Built to be trusted with your real numbers.

Helm sees your P&L, your vendor contracts, your team structure — things you'd normally only hand to a real advisor. Here's exactly how that data is handled.

What we never do

Sell your data to anyone, for any reason.

Share your business information, Vault files, or conversations with third parties beyond the infrastructure providers that run Helm.

Use your data to train AI models.

Have anyone on our team read your conversations.

How your data is protected

All data is encrypted in transit using TLS and encrypted at rest. Your Vault documents and conversations are stored in isolated, per-user storage — completely inaccessible to other Helm users.

Helm is built on Supabase for database and file storage. Supabase itself is SOC 2 Type 2 compliant — that certification covers our infrastructure provider, not a separate audit of Helm as a company.

Your AI advisors and your data

Helm uses Anthropic's Claude API to generate every advisor's responses. Under Anthropic's commercial API terms, your data is never used to train AI models — a firm contractual guarantee, not an opt-out setting. This is meaningfully different from a personal Claude.ai or ChatGPT account, where consumer plans may use your conversations for training by default.

You can verify Anthropic's commercial API data policy directly: platform.claude.com/docs/en/manage-claude/api-and-data-retention

Read-only QuickBooks access

When you connect QuickBooks Online, Helm only ever reads your data — pulling your Profit & Loss, Balance Sheet, and Accounts Receivable aging so your CFO can work from real numbers. Helm never creates, edits, or deletes any transaction, invoice, or record in your connected QuickBooks account.

You can disconnect QuickBooks at any time from Settings — it takes effect immediately, and Helm's stored copies of your QuickBooks tokens and cached financials are cleared right away.

Your rights

You can delete any file from your Vault at any time — removed immediately and permanently.

You can request full account deletion by emailing chris@helmteam.app. We process complete deletion of your account and all associated data within 30 days.

The full policy

This page covers the questions prospects ask most before connecting real financial data. For the complete legal privacy policy, see our Privacy Policy.

Last updated: July 31, 2026

↑ Back to top