Sign-in runs on Supabase Auth. Row-level security applies your role, tenant fence and PII gates inside the database.