Documentation Security and your data
What is recorded about changes
Who created and last changed each record, who deleted each table and field, and the record Sterodata keeps of every change to sharing and to a workspace's access switches.
Sterodata records who did what in three places.
On every record
Each table in a workspace's built-in database has Created by, Created at, Updated by and Updated at. Sterodata fills them in and nobody can type into them. A change made by an assistant carries the name of the person who connected it; a change made by someone without an account carries the generated name they were given. See Who changed what.
Only the latest change is kept on a record: who changed it last and when. Earlier versions of a record, and what each change was, are not kept.
In the trash
A deleted table or field stays in its database's Trash for 30 days, with when it was deleted and who deleted it. A deleted workspace stays in the workspaces trash for 30 days.
Changes to access
Sterodata also keeps its own record of the changes that decide who can reach what. Each entry says who made the change, when, what it was before and after, and the assistant that made it, if one did. It covers:
- a change to the workspace's URL key, to guest access, or to self-join;
- every grant given or taken back on a table, view, page or field, links included, and every change to a link's end date;
- a table or field moved to the trash, restored, or deleted for good;
- an assistant's connection ended by a workspace administrator.
This record is not shown in the app. Changes to a member's roles and to invitations are not in it.
What is not recorded
Sterodata does not keep a log of who read or opened what. Share links and published pages show how many times they have been opened and when last, not by whom: opens within 30 minutes of each other count as one, and no cookie, IP address or anything else about the person opening it is kept.
Last updated 29 October 2026