# Supabase — Searchable field-level encryption on Supabase with CipherStash

- Company: Supabase (supabase.com)
- Announced: 2026-07-09T17:00:00+00:00
- Category: not stated
- Coverage: not counted
- Announcement: yes
- Group: announcements
- Source: https://supabase.com/blog/searchable-field-level-encryption-with-cipherstash
- Record: https://forck.live/items/21281-searchable-field-level-encryption-on-supabase-with-cipherstash
- Subject: Supabase

The CipherStash integration for Supabase is now available. CipherStash is a Data Level Access Control (DLAC) platform for applications built on Postgres. DLAC extends traditional access control, which typically operates at the row or table level, down to individual encrypted values, so policies are enforced at decryption rather than at the query layer. With CipherStash, teams can encrypt sensitive fields at the application layer with a unique key per value, run searches and joins against encrypted data without decrypting it, and keep keys under their own control through ZeroKMS, CipherStash's zero-knowledge key management service. Because keys never leave your control, neither CipherStash nor Supabase can access your plaintext data. The Supabase integration enables teams to add field-level encryption to any Supabase project using the encrypted Supabase SDK wrapper without changing the schema. Setup is one CLI command: npx stash init --supabase . Why this matters for regulated workloads # Most teams that handle regulated data end up choosing between two bad options: Use traditional field-level encryption: Encrypted values are random bytes as far as Postgres is concerned. …

---

Record: https://forck.live/items/21281-searchable-field-level-encryption-on-supabase-with-cipherstash
Catalogue: https://forck.live/llms.txt
Current issue: https://forck.live/feed.md