Eurobase is a fully EU-native backend-as-a-service platform — a free, GDPR-native European alternative to Firebase and Supabase. It provides 6 authentication methods (email, magic links, OAuth with Google/GitHub/LinkedIn/Apple, and phone SMS OTP), managed PostgreSQL, object storage, realtime subscriptions, Deno edge functions, encrypted vault, cron jobs, webhooks, a CLI with 50+ commands, and audit logging — all hosted exclusively on European infrastructure under EU jurisdiction.

How is Eurobase different from Firebase or Supabase?

Unlike Firebase (Google) and Supabase (US-based), Eurobase is 100% European-owned and operated on EU infrastructure. It is not subject to the US CLOUD Act, offers GDPR-native architecture with automated DPA reports, GDPR data export, sub-processor registry, and full audit logging. It includes features like encrypted vault, cron scheduling, webhooks with HMAC signing, and a dedicated CLI — with zero sovereignty compromise.

Is Eurobase GDPR compliant?

Yes. Eurobase is GDPR-native by design — not as an add-on. Every project ships one-click DSAR exports (Article 15 right of access + Article 20 right to data portability), an Article 30 Record-of-Processing report generated from your live configuration, a tamper-evident audit log with actor/action/IP, a per-project sub-processor registry, and row-level security. All data is stored on 100% EU-owned infrastructure (Scaleway, France) — zero US CLOUD Act exposure.

Do Firebase or Supabase offer built-in DSAR exports?

No. Neither Firebase nor Supabase ships a built-in DSAR (Data Subject Access Request) primitive. On Firebase you write a custom Cloud Function that walks every Firestore collection plus Auth and Storage. On Supabase you hand-roll SQL across auth.users and every public table. On AWS Amplify you stitch DynamoDB, Cognito, and S3 buckets together yourself. Eurobase is the only EU-native BaaS that ships GDPR Article 15 + Article 20 exports as a one-click platform feature, available on every project and every tier — free included. We won't paywall a legal obligation.

How much does a DSAR cost to fulfil manually?

Industry surveys put the average cost of fulfilling a single DSAR at around $1,500 — typically 8–12 hours of engineering time spent stitching CSV exports together, searching support tools, and walking application logs. Request volume jumped 246% in the two years to 2024. Statutory response time under GDPR Article 12 is 30 days; missing it carries supervisory-authority risk up to €20 million or 4% of global annual turnover. Eurobase replaces the manual workflow with a one-click console export plus an SDK call (`eb.auth.exportMyData()`) that lets end-users self-serve, rate-limited and audited.

Is Eurobase free to use?

Yes. The Free tier includes 5,000 monthly active users, 512 MB storage, 2 GB bandwidth, 50 realtime connections, and every feature — no credit card required. Projects auto-pause after 30 days idle and wake on the first request. Pro is €25/mo per project (no pausing, custom email templates, BYO SMTP, quota alerts, 100,000 MAU). A Team tier with dedicated Postgres is €149/mo (coming soon). A Legal Team tier for German legal-tech is in closed beta — pricing on request.

Does Eurobase support German legal-tech retention (§50 BRAO / §257 HGB / §147 AO)?

Yes, on the Legal Team tier (closed beta). §50 BRAO Aufbewahrungspflicht is 6 years flat; §257 HGB is split (10 years for Handelsbücher / Rechnungen / Jahresabschlüsse, 6 years for Handelsbriefe); §147 AO mirrors the §257 HGB split. Legal Team ships WORM per-prefix object-storage locks, ad-hoc retention holds (per record / per prefix), DSAR erasure that respects legal holds, a 10-year audit-log retention window, signed §203 StGB Verschwiegenheitsverpflichtungen from every staff member with data access, and a GoBD Verfahrensdokumentation. See eurobase.app/security#de-legaltech for the full dossier and the linked v2 legal documents.

What backend does a German legal-tech / Kanzlei-facing product actually need?

