Authentication
Clerk handles sign-in. Helm checks your signed-in session when you request company data. You can sign in with Google or Microsoft.
Payments
Stripe processes payments and sends Helm subscription updates. Helm does not store your full card details.
Action policy
Actions support auto / ask / block policy configuration. Ask-mode creates an approval item; that decision is not itself proof of service action or delivery. Payroll, tax filing, contract signature, vendor payment, and ATS action are not currently shipped.
Audit trail
Check ATLAS activity in your company history. Preparing a filing, submitting it and receiving state acceptance are shown separately.
Data isolation
Company access is checked on the server. Platform staff use separate permissions for filing support; owning one company does not grant access to another.
Encryption
Connections use encrypted transport. The managed database encrypts stored data. Helm also encrypts saved Google Growth and Drive sign-in credentials.
Responsible disclosure
If you find a vulnerability, please reach out to security@mahluminnovations.com. We respond within 48 hours and treat all reports as confidential.