SupaSafe

SupaSafe is a service designed to provide encrypted, independent backups for Supabase databases, addressing limitations in Supabase's built-in backup options. It enables users to fully control and own their database backups, offering features not present in the default provider solution.

Key capabilities include the ability to create downloadable backups, implement zero-knowledge encryption, and schedule backups on a weekly or daily basis. Users connect by pasting their Supabase connection string, which is then encrypted using AES-256-GCM. The platform runs pg_dump on the chosen schedule, with automatic retries to ensure backup reliability. Each backup is available for download via signed URLs and comes with a SHA-256 checksum for integrity verification. SupaSafe also supports backup failure alerts and works with any Supabase plan, making it adaptable for various user needs.

Security is a central focus, with database credentials encrypted at rest using AES-256-GCM and a unique initialization vector generated for every operation. A zero-knowledge option is available, allowing users to upload their RSA-4096 public key for additional privacy. The service claims eleven nines of durability for stored backups, emphasizing data reliability.

SupaSafe is accessible through a web interface and includes a free tier, although the free plan does not provide backups. Pro backups are not downloadable according to the stated feature comparison. No payment card is required to start using the service. SupaSafe is suited for users of Supabase who require greater control, security, and flexibility over their database backup processes.