Guacamedia × Supabase

A multi-tenant CMS and CRM built on Supabase.

Guacamedia is a Rome-based web studio that designs, publishes and manages websites on Guacamedia Web, its headless CMS and CRM. Supabase provides the backend: database, authentication and access rules for the whole platform.

How we use Supabase

One Postgres, many tenants. Every client lives in its own row, and access flows through memberships and Postgres Row Level Security, so tenants are isolated at the database layer. Agency staff can see across every tenant.

Supabase Auth for the console. Our management console authenticates with Supabase Auth and queries through the SSR client, relying on Row Level Security for every read and write.

Service role behind the public APIs. Client sites are headless: they consume our public content, leads, tracking and newsletter endpoints, which use the service role only after validating a per-site API key, stored as a SHA-256 hash.

Schema as migrations. Every database change is a numbered SQL migration, never a silent edit.

In production

Today, more than ten live client sites run on a single Supabase project, from restaurants and cultural festivals to production companies: daitona.it, calabriamovie.it, denkhub.io, tordomatto.it and orcaproduzioni.it.

Work with us

If you need a Supabase-backed marketing site, CRM or content platform designed, built and operated for you, that is exactly what we do. Reach us at [email protected].