Isolation at the database layer

Postgres row-level security scopes content per member state, so a client-side bug cannot leak data across borders.

Read the code

The cheaper alternative

Filter by nation in the client query. An afternoon's work.

One nation's feed, scoped at the database

What it would have cost

One forgotten where clause and another country's data is on screen. Here that is a cross-border exposure, not a bug report.

What the decision bought

Policies the database enforces on every read and write, whatever the client sends.

Where it lives

AES Connect, Supabase

Next decision

Back to the decisions