Four hard blockers you cannot solve with a plain EU-region Firebase or Supabase deployment: (1) §203 StGB / §43e BRAO staff-secrecy paperwork — signed declarations from every staff member with data access; (2) statutory retention with WORM enforcement — §50 BRAO 6y, §257 HGB 10y books / 6y letters, §147 AO mirror; (3) GoBD-conformant exports plus a Verfahrensdokumentation; (4) 10-year tamper-evident audit-log retention. Eurobase closes all four on the Legal Team tier (closed beta) via an addendum to the DPA. Region-only EU hosting does not satisfy any of them.

Does Eurobase have BSI C5, ISO 27001, and IT-Grundschutz coverage?

Actual certificates are on the post-beta roadmap. Today the dossier at eurobase.app/security#de-legaltech includes a dated BSI C5 roadmap (target Type-1 attestation 12 months post-launch), an ISO 27001 Statement of Applicability draft covering 2022 Annex A controls, a BSI IT-Grundschutz self-declaration under the Basis-Absicherung profile for SME, a NIS-2 positioning document (below employee/revenue thresholds today, voluntary cascade-obligation compliance, commitment to register on crossing), and an AI Act positioning document (Eurobase is infrastructure, not an AI system; the Customer is the deployer for any high-risk build).

Is Eurobase available today?

Yes — sign up at console.eurobase.app, no credit card required. The complete backend platform — including auth, database, storage, realtime with row-level filtering, edge functions with scheduled jobs, vault, cron, webhooks, CLI, GDPR self-serve export, MCP server, and audit logging — is built and in production. Free tier: 5,000 monthly active users, 512 MB Postgres, all features included. Pro: €25/mo per project.

Is Eurobase good for vibe coding?

Absolutely. Eurobase is designed for fast iteration — sign up, get your API keys, and start building in minutes. Auth (6 methods), database, storage, realtime, functions, vault, cron, and webhooks are ready out of the box with simple SDKs and a CLI with 50+ commands. No infrastructure setup, no DevOps, no compliance paperwork. Just vibe and build.

Where is Eurobase data stored?

All data is stored exclusively on European infrastructure operated by EU-owned providers, specifically Scaleway in France. Eurobase has zero exposure to the US CLOUD Act or similar extraterritorial legislation. Your data never leaves EU jurisdiction.

Is there a Supabase alternative in the EU?

Yes. Eurobase is a Supabase-compatible backend built and hosted entirely in the EU. Same Postgres foundation, same auth + storage + realtime + edge functions surface, same SDK shape. The difference is the corporate parent (Estonian OÜ vs Delaware) and the infrastructure floor (Scaleway in France vs AWS). That removes the CLOUD Act exposure that survives even when Supabase is deployed in an EU region.

Is a Supabase EU-region deployment enough for GDPR?

Picking Supabase's EU region gives you physical data residency in the EEA and a standard SCC-based DPA — a competent baseline, but not immunity from the CLOUD Act. Because Supabase Inc. is a Delaware corporation using AWS, US authorities can compel data access even for EU-region deployments. Eurobase removes that exposure by having no US corporate parent and no US-owned processor in the critical path.

How do I migrate from Supabase to Eurobase?

Use the Eurobase CLI: `eurobase import supabase assess` for a read-only report against your existing Supabase project, then `eurobase import supabase schema | data | storage | functions` to move each surface. Auth-user import is next. The CLI reads your Supabase project directly and emits an executable plan; no rewrites required on your app code.

My app is built on the supabase-js client. Do I have to rewrite my client layer?

The honest picture on three levels. (1) Shape-parity: @eurobase/sdk mirrors @supabase/supabase-js deliberately — same .from(table).select().eq() chain, same channel(name).on('postgres_changes', …) subscribe shape, same auth methods. In practice this is search-replace on imports + package name, not a rewrite of query call sites. (2) Drop-in supabase-js wire-compat (same package name, no code change at all) is on the roadmap as a shim package — it removes the young-company objection entirely. (3) Zero-SDK escape hatch on Team tier: a direct Postgres DATABASE_URL means Payload, Prisma, Drizzle, or any Postgres client works without any Eurobase-specific code — the reversibility guarantee then covers your app code too, not just your data.

