Question 1

What exactly is Aurabase and how does the platform work?

Accepted Answer

Aurabase is a unified and agentic European sovereign Backend-as-a-Service (BaaS) platform, built in Rust. It brings together managed PostgreSQL 16, Auth 2.1, Realtime NATS, Storage S3, Edge Functions WASM/Deno, Multi-channel notifications and AI Gateway.

Question 2

How does Aurabase compare technically to Supabase, Firebase, Convex and Appwrite?

Accepted Answer

Aurabase combines total immunity to the US CLOUD Act, a unified 100% Rust engine without GC, WASM multi-runtime, the official MCP server and zero PostgreSQL relational lock-ins as standard.

Question 3

How is Aurabase better than other European sovereign initiatives (such as Eurobase)?

Accepted Answer

Aurabase offers a 100% Rust architecture with Database-per-project isolation from the Free Tier, a 10x higher quota (50k MAU vs 5k MAU), dual WASM/Deno runtime, semantic AI and zero pausing of inactive projects.

Question 4

How does Aurabase scale to millions of simultaneous WebSocket connections (Split Architecture and NATS Sharding)?

Accepted Answer

Aura-Realtime separates sharted CDC capture workers (with Kubernetes Lease leader election) from stateless WebSockets/SSE frontends via NATS JetStream for linear horizontal scaling.

Question 5

What are your RPO (data loss) and RTO (recovery time) objectives in the event of a major datacenter disaster (DRP/BCP)?

Accepted Answer

Thanks to multi-zone replication of PostgreSQL WALs, Aurabase guarantees an RPO < 5 seconds and an RTO < 60 seconds with automatic failover to hot replicas in Paris and Frankfurt.

Question 6

What guarantees of long-term viability and source-code escrow do you offer large enterprises over a 5-to-10-year horizon?

Accepted Answer

Aurabase guarantees sustainability through its 100% standard PostgreSQL and S3 reversibility, a sustainable self-financed economic model and the possibility of a source code Escrow contract on the Enterprise plan.

Question 7

What are your security audit protocols, penetration tests (pentests), and bug bounty program?

Accepted Answer

Aurabase carries out annual intrusion tests with qualified PASSI (ANSSI) firms, automated SAST/DAST security analyzes in CI/CD and operates a Bug Bounty program on a European platform.

Question 8

How does Aurabase automate GDPR access and deletion requests (DSAR - Articles 15, 17 & 20)?

Accepted Answer

Aurabase integrates an automated DSAR primitive: 1-click JSON/CSV export of a user's data (Articles 15 & 20) and certified deletion procedure (Article 17) respecting legal retention obligations.

Question 9

How do I generate my Record of Processing Activities (RoPA – GDPR Article 30) and my list of subprocessors?

Accepted Answer

From the Studio's Compliance tab, download your pre-filled RoPA Article 30 report and the real-time list of your 100% European subcontractors in 1 click.

Question 10

Are your audit logs tamper-proof, and do you support immutable WORM storage for 10-year legal retention?

Accepted Answer

Yes, Aurabase implements an append-only audit log with cryptographic hash-chaining and S3 storage with WORM (Write Once, Read Many) locking certified for 10-year accounting and legal retention.

Question 11

Is Aurabase a 100% fully managed cloud service, or do I have to manage servers?

Accepted Answer

Aurabase is a 100% Cloud Managed platform. Infrastructure, high availability, continuous backups, certificates and replication are entirely managed by our teams in Europe.

Question 12

Why is immunity from the US CLOUD Act and FISA 702 crucial for European companies?

Accepted Answer

The American CLOUD Act authorizes the United States federal authorities to force any American provider (AWS, GCP, Azure) to deliver data, even stored in Europe. Aurabase is 100% European and completely immune.

Question 13

Is Aurabase certified to host health data (HDS) and banking or public-sector applications?

Accepted Answer

Yes, thanks to our data centers in Germany and Finland, full AES-256 encryption, Database-per-project isolation and CLOUD Act immunity, Aurabase meets ANSSI, HDS and GDPR standards.

Question 14

In which physical datacenters is my data hosted, and do you guarantee no transfer outside the EU?

Accepted Answer

Your bases and buckets reside exclusively in the European Union, on the Hetzner infrastructure (Germany and Finland). No flows transit outside the EU.

Question 15

How does Aurabase avoid proprietary lock-in (unlike Firebase or Convex)?

