See how we protect your trust.
Learn who can access your trust, how we handle documents, and how to take your data with you.
ACCESS
Access comes through people and firms.
People can access a trust through membership or a connected firm. Removing a member ends their membership access right away.
A connected firm gets access as a team. A professional can create and manage a client's trust before the client joins.
Only the trust owner can disconnect a firm. They can do this at any time.
A successor trustee reaches the trust through membership. Set up their membership so they can sign in with their own account.
PROTECTION
Here is how we handle your data.
Our providers encrypt your data.
Our hosting providers lock stored data with encryption by default (AES-256). They also protect data while it travels (TLS 1.2 or better).
We have written policies.
TrustHelm adopted its Information Security, Access Control, and Data Retention and Disposal policies in August 2026.
Documents use private storage.
Your documents are kept in private storage. We check access before giving someone a download link. The link expires after 60 seconds.
Your data is not for sale.
We never sell your data. Our privacy policy explains how we use and share it.
You can add a sign-in step.
Two-factor sign-in with an authenticator app is available on every account. It adds a code from an app when you sign in. It is optional. Turn it on under Settings, then Security. We use two-factor sign-in on every company admin account.
You can export for free.
Export is free. Open Settings, then Data and Export. Download documents as a ZIP file that holds them together. Get the trust Record as PDF or CSV, and financial records as CSV. PDF files are for reading, and CSV files open in spreadsheets.
We use AI to read documents.
Anthropic reads your whole document to help explain your trust. It does not train on your documents. Google Cloud Document AI reads scanned pages that lack usable text. We turn off model training with every AI vendor.
Our providers have audit reports.
TrustHelm does not have its own SOC 2 report yet. Supabase and Vercel have SOC 2 Type II audit reports. These reports cover checks of their security controls.
Report a security concern to security@trusthelm.ai. For privacy requests, email privacy@trusthelm.ai.
For how we handle your data, read the privacy policy and the terms of service.
Get started with TrustHelm.
Read our privacy policy before you share your documents.