diff --git a/deploy/README.md b/deploy/README.md
index 31da2fe..1750032 100644
--- a/deploy/README.md
+++ b/deploy/README.md
@@ -24,3 +24,4 @@ Deploy commands
 Notes
 - Ensure `deploy/.last-image` exists (run `deploy/build.sh` first).
 - `AUTH_SECRET`/`DATABASE_URL` should be in your env or loaded via `scripts/load-secrets.sh`.
+- `deploy/deploy.sh` now runs `prisma migrate deploy` automatically when `DATABASE_URL` is set (recommended for test/staging/prod).
diff --git a/deploy/deploy.sh b/deploy/deploy.sh
index 1317dd2..1f7f36a 100755
--- a/deploy/deploy.sh
+++ b/deploy/deploy.sh
@@ -71,6 +71,13 @@ APP_VERSION="${APP_VERSION:-$(echo \"$IMAGE\" | awk -F: '{print $NF}')}"
 
 export K8S_NAMESPACE APP_HOST API_HOST NEXT_PUBLIC_SITE_URL NEXT_PUBLIC_API_BASE APP_ENV CLUSTER_ISSUER INGRESS_CLASS APP_REPLICAS K8S_IMAGE APP_VERSION
 
+if [[ -n "${DATABASE_URL:-}" ]]; then
+  echo "Running Prisma migrations for APP_ENV=$APP_ENV"
+  npx prisma migrate deploy
+else
+  echo "DATABASE_URL not set; skipping Prisma migrations" >&2
+fi
+
 TMP_MANIFEST=$(mktemp)
 envsubst < k8s/app.yaml > "$TMP_MANIFEST"