Accepted Answer

Aurabase is based on strict open standards (pure PostgreSQL 16, PostgREST, Amazon S3, OAuth 2.1, NATS). You can export and migrate your data in 1 standard pg_dump command without rewriting code.

Question 16

How do direct PostgreSQL connections and pooling work for serverless architectures?

Accepted Answer

Each project provides two connection URLs: a direct connection on port 5432 and a shared connection with PgBouncer pooler on port 6543, ideal for Next.js, Vercel and AWS Lambda.

Question 17

Do you support encryption with your own security keys (BYOK - Bring Your Own Key / HSM)?

Accepted Answer

Yes, on the Enterprise plan, Aurabase integrates BYOK support with your own KMS or HSM FIPS 140-2 Level 3 to encrypt your PostgreSQL databases and your S3 buckets in a completely waterproof manner.

Question 18

Does Aurabase support NoSQL / document-store data models in addition to PostgreSQL?

Accepted Answer

Yes, in addition to the PostgreSQL 16 relational engine and pgvector, Aurabase integrates aura-db-adapters and aura-provisioner to connect and manipulate NoSQL collections (MongoDB / JSONB) with unified CDC.

Question 19

How does multi-tenant isolation between projects (Database-per-project) work?

Accepted Answer

Each project has its own dedicated PostgreSQL database (Database-per-project), guaranteeing memory, network and total security tightness without risk of inter-project data leaks.

Question 20

How do I manage tables with several hundred million rows using native PostgreSQL 16 partitioning?

Accepted Answer

PostgreSQL 16 supports declarative partitioning by range or hash. With Partition Pruning, index scan times are reduced by 10 and data purges are instantaneous.

Question 21

How does hybrid search combining keyword search (BM25 / Full-Text) and semantic vector search (RRF) work?

Accepted Answer

Aurabase allows you to merge exact text search (tsvector) and vector search (pgvector HNSW) into a single SQL query via the Reciprocal Rank Fusion (RRF) algorithm.

Question 22

How do Row-Level Security (RLS) policies work and how can you optimize their performance?

Accepted Answer

RLS policies run in the PostgreSQL engine. By indexing filter columns (e.g. user_id) and using auth.uid(), you maintain sub-millisecond latency.

Question 23

Is my free project paused when it is inactive (as at Supabase or Eurobase)?

Accepted Answer

No! Unlike Supabase (pause after 7d) or Eurobase (pause after 30d), Aurabase keeps your databases active 24/7 with no cold wake-up times.

Question 24

Can I enable Read Replicas in several European regions?

Accepted Answer

Yes! On the Pro and Enterprise plans, you can provision synchronous or asynchronous PostgreSQL read replicas in 1 click in Paris, Frankfurt, and Amsterdam.

Question 25

How can I run complex SQL migrations on large tables without blocking writes (zero-downtime migrations)?

Accepted Answer

PostgreSQL 16 and Aurabase support non-blocking migrations: CREATE INDEX CONCURRENTLY, column additions without table rewriting and automated migrations via the CLI.

Question 26

Can I query my Aurabase database in GraphQL rather than SQL or REST?

Accepted Answer

Yes, the pg_graphql extension is available as an opt-in. A complete and typed GraphQL schema is automatically generated from PostgreSQL with strict adherence to RLS policies.

Question 27

Does Aurabase support distributed transactions, nested transactions and SERIALIZABLE isolation level?

Accepted Answer

Yes, Aurabase offers the full transactional power of PostgreSQL 16: READ COMMITTED, REPEATABLE READ and SERIALIZABLE isolation levels, Savepoints and strict relational constraints without limitation.

Question 28

How does pgvector compare to specialized vector databases (Pinecone, Qdrant, Weaviate)?

Accepted Answer

pgvector on Aurabase eliminates the complex synchronization between relational base and vector base. You can combine vector semantic search and relational SQL filters in a single transaction.

Question 29

How do automatic backups and up-to-the-second recovery (PITR) work?

Accepted Answer

Daily backups are automatic on all plans. PITR (Point-in-Time Recovery) allows you to restore your database to the second up to 90 days ago using WAL logs.

Question 30

How are strict TypeScript types auto-generated from my PostgreSQL schema?

Accepted Answer

The Aurabase CLI introspects your SQL schema in real time and generates strict TypeScript types including tables, views, enums, JSONB and RPC functions.

Question 31

How does the local workflow work with the Aurabase CLI (offline dev)?

Accepted Answer

The Aurabase CLI allows you to initialize a complete environment locally with Docker (aurabase start), apply migrations and develop offline without an internet connection.

