Security and your data
Where Sterodata keeps your data, how it is backed up and encrypted, what is recorded about changes, how to get your data out, and what happens when it is deleted.
This section is for the people who approve a tool before a business puts its records in it. Each page says what Sterodata's configuration and code do, and where a part is missing.
In short
- Where: on Amazon Web Services, in the EU, in Ireland. Records in a database file per workspace on Amazon EFS, workspace details in Amazon RDS for MySQL, attached files in Amazon S3. See Where your data is kept.
- Backups: workspace details every day, kept 7 days; records every day, kept 35 days. Attached files are not backed up. See Backups.
- Encryption: HTTPS with TLS 1.2 or later to the app and the API; the MySQL database and the file storage that holds your records are encrypted at rest. See Encryption.
- Who can reach what: members, roles, grants on each table and view, field limits and links. See Access.
- What is recorded: who created and last changed each record, who deleted each table and field, and each change to sharing and to the workspace's access switches. See What is recorded about changes.
- Getting your data out: any table or view to CSV or Excel. See Export your data.
- Deleting: deleted tables, fields and workspaces wait 30 days in the trash, then are destroyed. See Deleting data.
- AI assistants: they act as the person who connected them, and their tokens are stored only as hashes. See Connected assistants' access.
Personal data
How Sterodata, a product of Yodly SRL, handles personal data is set out in the privacy policy.
In this section
- Where your data is keptSterodata runs on Amazon Web Services in the EU, in Ireland. Each kind of data is kept in its own AWS service, listed here, with the two outside services that take part.
- BackupsWhat is backed up, how often and for how long: workspace details every day for 7 days, your records every day for 35 days. Attached files are not in a backup.
- EncryptionConnections to the app and the API use HTTPS with TLS 1.2 or later. The MySQL database and the file storage that hold your workspace are encrypted at rest.
- What is recorded about changesWho created and last changed each record, who deleted each table and field, and the record Sterodata keeps of every change to sharing and to a workspace's access switches.
- Export your dataDownload any table or view as a CSV or Excel file, with the rows and fields you can see in it, up to 50,000 rows per file.
- Deleting dataWhat happens when you delete records, fields, tables or a whole workspace: how long each can be put back, and when it is destroyed.
- Connected assistants' accessHow an AI assistant connects to Sterodata, what it can reach, how its access is stored, and how that access ends.
Last updated 29 October 2026