Are automatic backups and point-in-time recovery included?

Free and Pro projects share a pooled Postgres cluster (Scaleway Managed Database, France) with cluster-level snapshots (daily, 7-day retention). Restores go through support. Per-project point-in-time recovery, second-level precision, and console-triggered restore land on the Team tier — Team gets dedicated Postgres per project, which is what PITR requires. On every tier, `eurobase db dump` produces a standard pg_dump you can export anywhere at any time — the first-line reversibility guarantee independent of us.

What happens if I exceed the Pro-tier storage or bandwidth caps?

No overnight blackout — that is a business-risk pattern paying customers can't manage, and one of the clearest pieces of feedback from beta users. The Pro-tier overage policy for public beta: (1) email alerts at 75% and 100% of the storage / bandwidth caps. (2) A 14-day soft-grace window where writes continue and the console shows the overage banner — enough time to upgrade to Team, buy an add-on capacity block, or optimise. (3) Only after the grace window does the affected module hard-block writes — and even then reads always continue. Team tier (dedicated Postgres per project + elastic storage tier) removes the caps entirely and is the recommended path for photo/video-heavy or streaming workloads. We do not meter per-GB overage on Pro — no surprise line items.

How is the 10,000 realtime connections cap counted?

Active concurrent WebSocket connections. No hard limit on messages/second or connection duration today, but soft fair-use at ~100 msg/s per connection and ~1M msg/s per project — raiseable on request. Practical connection duration is bounded by TCP keepalive + our load-balancer idle timeout (600 s).

Can I point Eurobase at my own S3 bucket (BYO storage)?

Not today. BYO S3 is on the Team-tier roadmap — it needs per-tenant credentials + audit-path rewiring. No firm date. In the meantime, our object storage runs on Scaleway (Paris, France) with the same sovereignty guarantees as the rest of the platform.

Who is the contracting legal entity, and does it have any non-EU parent or subsidiary?

Contracting entity: Eurobase OÜ, Estonian private limited company, registry code 17557586, Ahtri 12, Tallinn 15551. Not VAT-registered under Estonian VAT Act §19. No parent company, no subsidiaries, no non-EU entity. Sole shareholder is the founder. Every sub-processor in the RoPA is EU-headquartered.

Do you provide a signable DPA and an up-to-date sub-processor list?

Yes. DPA v2 is signable at eurobase.app/legal. The sub-processor list is auto-generated per project in the console Compliance tab as an Article 30 report (downloadable PDF, updated on every configuration change). No email tickets, no stale spreadsheets.

When can your team access customer data, and can I audit it?

Our team is three people, all physically in the EU. Every operator SQL call goes through an authenticated pool that writes to public.data_access_log — every query stamped with actor, source IP, and active Postgres role. You see that table from your own console (Audit tab). We do not process your data content for any purpose other than platform operation.

What SLA do you commit to per tier?

Free: no commitment. Pro: 99.5%/month, support response within 24h business hours. Team: 99.9%/month, response within 4h. No automatic downtime credits today — honest reflection of team size at launch. Credits land with the Team tier opening.

What happens to my data — and my app code — if Eurobase ceases operations?

Data reversibility, four lines of defence. (1) Standard formats: Postgres + S3-compatible = migration to any host (Scaleway direct, OVH, Aiven, self-hosted) is documented, not a rewrite. (2) Export CLI: eurobase export produces a full dump (schema + data + storage + functions). (3) Open source at v1: we commit to open-sourcing the code under a permissive licence at v1 (targeted end 2026); self-hosting becomes a real Plan B. (4) On shutdown: 90-day notice + 90 additional days of read-only service to finalise export. App-code reversibility, two mitigations: (a) @eurobase/sdk is shape-parity with supabase-js, so migrating away is search-replace on imports, not query-site rewrites. (b) On Team tier, the direct DATABASE_URL means your app can talk to Postgres with Payload / Prisma / Drizzle / psql — no Eurobase code in the client at all — so migration is a hostname change.