Question 32

How do I send multi-channel notifications (APNs/FCM push, Twilio SMS, SMTP email) with dynamic templates?

Accepted Answer

The aura-notifications service integrates the unified sending of SMTP emails, native Push Apple APNs (.p8) and Android FCM v1, and Twilio SMS with asynchronous workers and Dead Letter Queues.

Question 33

What mobile frameworks are supported (Flutter, React Native, iOS Swift, Android Kotlin) and do you offer offline synchronization?

Accepted Answer

Aurabase provides official SDKs for React Native, Expo, Flutter, Swift iOS and Kotlin Android with SQLite local cache and automatic offline conflict reconciliation.

Question 34

Do you offer Branch Preview environments for each Pull Request?

Accepted Answer

Yes, Aurabase allows you to instantly clone a schema and test dataset for each GitHub/GitLab Pull Request, with automatic destruction upon merge.

Question 35

What graphical tools are included in the Studio console?

Accepted Answer

Aurabase Studio includes a SQL Monaco editor with AI autocompletion, a responsive Table Editor, a real-time log explorer, a user manager and an S3 file browser.

Question 36

How does Aurabase's reactivity differ from Convex or Firebase Realtime?

Accepted Answer

Aurabase leverages PostgreSQL logical replication and NATS JetStream to stream changes in real time with strict ACID transactional guarantees and zero proprietary locking.

Question 37

How do user Presence, Broadcast, and WebSocket / SSE negotiation work?

Accepted Answer

Aurabase Realtime automatically handles WebSockets/SSE transport negotiation and provides ultra-light Presence (which is inline) and ephemeral Broadcast channels.

Question 38

How do I configure reliable webhooks triggered by database events?

Accepted Answer

Configure Database Webhooks triggered on INSERT/UPDATE/DELETE. Each request is signed with an x-aura-signature HMAC-SHA256 header for immediate cryptographic validation.

Question 39

What is the real cold start of WASM Edge Functions compared with traditional cloud functions?

Accepted Answer

WASM functions run on the Wasmtime engine with a cold start of less than 1 ms (up to 100x faster than Node.js on AWS Lambda or Firebase Cloud Functions).

Question 40

Why is WebAssembly (Wasmtime) isolation more secure and faster than microVMs or Docker containers?

Accepted Answer

WebAssembly isolates the code in a sealed linear memory space without access to Linux kernel system calls, eliminating the risk of kernel vulnerabilities and starting in microseconds.

Question 41

How do I handle streaming of AI responses and large data volumes through Server-Sent Events (SSE) and gRPC?

Accepted Answer

Aurabase's Rust Gateway natively supports bidirectional HTTP/2 streaming with Server-Sent Events and gRPC, managing Backpressure without saturation latency.

Question 42

How do I schedule recurring tasks (cron jobs) and handle failures with Dead Letter Queues (DLQ)?

Accepted Answer

Define a standard cron expression in your console or configuration to run periodic functions. Errors are automatically routed to a DLQ with exponential retries.

Question 43

How do I securely inject API keys and secrets into my Edge Functions?

Accepted Answer

The Vault module encrypts your environment variables with AES-256-GCM and injects them securely at the execution of Edge Functions without ever exposing them to the client.

Question 44

How to implement passwordless authentication with Passkeys (WebAuthn / FIDO2)?

Accepted Answer

Aurabase Auth 2.1 integrates native support for Passkeys (Face ID, Touch ID, YubiKey security keys) with a simple method from our SDK: aura.auth.signInWithPasskey().

Question 45

Can I validate JWT tokens locally in my microservices via the public JWKS endpoint without a network call?

Accepted Answer

Yes, Aurabase signs tokens with asymmetric Ed25519 keys. Your API gateways and microservices can validate signatures locally via /.well-known/jwks.json without network latency.

Question 46

How does Aurabase protect my authentication endpoints and APIs against DDoS attacks and brute force?

Accepted Answer

Aurabase's Gateway Rust features a Token Bucket rate limiter, anti-brute force protection on passwords and OTP, and constant anti-enumeration response times.

Question 47

Can I list all of a user's connected devices and revoke a specific session remotely?

Accepted Answer

Yes, the Auth API logs sessions with User-Agent, IP address and date of activity. The user can revoke a targeted device or trigger an instant global logout.

Question 48

How do Enterprise SSO (SAML 2.0 / OIDC) and automatic SCIM provisioning work?

