Security and privacy
Your procedures, training records and company knowledge stay protected and in the right hands. Here is what Helpable does today, in plain words.
Where your data lives
The Helpable app runs on Vercel in the EU region Stockholm. Your content is stored in a Postgres database at Supabase, also in Stockholm. AI features, sign-in, email and payments use providers that can process data outside the EU.
Everyone sees what they need
Helpable has five roles built from 19 separate rights, such as reading drafts, assigning training, seeing reports or managing billing. You give each person the role that fits. Content can also be limited to a team, and some content to managers only.
| Role | What this person can do |
|---|---|
| Owner | Everything, including billing, handing over the workspace and deleting it |
| Admin | Manage knowledge, procedures, training, team members and settings, see everyone's progress |
| Training manager | Create and assign training, grade answers, see reports, manage certificates |
| Course creator | Build training. Sees nobody else's results. |
| Member | Read published knowledge, follow training, confirm procedures |
Proof of who read what
- Every read confirmation is stored per person and per version of a procedure, with date and time.
- After an important change you can ask everyone to confirm the new version.
- Reports show who confirmed and who still has to. Training reports can be exported as CSV.
- Read confirmations are part of every plan.
Protection in practice
AI and your data
- AI answers, the AI writer and AI course drafts use Anthropic. The Answers search index uses OpenAI embeddings. Both are US companies.
- Text is only sent when someone uses an AI feature, and only the passages needed for that answer.
- Helpable does not use your content to train AI models. Our AI providers do not train on data sent through their API by default.
- Answers only searches content the person asking may see, and shows the source of every answer.
GDPR
- Your organisation is the controller of the content it puts in Helpable. Helpable is the processor.
- A data processing agreement is available on request.
- Requests to see, correct, export or delete personal data go to [email protected].
- The workspace owner can delete the whole workspace.
Report a security issue
Found a weakness? Email [email protected] with the details. Please give us time to fix it before you share it publicly.
Frequently asked questions
Where is our data stored?
Helpable stores your content in a Postgres database at Supabase in Stockholm, Sweden. The app runs on Vercel in the same EU region.
Who in our team can see what?
Helpable gives each person one of five roles, built from 19 rights. Members read published knowledge and follow training. Managers and admins get more rights, and content can be limited to a team.
Can we prove who read a procedure?
Helpable stores every read confirmation per person and per version, with date and time. This is part of every plan.
Do you train AI on our content?
Helpable does not use your content to train AI models. Our AI providers do not train on data sent through their API by default.
Do you offer single sign-on (SSO)?
Helpable does not offer SSO or SAML at this moment. People sign in with email and password or with Google.
Does Helpable have a security certification?
Helpable has no external security certification at this moment. This page lists the measures that are in place today.