Supabase MILITARY

Target: Supabase, Inc. Domain: Military - Military Forensics Research date: 23 October 2026 Evidence period: 2020–2026 Request ID: 03fea992-9b8a-4a26-b3ca-1936289d4a24

Direct Defence Contracting & Procurement

Corporate identification and relevant entities

Supabase was founded in 2020 and is identified by Y Combinator as an active developer-infrastructure company whose founders are Paul Copplestone, CEO, and Ant Wilson, CTO.¹

Supabase describes its commercial offering as an open-source PostgreSQL development platform providing database, authentication, storage, realtime and server-side application infrastructure.²

The company announced a $500 million Series F financing on 4 June 2026, led by GIC, with additional participation from existing investors and named participants including Stripe, Georgian and Salesforce Ventures.³

Supabase’s company disclosures identify institutional investors including Accel, Craft, Coatue, Felicis, Peak XV and Y Combinator, alongside individual investors.⁴

Israeli Ministry of Defence and security procurement

No public evidence identified of a direct procurement contract, framework agreement, tender award or memorandum of understanding between Supabase and the Israeli Ministry of Defence, Israel Defense Forces, Israel Prison Service or Israel Border Police.

No public evidence identified of a publicly disclosed Supabase contract value, Israeli defence procurement reference number, military contracting subsidiary or military-specific service agreement.

Defence directories and procurement registries

No public evidence identified of a Supabase listing as an Israeli defence exporter or military supplier in a SIBAT directory, defence exhibition catalogue or Israeli military procurement register.

Official announcements

Supabase’s June 2026 financing announcement describes investment in open-source database infrastructure, company growth and employee liquidity, without announcing Israeli military or defence-industry cooperation.³

No public evidence identified of a corporate or governmental announcement documenting joint Israeli military development, procurement or defence cooperation involving Supabase.

Documented US defence acquisition customer - GovSignals

Supabase publishes a customer case study identifying GovSignals as a company using its technology to provide AI-powered government procurement discovery, proposal automation and collaboration services to government contractors.⁵

The case study identifies Supabase as the core backend supporting GovSignals across commercial, FedRAMP and Impact Level 5 (IL5) environments.⁵

On 18 March 2025, GovSignals announced a multimillion-dollar contract with the US Defense Innovation Unit to improve government acquisition workflows, describing an expansion from services for government contractors into services directly supporting government agencies.⁶

GovSignals’ current corporate website describes its product as an acquisition platform serving both government agencies and industry, with examples relating to US military procurement requirements.⁷

GovSignals announced on 23 February 2026 that it had achieved IL5 authorisation through deployment on Second Front Systems’ Game Warden platform, enabling its acquisition AI software to operate within specified high-assurance US defence environments.⁸

The Supabase case study documents a direct commercial technology relationship with GovSignals, while the separately announced DIU award identifies GovSignals as the contracting company.^{5, 6}

No public evidence identified of Supabase itself being named as the direct contractor or a formally designated subcontractor under the DIU award.

No public evidence identified connecting the documented GovSignals relationship to Israeli military procurement or Israeli security organisations.

Controlling principals and group attribution

Supabase’s co-founders remain identified as Paul Copplestone and Ant Wilson in June 2026 investor documentation.⁹

Felicis identifies Supabase as a continuing portfolio investment and confirms financing participation extending from its May 2022 Series B investment through June 2026.¹⁰

CapitalG identifies Supabase as a portfolio investment originating in 2026 and names Paul Copplestone and Ant Wilson as co-founders.¹¹

Supabase’s October 2025 financing disclosure identifies Accel and Peak XV as Series E leaders and describes a distributed company operating across 37 countries.¹²

No public evidence identified of a qualifying Israeli military-channel act by either founder, a verified controlling shareholder, a board member or a related personal investment vehicle.

No public evidence identified establishing an operationally integrated parent, subsidiary or sibling company supplying Israeli military organisations.

