Architecture and migration
Sizing, target environment, data transfer, cutover and recovery are resolved before production operations.

WZ-IT plans, installs and operates Supabase as managed hosting, in your cloud or on premises. Depending on the target design, we also provide migration, secure network and identity integration, monitoring, backups, updates, integrations and further development.
The following are trademarks of their respective owners: Supabase (Supabase, Inc.). WZ-IT is an independent service provider and has no business, partnership, or contractual relationship with these companies. We offer independent migration, installation, hosting, and operations services.

Supabase is a powerful open-source alternative to Firebase built on PostgreSQL. It provides all the backend features needed by modern web applications, including database, authentication, storage, and serverless functions in a unified platform.
As an independent service provider, we support you in implementing, configuring, and optimizing this versatile backend platform for your projects. Leverage the flexibility and power of Supabase for your next web application or software project.
We install, host and operate Supabase for your company - either on our secure, privacy-focused infrastructure in Germany or other locations, as well as on-premise in your own environment.
We provide 24/7 monitoring, backups and maintenance for your Supabase instance. Human response times and support coverage follow the selected service level.
Utilize the full power of PostgreSQL with auto-generated REST and GraphQL APIs for your applications.
Implement secure user logins with email/password, magic links, OAuth, and multi-factor authentication.
Object storage, buckets and access policies can be integrated into the application. CDN and image transformations depend on the selected self-hosted architecture.
TypeScript functions can run in the Supabase runtime. A globally distributed edge deployment is not automatically included with self-hosting and must be designed separately.
Store and search vector embeddings for AI features right alongside your relational data.
Subscribe to database changes, synchronize user states, and broadcast messages in real-time via websockets.
Get automatically generated REST and GraphQL APIs for your PostgreSQL database without additional development effort.
Implement granular security policies at the database level for layered protection of your application data.
For self-hosting, database, storage, Realtime and Functions are sized for measured load and separated or scaled deliberately when required.
Build modern web applications with Supabase as backend. From simple CRUD operations to complex data processing.
With real-time updates, user authentication, and auto-generated APIs, you can focus on frontend development.
The perfect solution for your individual requirements
Whether you run Supabase in-house or need to host confidentiality-professional data §203-ready - we build, operate and maintain Supabase on an encrypted on-site server. Data never leaves the building in cleartext.
See Supabase on-premise
Professional installation on your infrastructure - on-premise, cloud or hybrid
In your data center
AWS, Azure, Hetzner & more
Advanced architecture after technical and licence assessment
PostgreSQL-based platform with an automatically generated REST API, GraphQL support and realtime subscriptions
Row Level Security (RLS), OAuth Providers (Google, GitHub, etc.), Magic Links and secure JWT-based authentication
Serverless Functions with Deno Runtime and S3-compatible Object Storage for files and media
WebSocket-based Realtime Updates for database changes, Broadcast Channels and Presence tracking
pgvector Extension for AI/ML applications with semantic search and vector similarity
Self-hosted operation with controllable data storage and documented dependencies
Secure access and access control for your installation
WireGuard, NetBird or Tailscale
Directly or through an upstream identity layer
Depends on application, edition and identity provider
Fail2Ban, Rate Limiting, IP Whitelisting
We set up secure VPN access to your installation - ideal for remote work and external employees.
Full-service installation with no hidden costs
Supabase is more than a database. It's a complete backend ecosystem. We use the full power of PostgreSQL (extensions, triggers) combined with global Edge Functions.
Business logic doesn't belong in the client. We develop performant Edge Functions for payment processing (Stripe), PDF generation, or AI inference, running securely and close to the user.
We make your database reactive. A new user registers? A trigger automatically creates profiles, sends welcome emails via webhook, or updates statistics - atomic and transaction-safe.
Security starts in the database. We design complex Row Level Security (RLS) policies ensuring User A never sees User B's data. We also leverage extensions like pgvector for AI search.
How we implement Supabase development in practice.
You are building a SaaS and must guarantee strict data separation between tenants without operating a separate DB for each.
Implementation of an RLS architecture based on `tenant_id`. The frontend uses the Supabase client while the database enforces the defined policies. Automated isolation tests and restricted service roles reduce the risk of cross-tenant access.
Users should see who is currently working on the same document (cursor tracking, live edits), like in Google Docs.
Using the Supabase Realtime API (Broadcast & Presence). We synchronize state between clients in milliseconds without having to operate our own WebSocket servers.
Standard text search delivers poor results. Users want semantic search ('documents about climate change' instead of keyword match).
Integration of `pgvector`. We store embeddings of your data directly in Postgres and enable ultra-fast similarity search via Edge Functions.
We do more than provide an application. WZ-IT designs the technical architecture, integrates network and identity, operates the agreed scope and develops integrations when the standard product is not enough.
Sizing, target environment, data transfer, cutover and recovery are resolved before production operations.
SSO, secure access, internal systems and existing security components are integrated appropriately.
Updates, backups, technical monitoring and response paths follow a transparent operational scope.
APIs, automation and custom extensions can be delivered beyond basic deployment.
The exact scope depends on the application, edition, infrastructure and criticality. Vendor licences and non-standard components are quoted separately.
Development and automation platforms need controlled execution, secrets, persistent data and clearly bounded connections to source and target systems.
