Is this the same as your Supabase expertise page?

No. The expertise page explains self-hosting, technology and operations in general. This product page describes Supabase as a fully configured application on a local App Node, including hardware, hardening and managed operations. Suitability for specific legal requirements is assessed for the actual deployment.

Will our existing application continue unchanged?

Self-hosted Supabase provides the familiar core components. Whether changing only the URL and keys is sufficient depends on cloud-specific functions, versions, authentication, storage and connected services. We assess these points before migration.

Does the App Node require a gateway?

No. The node can operate exclusively on the internal network. If a service needs external access, we design a VPN or secured gateway around the use case and document the resulting data flows.

What happens if the internet connection fails?

Purely local applications can continue to run on the internal network. External access, off-site backups or connected cloud services are unavailable during the outage. The impact depends on the agreed architecture.

Is a DPA sufficient for §203 requirements?

GDPR and Section 203 StGB concern different obligations. The specific deployment requires a combined assessment of technical data flows, involved parties, contracts and any contributing-person obligations. WZ-IT provides the technical documentation and accepts the required obligation where it forms part of the operating model.

Who operates and maintains the App Node?

Under the managed subscription, WZ-IT handles monitoring, updates, technical administration and support for the agreed components. Responsibilities, service windows and operational boundaries are documented in the agreement.

Is the App Node suitable for data held by professional secrecy holders?

Local operation can provide a suitable technical foundation. Whether the full process meets legal and organisational requirements also depends on applications, access, endpoints, backups and connected services and must be assessed for the specific deployment.

What is the Confidential variant (SEV-SNP)?

An upgrade to a larger EPYC server class where memory is encrypted too - so data is protected in all three states: on disk (LUKS), in transit (TLS) and in RAM while running. The compact node itself cannot do this; Confidential is separate, larger hardware for clinics and especially sensitive cases.

How is a later provider change handled?

The deployed open-source applications and agreed configurations are documented. Data and configuration exports, contract term and return of the provided hardware are defined as exit rules in the relevant agreement.

Run Supabase on a local App Node

Postgres, auth, storage, realtime and vector on a compact appliance at your organisation. WZ-IT provides the hardware and platform, configures Supabase and handles the agreed ongoing operations. Access and data flows are designed around your environment.

Postgres, auth, storage, realtime, vector
Local data storage available
Managed operations

Request configuration How it works

Reviews

WZ-IT App Node - local application appliance

IT Beratung Service Consulting Soforthilfe

Customers from mid-sized business, industry and the public sector, in Germany and internationally

Read client reviews

Protection requirements

Use with sensitive and professionally protected data

Data location alone does not answer every compliance question
Sensitive and professionally protected data requires assessment of access, backups, remote maintenance, endpoints and connected services in addition to storage location. The local App Node provides a controllable technical foundation; the specific design is documented and agreed with the controller.
Confidentiality professionals
You want to operate applications and sensitive data on a controllable local platform and define access and external data flows deliberately. Law firms · Medical practices · Tax advisors · Auditors
Companies holding their data
Software and service providers can supply applications for customers with elevated protection requirements under a local, documented operating model. Technical and legal suitability is assessed for the specific process.
From Supabase Cloud or Firebase to your premises
If you already use Supabase Cloud, Firebase or a no-code tool such as Lovable, we assess dependencies and migrate schema, data, authentication and storage to the local App Node in a controlled process.

How it works

Operated locally with access aligned to your environment

01
The App Node runs at your premises
The agreed applications run on the provided hardware at your organisation. Local users and systems reach them directly over the internal network.
02
Access aligned with your environment
The node can remain entirely internal. External access is implemented through NetBird, WireGuard, an existing VPN or a secured gateway.
03
Data flows are defined
Updates, backups, remote maintenance and connected services are deliberately designed before deployment. Required connections and technical measures are documented.

Scope

Included with the managed App Node

Supabase

Supabase stack (Postgres, GoTrue/auth, storage, realtime, PostgREST, Studio) preconfigured
pgvector for embeddings / AI search enabled
Point-in-time recovery and encrypted backups

App Node

Appropriately sized hardware for the contract term
Preconfigured base platform with encryption, firewall and secure administration
Installation and initial configuration of the agreed applications
Internal access or controlled connectivity through VPN or gateway
Backup design aligned with the agreed protection and recovery requirements
Monitoring, updates, technical administration and support by WZ-IT

Sizing · Sized around applications and operational needs

App Node sized to fit
Compact hardware classes for different applications, user counts and data volumes. WZ-IT handles the final sizing.
Confidential
Larger EPYC server class with SEV-SNP for encrypted memory. This variant is sized separately for specific protection requirements.
HA pair
Two nodes with an aligned failover and recovery design for higher availability requirements.

Hardware and operations in one managed subscription: WZ-IT provides suitable hardware, configures the system and application, and handles monitoring, updates and technical support. Applications, hardware class and responsibilities are defined before deployment.

Local application server

WZ-IT App Node

Compact hardware for selected open-source applications at your organisation. WZ-IT provides the node, configures the platform and application, and handles the agreed ongoing operations.

WZ-IT App Nodefrom €349 excl. VAT / monthplus one-time provisioning and initial setup · 6-month minimum term

Request configuration App Node overview

Straightforward provisioning within a few business days

Payment

Bank transfer

The hardware class is selected based on applications, users, data volume and availability requirements. For larger or highly available environments, we design an appropriate server architecture.

Frequently asked questions

Deep dive

Supabase guides

Reviews & projects

Managed open source with consulting and operations

Customer feedback on open-source selection, implementation, maintenance and long-term operations.

Networking & Provisioning

WZ-IT moved our studio infrastructure from decentralised individual devices to a central platform: every site is securely connected via VPN, new devices are onboarded automatically and an entire site is provisioned from a template, without manual steps on location. What impressed me most is the breadth and depth of their knowledge: Timo and Robin are not a typical IT provider who sets up a server and leaves. The two of them think their way into highly complex infrastructure and software topics, work through every requirement we put in front of them, and build networking, provisioning and operations so that everything fits together in the end. WZ-IT is an excellent partner for complex software, network and architecture projects.

Steve KirchnerManaging Director, nextGYM GmbH

View project

International

Built in Germany's Ruhr Valley. Running worldwide.

WZ-IT designs, develops and operates infrastructure and software for clients in Germany and internationally. We deliver projects remotely and continue supporting them in ongoing operations after go-live.