CipherStash is now integrated with Supabase, bringing Data Level Access Control (DLAC) and searchable field-level encryption to Postgres-backed applications. Unlike traditional field-level encryption that breaks SQL queries, CipherStash stores encrypted values alongside Searchable Encrypted Metadata (SEM), allowing WHERE clauses, ORDER BY, fuzzy matching, and joins to work on encrypted data. Each value gets a unique encryption key managed through ZeroKMS, a zero-knowledge key management service, meaning neither CipherStash nor Supabase can access plaintext data. Setup requires a single CLI command and no schema changes. The integration supports TypeScript apps via Supabase.js, Drizzle, and Prisma, and also offers a Postgres wire-protocol proxy for non-SDK use cases. Particularly relevant for teams under HIPAA, GDPR, SOC 2, FedRAMP, or IL4 compliance requirements.
