IU Logo Icon
I help businesses create 
scalable
 & 
secure
web apps with Supabase
Get in touch
Face
"Self-organized, multi-disciplinary, ever-curious and perpetual-researcher in his own field, David is truly a masterpiece in problem solving."
Julian Xhokaxiu, Delivery Architect, NearForm

Services I provide.

Web and App Architecture
Performance Optimization
Security Audits
Custom Solutions
Training & Mentoring

Choosing the wrong architecture is very costly. My clients don't have that issue.

No matter if you want to create a realtime carsharing service, the next big AI unicorn, highly secure medical systems or simply a sleep tracker - architecting secure and scalable applications of any size is what I'm really really good at. Like, really.

Client Case
A big automotive corporate company had a large-scale codebase, no modern framework was used. The costs of maintaining this non-standard, flaky codebase were high.
Progressive Migration
Architected a way to re-integrate the new codebase into the existing one and be able to replace it one by one.
Cost Reduction
Costs of delivery went down by 80% due to the new architecture allowing unified team efforts.
Typical Deliverables are:
Database Design
High-performing RLS
Infrastructure Design
Systems Design
ADR-based evaluations

Whether you experience performance issues or want to save costs by avoiding them: Planning to scale from a few hundred users to 100k users? I got you. Billions of rows in your database? No problem.

I not only help you optimize for it but actually help to bulletproof it; facts-based with load testing.

Client Case
A Personal Task Management company had detected that their Supabase Postgres instance was unresponsive - in peak times, requests went to nowhere, infinite loading times.
2s 4ms
Regular requests were speed up by 500%.
2min 440ms
Huge complex queries of large datasets were speed up by ~24000%.
Downgraded Supabase instance
Saving $200/month
I approach performance holistically starting from the database where usually about 85% of mistakes are made. From there, I move upwards, optimizing requests / caching and, if sensible, the frontend rendering performance.
Typical Deliverables are:
List of major performance culprits
Clear optimization actions
Measured, proven impacts
Performance Evaluation
Load Testing
Performance Prediction

Security is a must - for your customers and to save you from expensive, unnecessary lawsuits. From exposed RPCs, Prompt injection, RLS failures and Webhook security to the detection of chained attacks: With my audit, you and your customers can sleep well at night.

Eliminate critical exploits, prevent data breaches avoid data loss, customer loss and expensive 0-day fixes.

Client Case
A clients web app was auto-scanned with a well-known security scanner including AI, no severe threats were reported by these tools.
20+ Critical Vulnerabilities
I found and fixed severe security issues missed by automated scanners.
Email Server Protection
Prevented chained attacks causing phishing/scam email exploits.
User Authentication
Exposed and fixed critical user impersonation vulnerability
Typical Deliverables are:
Complete Supabase hardening from Database to Edge Functions
Database Security from roles to exposed RPCs
API Security (processed data, CSPs, etc
Webhook Security
Detection of chained attacks

We can work full-service agency mode from zero to final delivery. Not just web apps: I've built apps that are used in operating rooms for surgery.

After a clear briefing, I manage all the work related to it - from accessible UX to a secure backend and you sit back and relax.

What that means:

I will build and deliver your high quality, business-targeted web or native (iOS / Android) app with a promised schedule including a high-end overview of exact deliverables.

What it also means:

I'm not hireable as an hourly freelancer for working off generic tickets of the backlog.

Client Case
The MedTech company Nodus Medical started as a team of high-experienced surgeons and fighter-jet pilots. Their goal: Innovating human surgeries with digital assistants and rules derived from airspace.
World's First Hands-Free PWA
Built for use in surgery with foot pedal control
Offline-First Design
Works in isolated operation rooms without internet
Fail-safe Architecture
Built-in synchronization and safety mechanisms

My mentorings and trainings are a service for highly technical people who want to go the fast route instead of spending weeks figuring out the best ways of solving Supabase-related questions.

The quality and efficiency of both the mentoring and training is primed by an initial free briefing call.

Client Case
A satellite-orchestration company wanted to decrease complexity as well as speed up performance within their Supabase-based application.
2-Hour Session
Resolved all issues for 7 team members
Immediate Impact
After struggling for weeks, the team was immediately able to move forward quickly after session

Team Training: Hypereffective pre-planned Supabase / architecture training for up 10 people. Starting at 4999$.


Mentoring: Your issues and questions are resolved within 1-2 hours of instant technical mentoring. 699$ per hour including post-session summary (you're not left alone if we hit the time limit).

I speak business.

I've worked for Universities, FinTech, MedTech, Automotive Corporate, Agencies, City Councils, Streaming companies, AI startups, KYC providers and many more.

How we work together.

David Lorenz sitting and working

Besides my technical expertise built over the course of 25 years, I’ve been a corporate Team Lead with special leadership trainings guiding technical and personal advancement. Openness, transparency and friendliness are key drivers of my exchange.

I value clear and concise communication which is why, before I begin to work, I will clarify your needs and ask highly specific questions challenging your goals. You’ll be invited to my Slack channel where we can reach each other quickly and do video calls for more complex discussions.

I am able to adapt to different timezones, my usual timezone is CET. If the availability allows, we can go from call to execution in less than 48 hours, 24 hours in urgent cases (e.g. security incident).

Do you offer fixed costs pricing?
Yes. Besides explicit mentoring and training sessions which can be booked hourly, a task must have a clear goal. A clear goal must have clear deliverables. With clearly defined deliverables, I do in fact prefer fixed cost pricing. I want to provide the value to you in no time, not waste your time.
Do you create native iOS / Android apps?
Totally. Based on Expo and Supabase, I create iOS and Android apps from scratch (see Custom Solutions service).
Do you offer support after project completion?
In an essence: yes. All my services come with a post-task debriefing call. If then there shall be anything left unclear with the delivery, I'm happy to jump back on a call with you or clarify asynchronously.
Do you sign NDAs before having an accepted offer
Yes, signing NDAs before digging into work is a common thing with my clients.
What's your availability and response time?
My response time, on average is below 8 hours. Since my tasks aren't longterm full-time tasks, there's a great chance, I can push in your challenge at any time.
Can you comply with SOC2, HIPPA or ISO requirements?
Yes. Making sure that your project is not only safe and well-performing but also complying with regulatory standards is definitely something my clients request commonly.
Do you only work with Supabase / Postgres as a database?

For custom solutions and database optimization, yes. For architectural needs: No.

There is a saying "Just use Postgres" and it's for a reason. When it comes to helping you with best in-database knowledge then yes, I am your best bet as a Postgres expert, best combined with Supabase.

However: I'm a skilled Web Software Architect. Hence, I can build scalable systems for any type of requirements, if that needs to be MongoDB for a reason or a Graph database: Let's sit down and discuss it.

Can you work with other backend languages like PHP or Go?

I've been a PHP developer for more than 10 years before I switched to Fullstack JavaScript / Typescript. I've contributed bits in Supabases Auth library, written in Go.

As an architect, I'm not a language or framework fanboy, whatever works for you and gets the business requirements resolved, is a great choice.

I work with teams that use Supabase and have whatever language, PHP, Go, Rust, Java, in their backend. As an architect, that does not matter, my consultancy services on an architectural and in-depth Supabase / database level are language and framework-independent.

Questions left open?

Check my calendar
Face

or write me an email: info@activeno.de