​

Data Handling

​

What StateBase Stores

​

Encryption

• In transit: all API traffic is TLS 1.3.
• At rest: all data is encrypted at rest (AES-256).
• Embeddings: vectors are stored in encrypted indexes; raw content is retrievable only through your API key.

​

Retention

• Free tier: sessions and memories are retained for the active subscription period.
• Pro and Enterprise: configurable retention — you choose how long sessions, turns, and traces are kept.
• Enterprise: additional options for regional residency and delete-after-retention guarantees.

​

Deletion

from statebase import StateBase

sb = StateBase(api_key="your-key")

# Delete one memory item
sb.memory.delete(memory_id="mem_123")

# Delete a full session (state, turns, memories, traces)
sb.sessions.delete(session_id="sess_123")

# Wipe all data for a user across sessions (GDPR right-to-be-forgotten)
sb.users.delete(user_id="user_456")

​

Backups

• Automatic daily backups of the control plane.
• Point-in-time recovery available on Enterprise plans.
• Your data is never used for model training.

​

GDPR / CCPA

• Right to access: sb.users.export(user_id=...) returns all stored data as JSON.
• Right to erasure: sb.users.delete(user_id=...) removes it.
• Data Processing Agreement available on request.

​

Next Steps

• Isolation Model: how tenants and keys are separated
• Reliability Guarantees: availability and durability
• Self Hosting: keep data in your VPC