hardware, configures Supabase, and handles hardening, monitoring, updates, backup and technical support. Access can be limited to the internal network or enabled through VPN and existing identities.
from EUR 349 excl. VAT / month · plus one-time provisioning and initial setup

Professional installation on your infrastructure - on-premise, cloud or hybrid
In your data center
AWS, Azure, Hetzner & more
Advanced architecture after technical and licence assessment
PostgreSQL-based platform with an automatically generated REST API, GraphQL support and realtime subscriptions
Row Level Security (RLS), OAuth Providers (Google, GitHub, etc.), Magic Links and secure JWT-based authentication
Serverless Functions with Deno Runtime and S3-compatible Object Storage for files and media
WebSocket-based Realtime Updates for database changes, Broadcast Channels and Presence tracking
pgvector Extension for AI/ML applications with semantic search and vector similarity
Self-hosted operation with controllable data storage and documented dependencies
Secure access and access control for your installation
WireGuard, NetBird or Tailscale
Directly or through an upstream identity layer
Depends on application, edition and identity provider
Fail2Ban, Rate Limiting, IP Whitelisting
We set up secure VPN access to your installation - ideal for remote work and external employees.
Full-service installation with no hidden costs
Supabase is more than a database. It's a complete backend ecosystem. We use the full power of PostgreSQL (extensions, triggers) combined with global Edge Functions.
Business logic doesn't belong in the client. We develop performant Edge Functions for payment processing (Stripe), PDF generation, or AI inference, running securely and close to the user.
We make your database reactive. A new user registers? A trigger automatically creates profiles, sends welcome emails via webhook, or updates statistics - atomic and transaction-safe.
Security starts in the database. We design complex Row Level Security (RLS) policies ensuring User A never sees User B's data. We also leverage extensions like pgvector for AI search.
How we implement Supabase development in practice.
You are building a SaaS and must guarantee strict data separation between tenants without operating a separate DB for each.
Implementation of an RLS architecture based on `tenant_id`. The frontend uses the Supabase client while the database enforces the defined policies. Automated isolation tests and restricted service roles reduce the risk of cross-tenant access.
Users should see who is currently working on the same document (cursor tracking, live edits), like in Google Docs.
Using the Supabase Realtime API (Broadcast & Presence). We synchronize state between clients in milliseconds without having to operate our own WebSocket servers.
Standard text search delivers poor results. Users want semantic search ('documents about climate change' instead of keyword match).
Integration of `pgvector`. We store embeddings of your data directly in Postgres and enable ultra-fast similarity search via Edge Functions.
We do more than provide an application. WZ-IT designs the technical architecture, integrates network and identity, operates the agreed scope and develops integrations when the standard product is not enough.
Sizing, target environment, data transfer, cutover and recovery are resolved before production operations.
SSO, secure access, internal systems and existing security components are integrated appropriately.
Updates, backups, technical monitoring and response paths follow a transparent operational scope.
APIs, automation and custom extensions can be delivered beyond basic deployment.
The exact scope depends on the application, edition, infrastructure and criticality. Vendor licences and non-standard components are quoted separately.
Development and automation platforms need controlled execution, secrets, persistent data and clearly bounded connections to source and target systems.
Teams, repositories, webhooks, schedules and business systems initiate defined processes.
TLS, firewall rules, reverse proxies or private network paths are designed around the platform's exposure.
Local accounts, SSO, directories, service accounts and emergency access are connected through clear roles.
Editor, API, build or workflow runtimes are deployed reproducibly and isolated appropriately.
Metadata, configuration, source state, packages or execution history.
Queues, runners, containers, resource limits and separated execution environments.
Service accounts, secrets and controlled network paths to internal and external systems.
The diagram is a resilient target model. Its implementation depends on edition, data flows, load, availability objectives and existing infrastructure.
A clearly defined operating scope instead of an opaque hosting flat fee.
We set up a test instance for you, usually on the next business day. No payment details required. After seven days it is deleted unless you continue.
Compute, applications, storage and response are shown separately. You can see what ongoing operations include and which requirements need a technical assessment.
We also design custom Supabase architectures, integrations and migrations. Contact us for a technical assessment.
One managed standard Supabase application is included in the Starter workload. Business and higher levels add a flexible operations allowance for planned work during regular service hours. Select compute, additional applications, storage and the appropriate service level.
A workload is one compute instance with the applications agreed for it.
One standard app per workload is already included. Additional dedicated servers count as separate workloads.
€7.99 excl. VAT per additional 100 GB per month, including daily encrypted offsite backup with 7-day retention. Billing is based on provisioned capacity, not actual usage.
We also implement custom backup schedules and retention periods. For example: daily backups retained for 30 days and one monthly backup retained for 12 months. Scope, storage requirements and additional costs are agreed separately.
+€299 excluding VAT per workload and month
Standard hosting runs on a single instance without high availability. Availability for custom architectures is agreed separately.
Zero downtime on request
Distributed operation with several instances, a database cluster and rolling updates, so that a node failure causes no interruption. Only for applications suited to it; design and price after technical assessment.
This page covers installation and the agreed platform operations for Supabase. Custom code, the access layer and special confidentiality requirements remain clearly separated responsibilities that can be added when needed.
Maintain the application
Keep custom extensions, interfaces and dependencies controlled, updated and supportable.
