What Helen reads, what she never does, and where your data goes.
The workspace your team creates. For repositories you connect through our GitHub App: pull request and issue titles, diffs, and check status. From other tools you connect, such as Linear, Notion, or Slack: the items that account can see.
She never merges, closes, or edits a pull request. She never changes a decision on her own. Changes she suggests arrive as proposals that a person applies or declines.
Every flag goes to Reconcile, where a person acknowledges it, fixes it, or dismisses it. Helen's GitHub check blocks a merge only if you make it a required check in GitHub.
We do not sell your content, and we do not use it to train our own models. AI features send the relevant content to model providers whose terms prohibit training on business inputs. We record prompts and model outputs only if a workspace admin turns that on. It is off by default. We use TLS in transit, check every request against workspace membership, and encrypt stored third-party credentials.
The companies that process data for Helen's Foundry, from the privacy policy. The privacy policy lists the data categories each one receives.
| Provider | What it does for us |
|---|---|
| Cloudflare | Application hosting, object storage, database connection pooling, and edge delivery. |
| PlanetScale | Relational database, including accounts and sign-in sessions. |
| Google Cloud | Hosting for background processing, including AI features and integration sync. |
| Inngest | Background job scheduling and execution. |
| Upstash | Short-lived caching and job coordination. |
| turbopuffer | Search index for finding related workspace content. |
| OpenRouter | Model processing for Helen's Foundry's AI features. |
| TypeSafe AI | Decision-model processing for Helen's Foundry's AI features. |
| OpenAI | Model processing and embeddings for Helen's Foundry's AI features. |
| GitHub | Source control integration for repositories you connect. |
| Resend | Transactional email delivery, such as workspace invitations. |
| Sentry | Error monitoring and diagnostics. |
| PostHog | Product analytics, session replay, and error diagnostics. |
| Stripe | Payment processing, subscriptions, and invoicing for paid plans. |
For anything your security or procurement team needs, write to us at [email protected].