Documentation Security and your data
Where your data is kept
Sterodata runs on Amazon Web Services in the EU, in Ireland. Each kind of data is kept in its own AWS service, listed here, with the two outside services that take part.
Sterodata runs on Amazon Web Services (AWS) in the European Union, in the Ireland region (eu-west-1). Each kind of data is kept in one of the AWS services below, all in that region.
| What | Where it is kept |
|---|---|
| Your records: the rows and values of your tables | One database file per workspace, on Amazon EFS, AWS's file storage. |
| The workspace's structure: tables and fields, views, pages and forms, members, roles and what is shared with whom | A MySQL database on Amazon RDS. |
| Files attached to records, and files you upload to import | Amazon S3, AWS's object storage, under the workspace's own folder. |
| Passwords for connected databases and keys for connected services | AWS Systems Manager Parameter Store, as encrypted parameters, apart from everything else. |
| Your account | Amazon Cognito, which holds your email, name and password and checks the password when you sign in. Your name and email are also kept with the workspace details in MySQL; your password is not. |
Connected databases
When you connect a PostgreSQL or MySQL database, its tables stay where they are. Sterodata reads them when a table, summary or page asks for them, and refuses any change to their rows. Only the connection details, with the password in Parameter Store, are kept in Sterodata.
Services outside AWS
- Email. The emails Sterodata sends, such as sign-up codes, password resets, invitations and the copies a form sends after an order, go out through Resend, an email delivery service.
- AI assistants. When a member connects ChatGPT, Claude or Codex, what the assistant reads on their behalf goes to the company that runs that assistant, under that company's terms. Nothing goes to an assistant nobody has connected (see Connected assistants' access).
Who can reach it
Inside the product, what each person reaches is decided by the workspace's own access rules (see Access). How Sterodata, a product of Yodly SRL, handles personal data is set out in the privacy policy.
Last updated 29 October 2026