The cited corporate and investor disclosures do not establish complete current beneficial ownership percentages, voting-control thresholds or an independently verified register of all board members.^{4, 10, 11}

Dual-Use Products & Tactical Variants

General-purpose technology

Supabase’s documented software architecture comprises PostgreSQL, authentication, PostgREST, realtime messaging, storage, Edge Functions, Supavisor and related infrastructure services.²

Its authentication architecture uses client libraries, an API gateway, an authentication service and a PostgreSQL database.¹³

Supabase for Platforms allows businesses and software developers to create and manage database, authentication, storage, realtime and function services programmatically.¹⁴

These documented capabilities are general-purpose backend development and application infrastructure technologies.²

Documented GovSignals implementation

Supabase’s GovSignals case study identifies PostgreSQL and pgvector as infrastructure used to manage large quantities of government procurement information and support AI-powered recommendations.⁵

The case study identifies Supabase Storage as supporting procurement documents, contracts and proposal files, while Realtime supports collaborative editing and dashboards.⁵

Supabase Auth and PostgreSQL Row Level Security are identified as mechanisms for controlling access and isolating information belonging to different contractor organisations.⁵

GovSignals processes Controlled Unclassified Information and serves customers requiring FedRAMP and IL5 compliance, according to the published customer account.⁵

GovSignals deployed Supabase components in its own AWS environment using community Helm charts and Amazon RDS rather than relying exclusively on Supabase’s standard managed hosting arrangements.⁵

Direct Supabase engineering assistance

Supabase’s case study states that its engineers worked with GovSignals on query tuning, index planning, scaling and PostgreSQL upgrades without downtime.⁵

The case study separately identifies direct access to Supabase engineers as an enterprise-support benefit that helped GovSignals optimise performance and accommodate increasing data volumes.⁵

This evidence documents engineering assistance from Supabase to a company providing US defence acquisition software, although the published case study does not identify the specific GovSignals environment in which each engineering intervention occurred.⁵

No public evidence identified establishing that Supabase engineers directly administered GovSignals’ IL5 production environment or accessed its controlled government data.

IL5 authorisation and deployment boundaries

The Supabase case study describes GovSignals’ use of Supabase technology across commercial, FedRAMP and IL5 environments.⁵

GovSignals’ February 2026 announcement identifies Second Front Systems’ Game Warden platform as the deployment arrangement through which GovSignals achieved IL5 authorisation.⁸

The announced authorisation concerns workloads involving Controlled Unclassified Information and unclassified National Security Systems within high-assurance US defence environments.⁸

The two published accounts establish the use of Supabase technology within GovSignals’ described regulated architecture and identify Second Front Systems as the named IL5 deployment-platform partner.^{5, 8}

No public evidence identified establishing that Supabase’s standard managed cloud service independently holds an IL5 authorisation.

No public evidence identified of a government approval document naming Supabase, Inc. as the separately authorised cloud-service provider for GovSignals.

Military-specific applications

GovSignals describes acquisition planning, government purchasing workflows, contract opportunity discovery, proposal preparation and award administration as functions of its platform.⁷

The published Supabase implementation concerns database services, procurement information management, authentication, realtime collaboration and related application infrastructure.⁵

No public evidence identified that Supabase manufactures, markets or supplies a defence-specific, militarised, tactical or military-certified product variant to Israeli security forces.

No public evidence identified of Supabase software primarily designed to produce targeting decisions, fire-control outputs, precision guidance instructions or kinetic weapons effects.

No public evidence identified of a verified Supabase integration into an Israeli autonomous targeting system, weapons platform or kill-chain automation programme.

Civilian and military end-user distinction

Supabase’s hosted platform provides customers with databases, APIs, authentication, Edge Functions, realtime functionality and storage.¹⁵

Supabase also publishes software that customers may independently deploy within infrastructure that they control.¹⁶

The company’s self-hosting documentation states that self-hosted operators assume responsibility for provisioning, security, maintenance, backups and operational monitoring.¹⁶

The availability of these technologies for independent deployment establishes technical accessibility but does not identify a specific Israeli military customer or a Supabase commercial supply transaction.¹⁶

The GovSignals case study provides additional evidence of an identifiable customer relationship and direct engineering assistance, beyond the general availability of independently deployable software.⁵

No public evidence identified of an Israeli military customer-specific modification, procurement agreement or military end-user certification.

Export licensing

Supabase’s Terms of Service contain an export-regulation provision concerning applicable US export-control requirements and customer obligations.¹⁷

No public evidence identified of an Israeli military end-user certificate, military-specific export licence, government licensing decision or controlled military software transfer involving Supabase.

