Frequently asked questions

Helm is the Hub for Every Level of Management: one workspace for CRM and pipeline, projects and tasks, people and time off, finance, inventory and orders, docs and announcements, and an AI analyst that answers from your own data.

The front line sees their work, managers see boards and approvals, and owners see a command deck with pipeline, receivables, spend, stock value, and a ranked list of what needs attention.

Sign up, open the dashboard, and click "Load sample data". Every module fills with sample accounts, deals, projects, invoices, expenses, products, docs, and announcements. It only works while the workspace is empty, and everything it adds can be edited or deleted.

Members join only through an invitation from an owner or admin (People → Invite people). Each link works once, is tied to one email address, and expires after seven days. There is no open sign-up into an existing workspace.

Owner, admin, and member. Owners manage roles and the MFA policy and can invite admins; admins can invite members, approve time off, post announcements, and review the audit log; members work in every module.

50,000 sats per workspace per 30 days, with unlimited members. There is no per-seat pricing.

From Billing inside the app: create a Lightning invoice, pay it from any Lightning wallet, and the workspace unlocks as soon as the payment settles. Renewals stack onto the current period, so paying early never loses days.

Not today. Payment is by Lightning invoice. If your company needs an invoice or card option, tell us; it shapes the roadmap.

No software product is. CMMC certification is an assessment of your organization. Helm is aligned with NIST SP 800-171 Rev. 2 practices and built with the technical controls a CMMC Level 2 environment expects from an application, and it ships with a control mapping you can attach to your System Security Plan. Our aim is to make sure your everyday tools are not the gap.

New workspaces require MFA for every member by default. Members enrol with a standard authenticator app and receive single-use recovery codes. An owner can relax the policy after enrolling, but we recommend keeping it on.

Sign-ins, failed attempts, role changes, invitations, billing, AI questions, exports, and creates or status changes on business records are written to an append-only audit log. Owners and admins can filter it in Settings → Audit log and export it as CSV.

Email [email protected] with a description, the affected feature, steps to reproduce, and impact. Please do not post details publicly; allow a reasonable period for investigation and remediation.

Yes. Every record is scoped to your organization on the server, and every referenced record is verified to belong to it before it is linked or changed. Cross-tenant isolation is covered by automated tests.

On infrastructure with no inbound ports (ingress is through an encrypted tunnel), with nightly database backups. Self-hosted deployment is available for customers who require it.

AI Ops sends a short brief of your workspace figures to the model provider for each question and treats it strictly as data. Questions are rate-limited per user and per organization, and every question is recorded in the audit log.