Security
Boring on purpose.
SOC 2 Type II, EU or US residency, encryption everywhere, and an audit log that tells you what we did too.
Compliance
SOC 2 Type II
Audited annually. Report available under NDA from the trust portal, usually same day.
Data
EU or US, your choice
Chosen at signup, never moved without you. Backups in-region, encrypted, tested monthly.
Encryption
TLS 1.2+, AES-256 at rest
Keys managed in a cloud HSM and rotated on a schedule you can read.
Access
SSO, SCIM, roles
SAML and OIDC. Provisioning from Okta and Entra. Four roles, no custom-role sprawl.
Audit
Every change, with the diff
Ours and yours. Export as evidence bundles in one click.
Disclosure
security@helm.dev
We answer within one business day and publish fixed issues in the changelog.