Security & Privacy at Helix

Helix Group Testing coordinates independent laboratory testing for its community. This page explains, in plain language, how the platform protects member information.

Account Security

Secure authentication for every member, vendor and administrator account.
Passwords are handled by our authentication provider and are never stored in plain text.
Access controls restrict each account to only the data its role requires.
Administrator-approved membership where applicable, so new accounts start as pending.

Data Privacy

We collect only the information required to operate the platform.
We do not sell member personal information.
Administrative access to sensitive information is limited to those who need it.

Payment Information

Helix does not store vendor payment credentials or cryptocurrency private keys.
Where third-party payment processors are used for Helix testing fees, payment information is handled by the applicable payment provider, not by Helix.
Manually reviewed payments rely on member-uploaded confirmations rather than stored payment credentials.

Uploaded Documents

Payment confirmations, shipping information and testing documents are stored privately.
These files should only be visible to authorized users based on their role, and are served through temporary links rather than public URLs.

Responsible Access

Members can see their own participation, orders and documents.
Vendors can see only the coordinated testing rounds and payment reviews assigned to them.
Administrators have broader access for operating the platform, with sensitive actions recorded in audit logs.

Security practices should be continuously reviewed and improved as the platform evolves. Questions? Contact Helix Support.