Teams, repositories, webhooks, schedules and business systems initiate defined processes.
TLS, firewall rules, reverse proxies or private network paths are designed around the platform's exposure.
Local accounts, SSO, directories, service accounts and emergency access are connected through clear roles.
Editor, API, build or workflow runtimes are deployed reproducibly and isolated appropriately.
Metadata, configuration, source state, packages or execution history.
Queues, runners, containers, resource limits and separated execution environments.
Service accounts, secrets and controlled network paths to internal and external systems.
The diagram is a resilient target model. Its implementation depends on edition, data flows, load, availability objectives and existing infrastructure.
A clearly defined operating scope instead of an opaque hosting flat fee.
We set up a test instance for you, usually on the next business day. No payment details required. After seven days it is deleted unless you continue.
Compute, applications, storage and response are shown separately. You can see what ongoing operations include and which requirements need a technical assessment.
We also design custom Supabase architectures, integrations and migrations. Contact us for a technical assessment.
One managed standard Supabase application is included in the Starter workload. Every service level also includes flexible expert time for planned work during regular service hours. Select compute, additional applications, storage and the appropriate service level.
A workload is one compute instance with the applications agreed for it.
One standard app per workload is already included. Additional dedicated servers count as separate workloads.
€79.90 per started TB and month, including daily encrypted offsite backup with 7-day retention.
Briefly describe the current state and objective for Supabase. We assess infrastructure, integration, and ongoing operations.
Answers to the most important questions
Topics
Supabase is an open-source Backend-as-a-Service (BaaS) platform based on PostgreSQL. It combines database, authentication, storage, real-time features, auto-generated APIs and serverless functions for modern web or mobile apps.
The self-hosted stack combines PostgreSQL, Auth, Storage, auto-generated APIs, Realtime and a Functions runtime. Globally distributed edge execution, CDN and managed-cloud platform capabilities must be assessed separately.
Supabase is suitable for web and mobile apps, SaaS, applications with relational data structure, real-time functionality or AI/ML applications that require data storage, auth and API access.
Since Supabase is based on PostgreSQL and is open source, you get real SQL performance, control over data location and access and no dependency on proprietary services. In addition, there are ready-to-use backend blocks and great flexibility.
Yes - Supabase supports real-time subscriptions and realtime features, so apps with live data, chats, notifications or synchronized data can be easily implemented.
Yes - Supabase can run on your own infrastructure. This allows you to design data location, networking and operations, while security and privacy still depend on configuration, integrations and processes.
The self-hosted stack covers important core components, but it is not equivalent to every operating and platform capability of Supabase Cloud. We verify version, upgrade path and required features before deployment.
Self-hosting requires your own infrastructure, administration, updates and maintenance. Depending on the project scope, it takes time and know-how for scaling, backup & security.
Data volume alone is not sufficient for sizing. Query patterns, connections, Realtime, Storage, Functions and availability or recovery targets determine which components should be separated or scaled.
Depending on usage, the PostgreSQL database, Auth configuration, storage objects, secrets, Functions, Realtime and application settings must be considered. We plan a test migration, validation, cutover and rollback path for the existing setup.
Yes - Supabase supports environments such as development, staging or production. With migration tools and versioning of the database schema, deployments can be implemented in a structured manner.
SSL/HTTPS, secure auth tokens or passwords, role-based access and possibly Row Level Security (RLS) are recommended. For AI/vector workloads, it's worth keeping embeddings and operational data in separate databases.
Yes - the self-hosted version offers the same core features as hosted: database, auth, storage, realtime, API, functions. There may be temporary delays with new features.
Yes - Supabase supports vector/embedding data via the pgvector extension. This allows embeddings to be stored and queried with vector similarity searches - the basis for semantic search or AI-powered research.
You create embeddings (e.g. via LLM or embedding model), store them in a vector(...) column (via pgvector), and use vector similarity queries or edge functions for semantic search or RAG workflows.
Semantic document search, knowledge bases with AI-powered search, chatbots with access to documents, RAG systems, recommendation systems, full-text or semantic search across large text or document collections.
Activate the pgvector extension, correctly define the embeddings column, implement embeddings generation and synchronization, plan backup & scaling for large embedding volumes and monitor performance.
pgvector handles storage and vector search within PostgreSQL. Supabase does not generate embeddings or answers itself; a separately operated local model or an external model service must be connected.
Yes - by combining relational structures (for metadata, access rights) and embeddings/vector search, Supabase is excellently suited as a backend for knowledge management or document retrieval systems.
If you have large data or AI workloads, defined availability objectives, compliance requirements or no dedicated operations team, professional operations can reduce risk and internal effort.
When data protection, compliance, operational security, scaling, monitoring or complex data and embedding workloads matter, professional operations can reduce risk and internal effort.
More questions? We are happy to help!
Contact us nowThese solutions are often used together with Supabase
These solutions offer similar functionalities and can be evaluated together
These solutions are direct alternatives with similar use cases
No risk: worst case, you leave with a clearer understanding of your project than before.


“WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.”
Whether a specific IT challenge or just an idea - we look forward to the exchange. In a brief conversation, we'll evaluate together if and how your project fits with WZ-IT.
Timo Wevelsiep & Robin Zins
Managing Directors of WZ-IT
