Storage and encryption
How much space you have, what "encrypted at rest" actually means here, and where the files physically are.
Your quota
The Storage indicator shows "{used} of {limit}", or just "{used} used" on a plan with no
limit.
What counts: everything in the store, including documents Steerd generated. A year of invoicing is a real number of megabytes.
When you are near the limit, the answer is usually to delete large uploads you no longer need, not generated documents, which you cannot delete anyway and would not want to.
Encrypted at rest
Every file carries the note Encrypted at rest, and it is not decoration.
Files are stored encrypted. Somebody with access to the underlying storage has ciphertext, not your contracts. Decryption happens when you download, for you.
What that does and does not protect
It protects against the storage itself being read: a stolen disk, a misconfigured bucket, a provider-side incident.
It does not protect against somebody who is signed in as you. Encryption at rest is not a substitute for a password you keep to yourself and for reviewing who is on your team.
Where the files are
In EU object storage, which is a deliberate choice rather than a coincidence, and the same reason the rest of the infrastructure sits where it does.
Exporting everything
There is a one-click button, and it is Download my data under Your security. It builds a ZIP holding every file and attachment plus the records behind them; Your data covers what is in it and who can press it.
One thing about that archive belongs on this page rather than that one: the ZIP is not encrypted. Your files themselves are untouched by the export and stay encrypted where they are. What the button adds is a second copy of them, in the clear, in one archive: an ordinary ZIP that any computer opens without Steerd, without a password and without a key from us. That portability is the point of the export. A password-protected archive would be possible in principle; the export does not do that today, so the ZIP is the one thing in the store that holds your files in the clear. How long we keep it, and what happens to it afterwards, is in the privacy notice.
That is not a reason to avoid the button. It is a reason to treat the file you downloaded the way you would treat the contracts inside it.