SuloBaseYour database and files sit in Lusaka.
Your database, sign-in data, uploaded files, realtime and functions run on SuloBase's server in Lusaka. The two things that pass outside Zambia are listed too.
See where every part sits →Lusaka, Zambia
Keep your users' data in Zambia.
The Data Protection Act says personal data must be processed and stored on a server in Zambia. SuloBase is Supabase on a server in Lusaka, so an app built on Supabase keeps its code when it moves here, and a new one starts here. Billed in kwacha.
The founding ten are taken. Leave your details and we'll call you about the next intake.
Founding cohort
10 of 10 places reserved
8 more are waiting for the next intake, and 78 people have signed up in all. A place is reserved when someone chooses a paid plan on the sign-up form.
What the Data Protection Act asks of your app.
The duty sits with whoever holds the data: the business that runs the app, not its hosting company. If you build for people in Zambia, it is yours.
(1)A data controller shall process and store personal data on a server or data centre located in the Republic.
(2)Despite subsection (1), the Minister may prescribe categories of personal data that may be stored outside the Republic.
(3)Despite subsection (2), sensitive personal data shall be processed and stored in a server or data centre located in the Republic.
Personal data is anything that identifies someone: a name, an ID number, location data, an online identifier. The Act counts a person's sex and marital status as sensitive, along with their health, religion, ethnic origin, political opinions and biometrics. Subsection (3) has no exceptions for those.
table users full_name personal nrc_number personal phone personal gender sensitive marital_status sensitive
A sign-up form that asks for gender already holds sensitive personal data.
It reaches clinics and health apps, schools, lenders and mobile-money services, HR and payroll systems, NGOs and government projects, and any app whose sign-up form asks for gender.
How SuloBase covers it, section by section →
General information about the Act, not legal advice.
Why SuloBase is built on Supabase.
Supabase is the open-source Postgres platform a great many new apps start on. Building on it means your developers, their tutorials and their AI tools already know how SuloBase works.
Supabase built the platform
Postgres, sign-in, APIs, file storage, realtime, functions and the Studio dashboard.
SuloBase does the Zambian part
Servers in Lusaka, the Data Protection Act, kwacha and mobile money, isolated projects, and a person in Lusaka who answers.
SuloBase is the only way to keep a modern app's data in Zambia without rewriting it or running servers yourself.
The dashboard is Supabase Studio.
If you have used Supabase, you already know where everything is. These screens are from our Biking demo project.
Create tables and columns without writing SQL. This is the Riders table, a minute after it was made.
What we say, and where to check it.
Each of these has its own page, with the detail behind it.
Isolation, tested on every change.
CI creates two throwaway projects and tries to reach one from the other, with 13 checks.
See the checks →Moving from Supabase is one line.
SuloBase runs the same open-source Supabase stack, so your client library, your queries and your row-level security stay as they are.
See how moving works →You can get your data out.
Export your project from the dashboard whenever you like: free, as often as you want, including if you leave.
See how exporting works →Registered with the Data Protection Commissioner.
Sulocorp Technologies is registered as a data controller and data processor under section 19 of the Act. Certificate DPC-DP000897, valid to 31 March 2027.
See what SuloBase covers under the Act →Building apps for clients?
Give each client a project of their own. Our agency programme opens at launch: 10% of each client's plan, every month they stay, so K15 a month for a Pro client and K50 for a Business client.
See how client projects work →Priced in kwacha.
Each project has its own plan, billed monthly by mobile money or bank transfer. No dollar card needed.
Hobby
K0free
For learning SuloBase and side projects.
- 100 MBdatabase
- 500 MBfile storage
- 500monthly users
No backups
Choose HobbyPro
K150per month
For an app with its first real users.
- 2 GBdatabase
- 15 GBfile storage
- 5,000monthly users
Daily backups, kept 60 days
Choose ProBusiness
K500per month
For a business that runs on its app.
