Trust & privacy

Uploaded files are stored in a private object-storage bucket, rather than a public file library.

Before issuing a download link, Stride checks workspace membership and the file's visibility. Download links expire after five minutes by default.

The extracted text is also stored in the database, split into passages, so that analysis can quote and cite specific parts of a document.

Shared documents are read to build your company profile and ground strategy analysis. Uploader-only documents are stored and parsed for your preview, but excluded from AI embeddings, shared analysis, citations, and customer-account imports.

When Stride generates something, it retrieves the passages most relevant to the question and includes them in the request to the model. It does not send your entire document library on every request.

Stride does not train models on your documents. Model providers handle request data under their API terms.

Generating analysis means sending the retrieved excerpts, your answers, and your company profile to an external model provider (Anthropic or OpenAI, depending on configuration).

Shared document passages may also be sent to OpenAI to create search embeddings, independently of the text-model provider. This can happen even when Anthropic generates the analysis.

Where media uploads are supported, image extraction sends the image to the configured text-model provider. Audio and video files are sent to OpenAI for transcription; video processing transcribes audio rather than analyzing video frames. Transcripts and extracted descriptions are stored as source content.

How long a provider keeps request data, and what it may use it for, is governed by that provider's API terms.

Only metadata is recorded for observability: model name, token counts and timing. Prompt and completion text are not sent to any third-party monitoring service.

Workspace membership and document visibility are checked in application routes and database read policies.

All workspace members can read shared documents and shared strategy work. An uploader-only document is readable by its uploader while they remain a workspace member. If the uploader's account is deleted, a workspace owner can access the orphaned file.

Visibility is chosen at upload and cannot be changed afterwards. Private documents are hidden from other workspace members.

Stride records an audit event for security-relevant actions: uploads, downloads, deletions, approvals, overrides, exports, and membership changes. Each records who did it, to what, and when.

Workspace members cannot edit or delete audit events. Deleting a workspace removes its audit trail.

Only admins and owners can read the workspace audit trail. Events can include filenames and document identifiers, including for private files; they do not grant access to private document contents.

Application logs deliberately exclude document content, problem statements, quoted excerpts, and credentials. Identifiers are logged; the confidential text behind them is not.

An account holds your email address, your password in hashed form, and your name if you gave one. Stride uses these to sign you in and to show your teammates who did what.

The contact form holds what you typed into it: email, name, company, company size, job title, country, and a phone number if you gave one. Stride uses these to reply to you and arrange a call.

Marketing email is sent only to people who ticked the box asking for it. The box starts unticked, and saying no changes nothing else.

Stride does not operate advertising pixels or use these features to sell personal information or share it for cross-context behavioral advertising.

Other companies process it on Stride's behalf: a database and file-storage host, an email delivery service, and the model providers named above.

You can delete your account from the Profile tab in Settings. A workspace where you are the only member is deleted with it. A workspace owner can delete a workspace, and everything in it, from Settings.

For anything else, including a copy of what is held about you, a correction, removal of contact-form details, or stopping marketing email, write to team@strdai.com.

Stride uses authentication cookies to keep you signed in. Your cookie-banner choice is kept in browser local storage. When a request sends the Sec-GPC privacy header, a session cookie called stride-gpc records that signal so browser controls can recognize it.

Stride loads no advertising pixels. Vercel Web Analytics and Speed Insights count page views and measure page speed without cookies and without following you across other sites. They load whatever you choose on the cookie banner.

Two optional things contact a third party from your browser, and neither loads unless you choose Accept on the cookie banner. Error and performance reports go to Sentry, and include the page address and your browser's details. The booking calendar on the contact page is a Google page shown in a frame, and Google sets its own cookies inside it.

Declining, or not answering, leaves both switched off. You can change your answer at any time from "Cookie settings" in the site footer.

A detected Global Privacy Control signal disables optional browser services, including when you previously accepted them. We remember a refusal in this browser, so a later visit without the signal does not turn those services back on. A generic Accept action cannot override an active signal. This is a browser preference, not an account-wide deletion or sensitive-information limit request.

Legacy Do Not Track signals do not change these settings. Global Privacy Control and your explicit cookie choices are handled separately. Server-side operational monitoring, when configured, is separate from optional browser reporting.

Deleting a document removes the stored file, its extracted passages, and every citation pointing at it. Analysis that previously cited it keeps its text, but the citation no longer resolves.

Superseded versions of diagnoses, roadmaps, and briefs are kept rather than deleted. This is deliberate: the record of what was decided, and on what basis, is the point of the product.

Workspace owners can delete a workspace from Settings by confirming its name. This removes its records and stored files. Backup copies expire on their normal schedule, and information already sent to a model provider is handled under that provider's terms.

A document can contain text designed to manipulate a language model: instructions telling it to ignore its rules or to report something false.

Stride treats all document content as data, never as instruction. Retrieved passages are wrapped in an explicit boundary, tags that could be used to break out of that boundary are stripped, and the model is instructed that content inside it is evidence to analyze rather than commands to follow.

Citations are verified against the database before being stored: a source the model invented resolves to nothing and is dropped, and the claim it supported is downgraded from "from your documents" to "inferred".