---
title: "Security and data handling"
description: "How CoderHelm handles your code and data: changes on its own branch, builds in a sandbox with no credentials, read only data access, KMS encrypted secrets, signed webhooks and team roles."
url: https://coderhelm.com/security/
updated: 2026-11-05
---

# Guarded in code, not in a prompt.

> Every guard on this page is enforced by the platform itself, so it holds whatever the model writes.

## Your code

- CoderHelm reads your repository through the GitHub App, only on the repositories you install it on
- It does not git clone your repository; source is fetched when a run needs it
- Your build, lint and tests run in a separate container that holds no credentials; the copy of the source it uses is deleted after the build (one day at most)
- The code graph keeps symbol names and references, not your source files
- Every change goes on a `coderhelm/` branch and arrives as a pull request; a pull request CoderHelm wrote never merges without a person's approval

## Access and secrets

- **Encrypted with AWS KMS:** Stored tokens, keys and connection details are encrypted with AWS KMS. Data source secrets carry your team in the encryption context, so they cannot be read for another team.
- **Signed webhooks:** GitHub webhooks are checked with HMAC and SNS messages by signature before anything runs.
- **Team scoped:** Every request is scoped to your team, and roles (owner, admin, billing, member, viewer) decide who can change what.
- **Two-factor sign-in:** Each person has one second factor, asked for after a password, Google or GitHub alike. A team's admins can require it: people without one see only a setup screen until they set it up.
- **[Read only data sources](https://coderhelm.com/data-sources/):** Database, API and log lookups are read only, enforced at several independent points.

## What is stored

Model calls go to Anthropic through your team's own API key. The [privacy policy](https://coderhelm.com/privacy/) lists every sub processor, what it receives and how long each kind of data is kept.

Report a vulnerability to security@coderhelm.com.

## Related

- [Read only data sources for an AI coding agent](https://coderhelm.com/data-sources.md): CoderHelm checks your GraphQL API, CloudWatch Logs, PostgreSQL and Redshift while it plans, writes and reviews, with every lookup read only, enforced in code and recorded.
- [CloudWatch alarm to pull request](https://coderhelm.com/alerts.md): Route CloudWatch alarms and EventBridge events to CoderHelm through SNS. Matching alerts become analyzed pull requests in the right repository, and recoveries are paired with the alert that raised them.
- [GitHub issue and Jira ticket to pull request](https://coderhelm.com/pull-requests.md): Assign a GitHub issue or Jira ticket to CoderHelm and it plans the change, writes it on its own branch, runs your build and tests, reviews its own work and opens a pull request.

---

Source: https://coderhelm.com/security/ · Markdown: https://coderhelm.com/security.md · Updated 2026-11-05 · Get started: https://app.coderhelm.com