from €699.90 excl. VAT / month
View serviceSecure access
Add identity-based access and private network paths as a separate operational layer.
from €349.90 excl. VAT / month
View serviceOperate confidentially
For professional secrecy holders, define contractual, access and infrastructure requirements in a dedicated operating model.
from €499.90 excl. VAT / month
View serviceThree relevant adjacent paths instead of a long list of further products.
All prices are net and exclude statutory VAT. The offers are addressed to businesses.
View the overall systemEnquiry
Briefly describe the current state and objective for Supabase. We assess infrastructure, integration, and ongoing operations.
Answers to the most important questions
Topics
Supabase is an open-source Backend-as-a-Service (BaaS) platform based on PostgreSQL. It combines database, authentication, storage, real-time features, auto-generated APIs and serverless functions for modern web or mobile apps.
The self-hosted stack combines PostgreSQL, Auth, Storage, auto-generated APIs, Realtime and a Functions runtime. Globally distributed edge execution, CDN and managed-cloud platform capabilities must be assessed separately.
Supabase is suitable for web and mobile apps, SaaS, applications with relational data structure, real-time functionality or AI/ML applications that require data storage, auth and API access.
Since Supabase is based on PostgreSQL and is open source, you get real SQL performance, control over data location and access and no dependency on proprietary services. In addition, there are ready-to-use backend blocks and great flexibility.
Yes - Supabase supports real-time subscriptions and realtime features, so apps with live data, chats, notifications or synchronized data can be easily implemented.
Yes - Supabase can run on your own infrastructure. This allows you to design data location, networking and operations, while security and privacy still depend on configuration, integrations and processes.
The self-hosted stack covers important core components, but it is not equivalent to every operating and platform capability of Supabase Cloud. We verify version, upgrade path and required features before deployment.
Self-hosting requires your own infrastructure, administration, updates and maintenance. Depending on the project scope, it takes time and know-how for scaling, backup & security.
Data volume alone is not sufficient for sizing. Query patterns, connections, Realtime, Storage, Functions and availability or recovery targets determine which components should be separated or scaled.
Depending on usage, the PostgreSQL database, Auth configuration, storage objects, secrets, Functions, Realtime and application settings must be considered. We plan a test migration, validation, cutover and rollback path for the existing setup.
Yes - Supabase supports environments such as development, staging or production. With migration tools and versioning of the database schema, deployments can be implemented in a structured manner.
SSL/HTTPS, secure auth tokens or passwords, role-based access and possibly Row Level Security (RLS) are recommended. For AI/vector workloads, it's worth keeping embeddings and operational data in separate databases.
The self-hosted stack includes database, auth, storage, realtime, APIs and functions. Managed platform capabilities such as branching, managed backups and PITR, advanced metrics or the management API are not included automatically and must be covered by the target architecture where required.
Yes - Supabase supports vector/embedding data via the pgvector extension. This allows embeddings to be stored and queried with vector similarity searches - the basis for semantic search or AI-powered research.
You create embeddings (e.g. via LLM or embedding model), store them in a vector(...) column (via pgvector), and use vector similarity queries or edge functions for semantic search or RAG workflows.
Semantic document search, knowledge bases with AI-powered search, chatbots with access to documents, RAG systems, recommendation systems, full-text or semantic search across large text or document collections.
Activate the pgvector extension, correctly define the embeddings column, implement embeddings generation and synchronization, plan backup & scaling for large embedding volumes and monitor performance.
pgvector handles storage and vector search within PostgreSQL. Supabase does not generate embeddings or answers itself; a separately operated local model or an external model service must be connected.
Yes - by combining relational structures (for metadata, access rights) and embeddings/vector search, Supabase is excellently suited as a backend for knowledge management or document retrieval systems.
If you have large data or AI workloads, defined availability objectives, compliance requirements or no dedicated operations team, professional operations can reduce risk and internal effort.
When data protection, compliance, operational security, scaling, monitoring or complex data and embedding workloads matter, professional operations can reduce risk and internal effort.
More questions? We are happy to help!
Contact us now22.05.2026
Vibe coding has become mainstream in 2026. If you search for Lovable vs Bolt vs v0, you are probably trying to answer one practical question:...
03.06.2026
AI tools such as Lovable, Bolt, v0, Replit or Cursor have changed software development. An idea turns into a working app within hours, often without...
These solutions are often used together with Supabase
These solutions offer similar functionalities and can be evaluated together
These solutions are direct alternatives with similar use cases
No risk: worst case, you leave with a clearer understanding of your project than before.


“WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.”
“WZ-IT moved our studio infrastructure from decentralised individual devices to a central platform: every site is securely connected via VPN, new devices are onboarded automatically and an entire site is provisioned from a template, without manual steps on location. What impressed me most is the breadth and depth of their knowledge: Timo and Robin are not a typical IT provider who sets up a server and leaves. The two of them think their way into highly complex infrastructure and software topics, work through every requirement we put in front of them, and build networking, provisioning and operations so that everything fits together in the end. WZ-IT is an excellent partner for complex software, network and architecture projects.”

Steve Kirchner
Managing Director, nextGYM GmbH

Whether a specific IT challenge or just an idea - we look forward to the exchange. In a brief conversation, we'll evaluate together if and how your project fits with WZ-IT.