Supabase 安全
Supabase 是一个托管平台，可以让你快速上手，无需自己管理任何基础设施。这个托管平台配备了由 Supabase 管理的许多安全和合规控制。
🌐 Supabase is a hosted platform to get you started without needing to manage any infrastructure yourself. The hosted platform comes with many security and compliance controls managed by Supabase.
合规 #
🌐 Compliance
Supabase 符合 SOC 2 类型 2 标准，并且定期接受审计。在 Supabase 的所有项目中，都遵循同一套合规控制。 SOC 2 合规指南 会更详细地解释 Supabase 的 SOC 2 责任和控制措施。
🌐 Supabase is SOC 2 Type 2 compliant and regularly audited. All projects at Supabase are governed by the same set of compliance controls. The SOC 2 Compliance Guide explains Supabase's SOC 2 responsibilities and controls in more detail.
HIPAA 合规指南 解释了 Supabase 的 HIPAA 责任。对于处理电子受保护健康信息 (ePHI) 并需要 HIPAA 合规的项目，还有额外的 安全和合规控制措施，可以通过 HIPAA 附加组件获得。
🌐 The HIPAA Compliance Guide explains Supabase's HIPAA responsibilities. Additional security and compliance controls for projects that deal with electronic Protected Health Information (ePHI) and require HIPAA compliance are available through the HIPAA add-on.
Supabase 拥有 ISO 27001 认证。ISO 27001 是一个国际公认的信息安全管理体系（ISMS）标准，证明我们保持严格的控制措施来保护客户数据。企业和团队客户可以在我们的仪表板查看 ISO 27001 证书。
🌐 Supabase is ISO 27001 certified. ISO 27001 is an internationally recognized standard for information security management systems (ISMS), confirming that we maintain rigorous controls to protect customer data. Enterprise and Team customers can access our ISO 27001 certificate on the dashboard.
Supabase 支持与 GDPR 相关的要求，提供在欧盟地区托管以满足数据驻留需求，并为需要的客户提供数据处理协议 (DPA)。GDPR 合规指南 涵盖了共享责任、驻留范围和 DPA。
🌐 Supabase supports GDPR-related requirements with EU-region hosting for data residency and a Data Processing Agreement (DPA) for customers who need one. The GDPR compliance guide covers shared responsibility, residency scope, and the DPA.
平台配置 #
🌐 Platform configuration
作为一个托管平台，Supabase 提供额外的安全控制，以根据组织自身的需求或义务进一步增强安全性。
🌐 As a hosted platform, Supabase provides additional security controls to further enhance the security posture depending on organizations' own requirements or obligations.
这些可以在组织设置下的专用安全页面中找到。详细说明请看这里。
🌐 These can be found under the dedicated security page under organization settings. And are described in greater detail here.
Supabase 通过 Cloudflare 在边缘防护分布式拒绝服务（DDoS）攻击。在基础设施层面，fail2ban 会在检测到重复滥用行为（例如认证失败尝试）后阻止相关 IP 地址。
🌐 Supabase protects against Distributed Denial of Service (DDoS) attacks at the edge via Cloudflare. At the infrastructure layer, fail2ban blocks IP addresses after repeated log-detected abuse, such as failed authentication attempts.
产品配置 #
🌐 Product configuration
Supabase 提供的每个产品都带有可定制的安全控制，这些安全控制可以帮助确保在 Supabase 上构建的应用是安全的、合规的，并能够抵御各种威胁。
🌐 Each product offered by Supabase comes with customizable security controls and these security controls help ensure that applications built on Supabase are secure, compliant, and resilient against various threats.
安全配置指南 提供了配置各个产品的详细信息。
🌐 The security configuration guides provide detailed information for configuring individual products.