Web app hosting, managed by the people who built it
Nothing for your IT team to run: your web app sits on Vercel and Supabase, set up and looked after by the team that built it, with your data in the region you choose, the UK included.
Trusted by clients from global brands to local charities
Who looks after each part of your app
A live app has layers. Managed hosting is the bottom three; the rest is support, from the same team.
Your application
We look after itThe screens, rules, data model and integrations we built, kept current under support.
Next.js
Access and sign-in
We look after itWho can sign in and what each person sees, kept up to date for starters and leavers.
Microsoft sign-in, access rules in the database
- Managed hosting
Hosting and delivery
Set up by usEvery change built and previewed, screens served from a global network, common attacks filtered out on the way in.
Vercel
Database and files
Set up by usPostgres, with sign-in, files and backups joined to it.
Supabase
The infrastructure underneath
Run by the platformServers, network and patching, independently audited every year.
Vercel and Supabase
Three ways to run it
Only one thing changes between them: whose name is on the accounts.
In our managed space
We hold the Vercel and Supabase accounts, pay the platforms and look after the set-up. One invoice for the lot.
In your own accounts
The app runs in your organisation's Vercel, Supabase and GitHub accounts. Your IT team holds the keys; we work inside them.
A mix
Your data in your own Supabase account and the rest in our space, or whatever split your policies ask for.
What your IT team will ask
The parts that take weeks on a bare build come ready on this stack. The certificates are in our trust centre.
Data where you need it
The database, user accounts and files stay together in one region, with the server code beside them.
Independently audited
Vercel and Supabase are audited to SOC 2 Type 2 and ISO 27001, every year.
Encrypted at rest and in transit
Your data is encrypted in the database and on the wire. Secrets are held by the platforms, never in the code.
Backups you can roll back
On our standard set-up, if something goes wrong with the data, it can be restored to a point before it happened.
Changes checked first
Every change gets its own preview of the screens and back end before it goes live.
Common attacks filtered
Vercel's network filters bots and common attacks before they reach the app, and there's no server of yours to patch.
What managed hosting includes
Hosting and support are one agreement, from the day the first release goes live. This is the hosting half.
- Vercel and Supabase set up, paid for and kept current
- Monitoring, with errors reported as they happen
- Security scanning on every change
- Development and test environments beside the live one
- A monthly review of usage and running cost
What clients say about working with us
Questions about hosting
In the Supabase region you choose, the UK included, with the server code in a Vercel region beside it. Both platforms are independently audited to SOC 2 Type 2 and ISO 27001, and your data is encrypted at rest and in transit.
Yes, if it runs on Next.js and Supabase or can be moved to them. Roughly half of our work starts with an app someone else built, so we begin with a web app audit to know what we are taking on.
The accounts are handed over or the code and data exported with standard tools, and another supplier can run it. Nothing in the stack is proprietary.