- 20 GBdatabase
- 50 GBfile storage
- 80,000monthly users
Daily backups, kept 180 days
Choose BusinessEnterprise
K2,500+per month
For organisations that need their own limits and terms.
Limits and terms agreed with you.
Daily backups, kept a year
Talk to usWe open to new projects in intakes. Choose a plan and we'll call you when the next one opens.
Compare the plans in full, and see what each one doesn't include →
Latest update
What's new at SuloBase
SuloBase is registered with the Data Protection Commissioner: certificate DPC-DP000897
Registered as a data controller and data processor, certificate DPC-DP000897. What it means for your app, Connect AI on video, and an agency programme coming at launch.
Read update No. 3: SuloBase is registered with the Data Protection Commissioner →Join the next intake.
The founding ten are taken. Leave your details and we'll call you on WhatsApp about the next intake.
- Leave your details. Your name, email and WhatsApp number, then what you use today and the plan you're after.
- Get your readiness report. A few taps and we build a report for your app: the plan that fits, what it costs in kwacha, what the Data Protection Act means for it, and your path to moving here.
- Book a call. Pick a time for a short WhatsApp call with Enock or Jasper, Lusaka time.
Join the waitlist
It takes about 20 seconds.
You're on the list.
We'll reach out on WhatsApp within 24 hours.
Questions people ask.
Does Zambia's Data Protection Act require personal data to be stored in Zambia?
Yes. Section 70(1) of the Data Protection Act No. 3 of 2021 says a data controller shall process and store personal data on a server or data centre located in Zambia. The Minister may allow some categories of personal data to be stored outside the country (section 70(2)), but sensitive personal data must always be processed and stored in Zambia (section 70(3)).
This is general information about the Act, not legal advice.
What counts as sensitive personal data?
The Act's definition includes a person's race, marital status, ethnic origin and sex; genetic and biometric data; child abuse data; political opinions; religious beliefs; trade-union membership; and physical or mental health. If your sign-up form asks for gender, you hold sensitive personal data.
Where is my data stored on SuloBase?
Your database, sign-in data, uploaded files, realtime and functions run on SuloBase's server in Lusaka. Two things pass outside Zambia today: requests enter through Cloudflare's network (for Airtel users its nearest site is Johannesburg), and on Pro and up an encrypted off-site backup copy is held by Cloudflare R2. Every outside service is listed on our subprocessors page.
Is SuloBase the same as Supabase?
SuloBase runs the open-source Supabase stack: the same Postgres database, sign-in, APIs, file storage, realtime and Studio dashboard, and the same client libraries. It is run by Sulocorp Technologies in Lusaka and is not affiliated with Supabase Inc.
Can I move an existing Supabase or Firebase app?
From Supabase, change one line: the project address your client points at. The database comes across with pg_dump, with your users and their sign-ins. From Firebase, Firestore collections become Postgres tables and your sign-in users are exported and imported; we plan that move with you on a call.
Can I get my data out if I leave?
Yes. Export your project from the dashboard whenever you like, free: your tables, sign-in users and file records as one plain SQL file, and your files as a second archive. It restores into any Postgres, including Supabase's own cloud.
Why is Cloudflare in front, and are users abroad slower?
Cloudflare shields the server. The server opens no ports to the internet; every request comes through Cloudflare, which absorbs attacks, and users abroad connect to a Cloudflare site near them, so starting a secure connection is quick.
What it can't do is move your database. Every query still travels to Lusaka, so a user in Europe or the United States waits for that round trip. That is why a database belongs near most of an app's users, and for an app used in Zambia, that is here.
How do I pay?
In kwacha, monthly, by mobile money (Airtel Money, MTN MoMo or Zamtel Kwacha) or bank transfer. No dollar card needed.
Can I sign up today?
The founding cohort of ten is full. Join the waitlist and we'll call you on WhatsApp about the next intake.
SuloBase is built in Lusaka by Sulocorp Technologies. Questions go to one of us, and a person answers.
