Security and data
What happens to what you enter.
AgentStepper is built for client work. This page explains who can see your work, where it is stored, how it is processed, and how to delete it.
Who can see your work
- No other AgentStepper user can see your work. The database itself walls off each account from every other account, and this is tested on the live system.
- Sign-up is by invitation only. Sign-in is handled by Clerk.
- Search engines are blocked from the app.
What AgentStepper stores
- What you enter: analysis names, workflow descriptions, meeting notes, your edits, and the answers you accept.
- What it produces: step maps, recommendations, design documents, and suggested changes.
- Your name and email for sign-in are stored by Clerk, not in AgentStepper's database.
Where it is stored
- The database: Supabase, in the United States (Northern Virginia). Supabase states that all data is encrypted when stored and when sent.
- The app and its background processing: Render, in the United States (Ohio).
How your text is processed
- To write an analysis, AgentStepper sends your text to Claude, made by Anthropic.
- Before sending, it replaces the personal names it recognizes with a placeholder. Everything AgentStepper writes uses roles, never names.
- Under Anthropic's commercial terms, Anthropic may not train its models on this content. Anthropic deletes it within 30 days, except where it must keep it to enforce its usage policy or to comply with the law.
- AgentStepper's own logs never contain your text. They record only the cost and timing of each job.
Deleting your work
- Deleting an analysis removes all of it: descriptions, notes, steps, documents, suggestions, and answers.
- A cost record stays: the model used, the size of the request, the cost, and the time taken. It contains none of your text.
- Supabase keeps daily backups of the database for 7 days. A deleted analysis can remain in those backups for up to 7 days. Then it is gone.
Good practice
- You do not need client names. Use roles and general descriptions, and leave out confidential details.
Services AgentStepper uses
| Service | What it does | Where |
|---|---|---|
| Supabase | The database | United States (Northern Virginia) |
| Render | Runs the app and its background processing | United States (Ohio) |
| Clerk | Sign-in | Clerk's own infrastructure |
| Anthropic | The AI model, Claude | Anthropic's own infrastructure |
Questions
Write to chuck@perpetuoso.com.