CipherStash

CipherStash is a Data Level Access Control (DLAC) platform for applications built on Postgres. It provides searchable field-level encryption with identity-bound keys and cryptographic audit trails, built into your existing stack.

CipherStash lets you encrypt sensitive fields in your Supabase database without losing query capabilities.

• Supports queries over encrypted data, including WHERE, LIKE, ORDER BY, JOIN, and GROUP BY
• Works with Supabase.js, Prisma Next, Drizzle, or plain SQL (via pg)
• Has built-in key management, automatic rotation, and identity integration with Supabase Auth
• Adds typically less than 10ms overhead (see benchmarks)

Instructions

1. Initialize your project
2. Choose which columns you want to encrypt
3. Zero-code change via drop-in wrappers for supabase-js, Prisma Next, and Drizzle

Get started

Start with a free developer tier. Sign up here, run npx stash init --supabase, or ask Claude to walk you through setup.