How big is the Eurobase team, and how are you funded?

Core team: founder + two long-term freelancers, all EU-based. Bootstrapped, with EU-Sovereign-Cloud grant applications in flight and preliminary angel conversations. The way to size that risk is not our reassurances — it is the reversibility guarantee (Postgres dump + open-source at v1 + standard S3). If we sink, you migrate to Scaleway direct in a weekend using the export CLI.

Eurobase — The Sovereign, GDPR-Native BaaS for Europe

The free, GDPR-native European alternative to Firebase and Supabase. Firebase simplicity. Postgres power. GDPR primitives built in. European sovereignty. Sign up in a minute — no credit card.

Build modern applications with 6 auth methods, managed PostgreSQL, object storage, realtime subscriptions, edge functions, encrypted vault, cron jobs, webhooks, CLI, and audit logging — fully EU-native, 100% EU infrastructure, zero US jurisdiction, zero DevOps.

Europe Builds on Infrastructure It Doesn't Control

Modern applications depend on backend platforms for authentication, databases, storage, and serverless logic. Today, most of these platforms are operated by non-European companies and subject to foreign jurisdiction. Developers face a frustrating trade-off: choose world-class developer experience, or choose legal certainty and data sovereignty. Europe deserves both.

Automated DSAR — One Click, Audit-Trailed, EU-Only

When a user emails "what do you have on me?" (GDPR Article 15) or asks for their data on the way out (Article 20), Eurobase turns the answer into a one-click console export. Firebase, Supabase and AWS Amplify do not ship a built-in DSAR primitive — you write the SQL across every table, you build the middleware, you keep the audit trail. The average DIY DSAR runs about $1,500 to fulfil (8–12 hours of engineering) and request volume is up 246% in two years. Eurobase ships it as a first-class platform feature on every tier, free included. Per-user export plus full-project zip, hash-chained audit log with actor + IP, signed download links that expire after 7 days, all bytes staying on Scaleway in France. Read the DSAR feature page.

Meet Eurobase — The Complete EU-Native Backend Platform

Eurobase is a fully European-operated backend-as-a-service platform with 10 core features:

Authentication — 6 methods: email/password, magic links, OAuth (Google, GitHub, LinkedIn, Apple), phone SMS OTP
Managed PostgreSQL — REST API, SQL editor, row-level security, schema management, full-text search
Object Storage — S3-compatible with signed URLs, metadata, and folder navigation
Realtime — WebSocket subscriptions with INSERT/UPDATE/DELETE events and server-side row filtering
Edge Functions — Deno runtime with DB triggers, scheduling, and versioning
Vault & Secrets — AES-256-GCM encrypted key-value store
Cron Jobs — SQL and RPC scheduling with execution logs
Webhooks — Event-driven delivery with retry logic and HMAC signing
CLI Tool — 50+ commands for projects, database, storage, vault, functions, and migrations
Audit & Compliance — GDPR export, DPA reports, sub-processor registry, full action logging

All on 100% EU-owned infrastructure with GDPR compliance built in. Start free — no credit card required.

Why Choose Eurobase Over Firebase or Supabase?

Free Tier — 5,000 MAU, 512 MB storage, 2 GB bandwidth, 50 realtime cxns, every feature. No credit card required.
100% EU Infrastructure — EU-hosted on Scaleway (France). No CLOUD Act exposure. Schrems II-safe.
Zero-DevOps — Postgres, Auth, Storage, Functions, Cron, Vault — production-ready in seconds.
GDPR-Native — Audit logging, automated DPA reports, GDPR data export, sub-processor registry.
Enterprise-Ready — Team RBAC, encrypted vault, audit trail, row-level security, rate limiting.
Open & Portable — Standard Postgres, S3 storage, REST APIs — no proprietary lock-in.