Accepted Answer

Available on the Enterprise plan, SSO allows your B2B customers to connect via their own IdP (Okta, Azure AD, Google Workspace) with SCIM 2.0 synchronization.

Question 49

Can I migrate my users from Firebase, Supabase or Auth0 without password reset?

Accepted Answer

Yes, Aurabase natively handles Scrypt Firebase, Bcrypt and Argon2id hashing. Your users keep their passwords during migration.

Question 50

Is object storage 100% compatible with the Amazon S3 API and existing tools?

Accepted Answer

Yes, Aurabase Storage exposes a standard S3 compatible API with support for multipart uploads, signed URLs and all existing clients (AWS SDK, Boto3, rclone, Cyberduck).

Question 51

How do large file uploads (several GB / 4K videos) work without saturating server bandwidth?

Accepted Answer

Aurabase Storage supports direct S3 Multipart Uploads (chunks from 5 MB to 5 GB, up to 5 TB per file) and signed URLs to upload directly to the bucket without consuming server RAM.

Question 52

How do on-the-fly image transformations (WebP/AVIF, resizing) work?

Accepted Answer

Resizing, cropping and conversion to WebP/AVIF are done on the fly by our Rust engine with CDN caching on 12 European PoPs.

Question 53

What is the official Aurabase MCP server and how to integrate it with Cursor or Claude Desktop?

Accepted Answer

The official @aurabase/mcp-server provides over 65 tools for AI assistants (Cursor, Claude Desktop, Windsurf) to inspect, modify and administer your backend in natural language.

Question 54

How does Aurabase ensure Text-to-SQL (NL2SQL) query security against destructive injections?

Accepted Answer

The aura-ai microservice uses the Rust sqlparser parser to validate the Abstract Syntax Tree (AST) of each generated query: only pure SELECT queries are authorized with automatic LIMIT injection and strict compliance with RLS rules.

Question 55

What is the built-in AI Gateway and how does the semantic cache work?

Accepted Answer

The AI Gateway centralizes your calls to OpenAI, Claude, Gemini and Mistral with a semantic vector cache that reduces your costs by 40% to 70% and provides secure NL2SQL.

Question 56

How does Aurabase help you comply with the EU AI Act?

Accepted Answer

Aurabase acts as a sovereign infrastructure provider compliant with the EU AI Act with full traceability of prompts, vector isolation of embeddings and 100% European hosting.

Question 57

What exactly does the permanent Free plan include, and are there any hidden costs?

Accepted Answer

The Free plan is 100% free, permanent, with no credit card required. It includes 3 active projects, 500 MB dedicated Postgres, 50k MAU, 1 GB S3, 2M Realtime messages and 100k functions.

Question 58

How is bandwidth (Egress) calculated and which data streams are completely free?

Accepted Answer

All internal traffic between Postgres, Edge Functions, and Realtime in the same region is free. Only public bandwidth to the Internet is billed at €0.02/GB beyond the quota.

Question 59

How many simultaneous connections can I open and how does PgBouncer handle traffic spikes?

Accepted Answer

Using the PgBouncer transactional pooler on port 6543, a pool of 50 real connections can serve more than 50,000 concurrent serverless requests without saturating RAM.

Question 60

What happens if there is a traffic spike or quotas are exceeded (are there surprise bills)?

Accepted Answer

Aurabase never suddenly cuts off your service. Alerts are sent at 80% and 100%. You can set strict limits (Spend Caps) to avoid any unpleasant surprises.

Question 61

Do you offer discounts for startups, students, open source, and annual payment?

Accepted Answer

Yes, annual payment offers 2 months free (17% savings). Specific programs are available for eligible open source projects and startups.

Question 62

How to migrate from Supabase to Aurabase in less than 10 minutes?

Accepted Answer

Migration from Supabase is straightforward: export with pg_dump, restore with pg_restore or Studio wizard, and change the NPM package to @aurabase/aurabase-js.

Question 63

How to migrate from Google Firebase (Firestore, Auth and Storage)?

Accepted Answer

Our Firebase migration tool extracts your Firestore collections, generates the appropriate SQL/JSONB schemas and imports your users with their password without interruption.

Question 64

If I decide to leave Aurabase, how do I export all of my data, files and configurations?

Accepted Answer

You benefit from total reversibility: export your database in standard SQL (pg_dump), synchronize your S3 files with rclone and download your configurations in one click.

All answers about Aurabase & its Architecture.

Essential questions