Supabase RLS for Multi-Tenancy: Best decision or overkill?

When building Octonex (an Agency CRM), I decided to rely heavily on Supabase Row Level Security (RLS) to handle data isolation between different agency workspaces.

Instead of managing complex logic in the application layer, I pushed the security rules down to the database level. It felt scary at first, but now it sleeps rock solid.

Fellow builders: what’s your go-to strategy for B2B multi-tenancy in 2026? Are you team "Logic in API" or team "Logic in DB"? 🛠️