import { PermissionAction } from '@supabase/shared-types/out/constants' import { Download } from 'lucide-react' import Link from 'next/link' import { useState } from 'react' import { toast } from 'sonner' import { ScaffoldSection, ScaffoldSectionContent, ScaffoldSectionDetail, } from 'components/layouts/Scaffold' import NoPermission from 'components/ui/NoPermission' import { getDocument } from 'data/documents/document-query' import { useSendEventMutation } from 'data/telemetry/send-event-mutation' import { useAsyncCheckPermissions } from 'hooks/misc/useCheckPermissions' import { useSelectedOrganizationQuery } from 'hooks/misc/useSelectedOrganization' import { Button } from 'ui' import ConfirmationModal from 'ui-patterns/Dialogs/ConfirmationModal' import { ShimmeringLoader } from 'ui-patterns/ShimmeringLoader' export const SOC2 = () => { const { data: organization } = useSelectedOrganizationQuery() const slug = organization?.slug const { mutate: sendEvent } = useSendEventMutation() const { can: canReadSubscriptions, isLoading: isLoadingPermissions } = useAsyncCheckPermissions( PermissionAction.BILLING_READ, 'stripe.subscriptions' ) const currentPlan = organization?.plan const [isOpen, setIsOpen] = useState(false) const fetchSOC2 = async (orgSlug: string) => { try { const soc2Link = await getDocument({ orgSlug, docType: 'soc2-type-2-report' }) if (soc2Link?.fileUrl) window.open(soc2Link.fileUrl, '_blank') setIsOpen(false) } catch (error: any) { toast.error(`Failed to download SOC2 report: ${error.message}`) } } return (

SOC2 Type 2

Organizations on Team Plan or above have access to our most recent SOC2 Type 2 report.

{isLoadingPermissions ? (
) : !canReadSubscriptions ? ( ) : (
{currentPlan?.id === 'free' || currentPlan?.id === 'pro' ? ( ) : ( )}
)} setIsOpen(false)} onConfirm={() => { if (slug) fetchSOC2(slug) }} >
  1. The information that you are about to access is confidential.
  2. Your access to our SOC 2 materials is governed by confidentiality obligations contained in the agreement between Supabase, Inc ("Supabase", "we", "our" or "us") and the Supabase customer that has authorized you to access our platform to obtain this information (our "Customer").
  3. You must ensure that you treat the information in our SOC 2 materials in accordance with those confidentiality obligations, as communicated to you by the Customer.
  4. By clicking "I agree" below or otherwise accessing our SOC 2 materials, you:
    1. acknowledge that you have read and understood this Confidentiality Notice;
    2. confirm that you have been authorized by the Customer to access this information, and your use of our SOC 2 materials is subject to the confidentiality obligations owed by the Customer to us.
  5. This Confidentiality Notice does not substitute or supersede any agreement between us and the Customer, or any internal rules or policies that the Customer requires you to comply with in your access to and use of confidential information. However, your failure to comply with this Confidentiality Notice may be used to determine whether the Customer has complied with its confidentiality obligations to us.
) }