Security
Production security checklist
Review authentication, tenant isolation, API security, file controls, backups and incident readiness.
Release gates
Production launch requires real Supabase RLS tests, secret rotation, payment sandbox verification, backup restoration and an incident contact.
Minimum controls
Use MFA for platform owners, short-lived signed file URLs, rate limits, request validation, audit logs and separate test and production credentials.