Heavy Machinery, Construction & Infrastructure

Product and operational scope

Supabase’s published architecture concerns database software, application programming interfaces, authentication, storage and related cloud infrastructure.²

Its billing documentation describes customer charges for dedicated database compute resources, network usage and associated platform services.¹⁸

No public evidence identified that Supabase manufactures or distributes construction vehicles, earthmoving equipment, demolition machinery or other physical equipment used in settlements or military installations.

Occupied-territory equipment deployments

No public evidence identified of Supabase-owned equipment used for settlement construction, checkpoint construction, demolitions or separation-barrier projects in the West Bank, East Jerusalem or Golan Heights.

No public evidence identified of equipment reaching such projects through authorised distribution, independent resale or secondary-market acquisition.

Construction and engineering contracts

No public evidence identified of a Supabase contract to construct, maintain or expand settlements, checkpoints, detention facilities, military bases or the separation barrier.

Geographic infrastructure

Supabase’s managed-platform documentation identifies AWS regions across the Americas, Europe, Asia-Pacific and other supported locations.¹⁹

The reviewed regional list does not identify an Israeli hosting region or a location within the occupied Palestinian territories.¹⁹

Supabase’s Edge Functions documentation identifies execution regions and allows customers to invoke functions in specified regions.²⁰

The GovSignals case study describes a customer-operated AWS deployment using community Helm charts and Amazon RDS, without identifying an Israeli military or settlement deployment.⁵

No public evidence identified establishing a Supabase-operated data centre, physical infrastructure facility or construction project within an Israeli settlement.

Settlement nexus

No public evidence identified of Supabase providing military-adjacent construction, demolition, engineering, logistics or infrastructure services in settlements in the West Bank, East Jerusalem or Golan Heights.

No public evidence identified connecting GovSignals’ defence acquisition platform to Israeli settlement infrastructure.

Supply Chain Integration with Defence Primes

Named Israeli defence manufacturers

No public evidence identified of a verified supply agreement between Supabase and Elbit Systems, Israel Aerospace Industries, Rafael Advanced Defense Systems or Israel Military Industries.

No public evidence identified of Supabase delivering a contracted database subsystem, communications module, embedded software component or other specifically identified product to one of these organisations.

Technology integration and third-party deployments

Supabase’s architecture combines PostgreSQL and independently developed open-source services into a reusable application infrastructure platform.²

Its self-hosting documentation permits independent installations on customer-controlled servers or cloud infrastructure.¹⁶

Supabase’s Docker deployment instructions explain how third parties can install and operate the software without using the company’s managed cloud platform.²¹

These documented distribution mechanisms do not establish that any named Israeli defence manufacturer is a customer or contractual partner.²¹

No public evidence identified of a verified Israeli defence-prime installation, authorised integrator agreement, defence subcontract or technical support arrangement.

Verified defence-sector customer relationship outside Israel

Supabase identifies GovSignals as a customer using its backend infrastructure to support government contracting software.⁵

GovSignals announced a direct contract with the US Defense Innovation Unit in March 2025.⁶

The published Supabase case study also documents direct engineering collaboration with GovSignals concerning database performance, indexing, scaling and PostgreSQL upgrades.⁵

GovSignals’ February 2026 IL5 announcement identifies Second Front Systems as its authorised deployment-platform partner for specified defence workloads.⁸

These published relationships identify GovSignals as both a Supabase customer and a US defence acquisition contractor, while naming Second Front Systems as the IL5 deployment-platform partner.^{5, 6, 8}

No public evidence identified of a contract naming Supabase as an Israeli defence-prime supplier or identifying Supabase as a specific subcontractor under the US DIU award.

Joint development and co-production

No public evidence identified of Supabase participation in a joint Israeli defence research programme, licensed military manufacturing arrangement, technology-transfer agreement or weapons-related co-production programme.

Investors and operational attribution

Salesforce Ventures publicly described its June 2026 investment in Supabase as support for a developer-infrastructure company providing database, authentication, storage and realtime services.⁹

Felicis categorises Supabase as an enterprise and infrastructure portfolio company.¹⁰

No public evidence identified establishing that an investor’s separate business activities created an operationally integrated Israeli defence supply chain involving Supabase.