For Vibe Coders & Developers — Build Fast, Stay Sovereign

Start a project in minutes with simple APIs. SQL database with row-level security and full-text search, 6 auth methods including OAuth and phone SMS OTP, realtime WebSocket subscriptions, S3-compatible storage with signed URLs, Deno edge functions with DB triggers and cron, encrypted vault for secrets, webhooks with HMAC signing, and a CLI with 50+ commands. No infrastructure tickets. No compliance anxiety. Just vibe and build.

For Teams & Enterprises — Sovereign Infrastructure Without Compromise

European legal governance, data residency guarantees, automated DPA reports and sub-processor registry, full audit trail with actor/action/IP/timestamp, team members with owner / admin / developer / viewer roles, AES-256 encrypted vault for secrets and API keys, and row-level security with preset policies. Backend infrastructure your compliance team can approve.

Pricing — Built to Grow With You

Free — 5,000 MAU, 512 MB storage, 2 GB bandwidth, 50 realtime connections, every feature. Projects auto-pause after 30 days idle. No credit card required.
Pro (€25/mo per project) — 100,000 MAU, 100 GB storage, 250 GB bandwidth, 10,000 realtime connections. BYO SMTP, quota alerts, priority support. Never pauses.
Team (€149/mo — coming soon) — Dedicated Postgres per project, backups + PITR, SSO, RBAC, SOC 2.

Closed-beta testers get founder-friendly pricing locked in when the Pro tier opens.

The Vision — Building Europe's Developer Cloud

Now (Closed Beta): Complete backend platform with real users — Auth, Database, Storage, Realtime with row filtering, Edge Functions, Schedules, Vault, Cron, Webhooks, Audit Log, GDPR self-serve export, MCP server, CLI, 4-role team collaboration, Console Dashboard.

Summer 2026: Public early access — free tier opens, Mollie billing for Pro, SDK v1, documentation polish.

2026–2027: Database branches (Neon-style copy-on-write), GraphQL API, image transforms, custom domains, self-hosting.

2027+: ISO 27001 certification, on-premise deployments, European vector storage and sovereign AI pipelines.

Blog

Europe's Digital Sovereignty Problem: We Built Our Startups on American Soil

US hyperscalers control around 70% of the European cloud market. European providers hold just 15%. For EU startups and SMBs, this isn't just a vendor preference — it's a structural dependency. Every critical layer — auth, database, storage, payments, email — runs on US-governed infrastructure subject to the CLOUD Act.

Source: Synergy Research Group

First Beta Testers Are Building on Eurobase — Here's What's Ready

The platform surface at closed-beta onboarding: auth (email, magic links, OAuth with Google/GitHub/LinkedIn/Apple/Microsoft), managed PostgreSQL with RLS, S3-compatible storage, realtime WebSocket subscriptions, edge functions, encrypted vault, cron jobs, webhooks, compliance tooling, console dashboard, JavaScript SDK, and CLI — all running on Scaleway in France.

Get started — no waitlist, no credit card. Free tier is genuinely free, Pro is €25/mo per project. Sign up free

Eurobase vs Supabase

Same Postgres power. Full EU sovereignty. No CLOUD Act. No project pausing. Both Eurobase and Supabase are built on PostgreSQL with REST APIs, auth, storage, and realtime. The difference: Supabase runs on AWS (US jurisdiction, CLOUD Act), Eurobase runs on Scaleway (France, EU jurisdiction). Eurobase includes native DPA reports, audit logging, encrypted vault, cron, and webhooks — with no free tier project pausing. Full comparison

Eurobase vs Firebase

SQL instead of NoSQL. Open standards instead of lock-in. EU infrastructure instead of Google Cloud. Firebase uses Firestore (proprietary NoSQL). Eurobase uses PostgreSQL — standard SQL, exportable with pg_dump, portable to any Postgres host. No vendor lock-in, no proprietary query language, no Google Cloud dependency. Full comparison