Guarded in code, not in a prompt.

• CoderHelm reads your repository through the GitHub App, only on the repositories you install it on
• It does not git clone your repository; source is fetched when a run needs it
• Your build, lint and tests run in a separate container that holds no credentials; the copy of the source it uses is deleted after the build (one day at most)
• The code graph keeps symbol names and references, not your source files
• Every change goes on a coderhelm/ branch and arrives as a pull request; a pull request CoderHelm wrote never merges without a person's approval

• Encrypted with AWS KMS

  Stored tokens, keys and connection details are encrypted with AWS KMS. Data source secrets carry your team in the encryption context, so they cannot be read for another team.

• Signed webhooks

  GitHub webhooks are checked with HMAC and SNS messages by signature before anything runs.

• Team scoped

  Every request is scoped to your team, and roles (owner, admin, billing, member, viewer) decide who can change what.

• Two-factor sign-in

  Each person has one second factor, asked for after a password, Google or GitHub alike. A team's admins can require it: people without one see only a setup screen until they set it up.

• Read only data sources

  Database, API and log lookups are read only, enforced at several independent points.

Model calls go to Anthropic through your team's own API key. The privacy policy lists every sub processor, what it receives and how long each kind of data is kept.

Report a vulnerability to security@coderhelm.com.