Logistical Sustainment & Base Services

Military-installation support

Supabase’s commercial platform documentation identifies hosted databases, APIs, authentication, realtime services, Edge Functions and storage as standard project capabilities.¹⁵

Its billing documentation describes infrastructure consumption and associated platform charges.¹⁸

No public evidence identified of contracts for catering, transport, fuel, waste management, facilities maintenance or other physical sustainment services at Israeli military installations.

No public evidence identified of a verified contract to provide database or application hosting specifically to an Israeli military base, intelligence facility or detention installation.

Documented US government acquisition services

GovSignals’ March 2025 announcement identifies a multimillion-dollar US Defense Innovation Unit contract intended to support government acquisition workflows.⁶

GovSignals’ current website describes software for government requirements management, acquisition planning, programme reporting, procurement documentation and award administration.⁷

Supabase’s customer case study identifies database, authentication, storage and realtime infrastructure supporting the GovSignals application.⁵

The documented GovSignals application concerns acquisition and contracting administration rather than physical military-base sustainment services.^{5, 7}

No public evidence identified establishing that the Supabase–GovSignals arrangement provides logistical sustainment services to an Israeli military installation.

Geographic specificity

No public evidence identified of Supabase military-base service contracts in the West Bank, East Jerusalem, Golan Heights or Negev.

Military shipping and freight

No public evidence identified of contracts involving military freight forwarding, arms shipments, port handling, cargo transport or shipping services for Israeli defence organisations.

Developer distribution mechanisms

Supabase for Platforms documents the use of management APIs to create and administer application infrastructure programmatically.¹⁴

No public evidence identified of a Supabase enterprise distribution, internal application deployment or mobile-device-management agreement specifically servicing Israeli defence personnel or state security devices.

Munitions, Weapons Systems & Strategic Platforms

Weapons and munitions manufacturing

Supabase’s current corporate and product disclosures describe open-source PostgreSQL-based software and developer infrastructure.²

No public evidence identified of Supabase manufacturing or supplying firearms, artillery systems, armoured vehicles, tactical drones, naval platforms, ammunition, explosive ordnance or propellant materials to Israeli forces.

Strategic weapons systems

No public evidence identified of a Supabase contract involving Iron Dome, David’s Sling, Arrow, Israeli combat aircraft, armoured fighting vehicles, warships or ballistic missile platforms.

No public evidence identified of Supabase supplying guidance electronics, radar equipment, fire-control software, weapons integration modules or other critical military subsystems.

Software designed for kinetic effects

Supabase documents Edge Functions as an application execution capability operating across specified cloud regions.²⁰

Its authentication and database technologies provide general-purpose application services rather than a documented purpose-built military targeting function.¹³

No public evidence identified of Supabase developing autonomous targeting, military target generation, fire-control AI, weapons guidance or kill-chain automation for Israeli forces.

No public evidence identified of Supabase providing a specifically configured weapons-control database, missile-targeting subsystem or operational targeting algorithm.

GovSignals acquisition AI

GovSignals’ public product descriptions identify AI-assisted government acquisition, procurement documentation, opportunity discovery, proposal preparation and contracting workflows.⁷

Supabase’s case study identifies its technology as supporting the underlying database, search, access-control and collaboration infrastructure used by GovSignals.⁵

GovSignals’ March 2025 DIU announcement identifies government acquisition workflows as the purpose of the announced contract.⁶

The publicly described GovSignals application produces acquisition and contracting information rather than documented targeting decisions, fire-control instructions or weapons effects.^{5, 7}

No public evidence identified of Supabase engineering a purpose-built kinetic targeting application for GovSignals or another defence customer.

No public evidence identified of GovSignals’ documented Supabase deployment being incorporated into an Israeli weapons platform or targeting system.

Export Licensing, Regulatory & Legal History

Export regulation

Supabase’s Terms of Service require customers to comply with applicable export-control requirements when exporting, re-exporting or making relevant software and technology available outside the United States.¹⁷

The published contractual provision does not identify an Israeli military customer, a specific approved licence or a military end-use certificate.¹⁷

No public evidence identified of a government decision granting, denying, suspending or revoking an export licence for Supabase products intended for Israeli defence or security end-users.

