School · Module 4 · Lesson 2 of 4
Keep previews away from production data
Preview deployments are often public. Point them at a separate database and sandbox keys.
Use a separate Supabase project (or branch) and Stripe test mode for Preview. Never give a preview deploy the production DATABASE_URL.
Vercel Deployment Protection can require auth on previews when the content is sensitive. Turn it on for apps with real user data shapes.
Disable or gate admin, debug and test routes so they do not ship on the production domain.