Code review & security audit for Next.js + Supabase web app

I'm looking for an experienced developer to do a thorough, independent code review and security audit of my web app before launch. About the project: The app is an MVP that has not been launched yet. It was built largely with the help of AI coding tools, so I want an experienced human to check it carefully before it goes live. It is a multi-user B2B web application with role-based access (account owners and staff), several types of business accounts, and some background data-processing logic. Full details about the product will be shared only after an NDA is signed. Tech stack: - Next.js (App Router), TypeScript - Supabase (Postgres, Auth, Row Level Security, Edge Functions) - Private GitHub repository Important: signing an NDA is required before getting access to the code or any further details. What I need reviewed: 1. Security – Supabase RLS policies, authentication, data isolation between accounts and roles, exposed keys or secrets, API routes, third-party scripts. 2. Logic – bugs, edge cases and race conditions in the core business logic. 3. Database – schema, indexes, migrations, performance. 4. Code quality – structure, error handling, maintainability, anything that could cause problems as the app grows. Deliverable: A written report listing all issues found, ordered by severity (critical / high / medium / low), with a short explanation and a suggested fix for each. A short call afterwards to go over the findings is a plus. Ideal candidate: - Proven experience with Next.js and Supabase (especially RLS) - Security review / audit experience - Clear communication in English In your proposal, please include: - Similar review or audit projects you've done - Your estimated time and price - How you would approach this review