The Zuvo production checklist provides detailed advice on preparing an app for production. While our SOC 2 and HIPAA compliance documents outline the roles and responsibilities for building a secure and compliant app.
Various products at Zuvo have their own hardening and configuration guides, below is a definitive list of these to help guide your way.
Auth
Database
- Row Level Security
- Column Level Security
- Securing your API
- Custom claims and role based access control
- Managing Postgres roles
- Managing secrets with Vault
- Postgres connection logging
- Superuser access and unsupported operations
Storage
- Object ownership
- Access control
- The Storage API docs contain hints about required RLS policy permissions
- Custom roles with the storage schema