Acceptable Use Policy

Supabase published version 1 of its Acceptable Use Policy on 1 June 2026.²²

The policy prohibits specified illegal activities, harmful technology, privacy violations, infrastructure abuse and certain high-risk applications.²²

The policy reserves rights to investigate and suspend accounts for violations or specified legal, regulatory, security, reputational and operational risks.²²

The published policy does not identify a particular Israeli military contract, weapons programme or defence-specific end-use authorisation.²²

US defence compliance documentation

Supabase’s GovSignals case study identifies SOC 2 Type II controls, open-source deployment flexibility, access controls and customer-managed infrastructure as considerations in GovSignals’ regulated deployment architecture.⁵

The case study states that GovSignals operated Supabase technology in commercial, FedRAMP and IL5 environments.⁵

GovSignals’ February 2026 announcement identifies IL5 authorisation through Second Front Systems’ Game Warden platform.⁸

The authorisation described in that announcement relates to controlled government workloads and the GovSignals deployment arrangement, rather than a separately identified Supabase-managed cloud-service authorisation.⁸

No public evidence identified of an export licence specifically authorising Supabase software for Israeli defence end users.

Sanctions, embargoes and enforcement

No public evidence identified of an enforcement action against Supabase for breaching an arms embargo or export-control requirement concerning Israel.

No public evidence identified of a sanctions designation, criminal proceeding or regulatory penalty linked to Israeli military technology supply.

Judicial proceedings

No public evidence identified of litigation, judicial review, an OECD National Contact Point complaint or an international proceeding specifically concerning Supabase’s alleged supply to Israeli military or security organisations.

Constructive notice and continued activity

Supabase’s October 2025 and June 2026 fundraising disclosures establish continued corporate fundraising and development activity after 19 July 2024 and November 2024.^{12, 3}

GovSignals’ March 2025 DIU announcement establishes a publicly disclosed US defence acquisition contract after those dates.⁶

Supabase’s customer case study, published around December 2025, documents its technology relationship with GovSignals and direct engineering assistance in scaling and database optimisation.⁵

GovSignals’ February 2026 announcement documents subsequent IL5 authorisation through Second Front Systems.⁸

The documented post-November 2024 defence-sector activity concerns US acquisition infrastructure and government contracting services.^{5, 6, 8}

No public evidence identified of a verified Israeli military supply arrangement continuing after 19 July 2024 or November 2024.

No public evidence identified of a military-related shareholder resolution, employee demand, sanctions notice or formal contractual termination concerning Israeli defence procurement by Supabase.

Civil Society Scrutiny & Documented Investigations

Civil-society investigations

No public evidence identified of an investigation specifically documenting Supabase’s participation in Israeli weapons manufacturing, military logistics, military procurement or defence-specific technology integration.

No public evidence identified establishing Supabase as a named Israeli defence supplier in the reviewed searches relating to Who Profits, AFSC Investigate, UN corporate-occupation reporting or specialist military supply-chain investigations.

No public evidence identified of a verified settlement-specific Supabase supply relationship.

Boycott and divestment campaigns

No public evidence identified of an organised campaign specifically targeting Supabase for Israeli defence contracts, military logistics or weapons-system participation.

No public evidence identified of an institutional divestment decision explicitly based on a verified Supabase–Israeli military supply relationship.

Corporate response

No public evidence identified of a Supabase statement announcing the termination of an Israeli defence contract, withdrawal from a military programme or cessation of settlement-related operations.

No public evidence identified of a military-specific end-use monitoring commitment adopted in response to criticism of Supabase’s Israeli defence relationships.

Publicly documented business activity

Supabase’s company profile identifies a broad international developer ecosystem and lists institutional and individual investors.⁴

Its June 2026 financing disclosure identifies development of open-source PostgreSQL technology, corporate growth and employee liquidity as the stated purposes of its financing.³

The company’s security documentation describes SOC 2 Type 2 compliance, ISO 27001 certification, enterprise security controls and data-protection arrangements.²³

Supabase’s GovSignals case study documents a customer using its infrastructure for regulated US government acquisition applications, including environments associated with IL5 requirements and direct supplier engineering assistance.⁵

GovSignals independently announced its DIU contract in March 2025 and subsequent IL5 authorisation through Second Front Systems in February 2026.^{6, 8}

These corporate disclosures establish general software infrastructure, financing and security activities alongside a documented US defence acquisition technology customer relationship.^{3, 23, 5, 6}

No public evidence identified connecting the documented GovSignals relationship to an Israeli military organisation, Israeli weapons manufacturer or military installation in occupied territories.