From the source
CipherStash is a Data Level Access Control (DLAC) platform for applications built on Postgres.
DLAC extends traditional access control, which typically operates at the row or table level, down to individual encrypted values, so policies are enforced at decryption rather than at the query layer.
With CipherStash, teams can encrypt sensitive fields at the application layer with a unique key per value, run searches and joins against encrypted data without decrypting it, and keep keys under their own control through ZeroKMS, CipherStash's zero-knowledge key management service.
Because keys never leave your control, neither CipherStash nor Supabase can access your plaintext data.
The Supabase integration enables teams to add field-level encryption to any Supabase project using the encrypted Supabase SDK wrapper without changing the schema.
Setup is one CLI command: npx stash init --supabase .
Why this matters for regulated workloads # Most teams that handle regulated data end up choosing between two bad options: Use traditional field-level encryption: Encrypted values are random bytes as far as Postgres is concerned.
…
