AI Policy
Version: v1.0
Effective Date: March 23, 2026
Last Updated: October 25, 2026
In Plain Terms (As of October 2026)
- Model training: customer drawings and specifications are not used to train or fine-tune AI models.
- Processing: documents are processed transiently during analysis and stored securely in the cloud, encrypted in transit with TLS 1.2 or higher and at rest with AES-256.
- Retention and deletion: data is kept as long as needed to provide the service, with no fixed number of days published. Helonic deletes or anonymizes data on request unless the law requires it to be kept.
- Model providers and subprocessors: Helonic may use vetted third-party AI and cloud providers to run models and operate the platform. Each is evaluated for security posture, privacy controls, and contractual data-use commitments.
- Human review: AI findings are decision support. Qualified people review and validate them and decide the final action.
The named list of model providers and subprocessors and a retention period in days are not published here. Send questions to founders@helonic.com
For the 20 questions to ask any AI drawing review vendor about training, retention, and subprocessors, with Helonic’s answers, see does your AI drawing review vendor train on your drawings?.
Company
Helonic is an AI-powered platform that automatically detects discrepancies between construction drawings and project specifications, helping general contractors prevent costly RFIs before construction begins.
1. Purpose and Scope
This policy defines how Helonic uses artificial intelligence within our B2B SaaS platform and supporting operations. It applies to AI-enabled product capabilities, underlying cloud services, and personnel responsible for development, operations, and security.
2. How We Use AI
Helonic uses AI and computer vision to analyze construction drawing PDFs and project specification documents provided by customers. Outputs are analytical detection results used internally to surface potential discrepancies for further review.
Helonic does not use this core capability to generate customer-facing creative or open-ended generative content.
3. Data Privacy and AI Model Training
- Customers upload construction drawings and project specifications for analysis.
- Documents are processed transiently during analysis and stored securely in the cloud.
- Customer data is not used to train or fine-tune AI models.
- Data handling remains subject to customer contractual confidentiality obligations.
4. Third-Party AI Services
Helonic may use vetted third-party AI and cloud providers to support model execution and platform operations. Providers are evaluated for security posture, privacy controls, and contractual data-use commitments aligned to enterprise customer requirements.
5. Human Oversight and Review
AI findings are decision-support signals and not autonomous determinations. Qualified personnel review outputs, validate findings, and determine final actions within customer workflows.
6. Security Controls
- Data is encrypted in transit using TLS 1.2+.
- Data is encrypted at rest using AES-256.
- Infrastructure is cloud-hosted, with additional managed cloud services used for database and deployment operations.
- Access to systems and data is restricted according to least-privilege principles.
7. Governance and Accountability
Helonic maintains cross-functional AI governance across engineering, product, and security leadership. Governance responsibilities include policy enforcement, vendor oversight, issue escalation, and continuous control improvement.
8. Policy Review Cadence
This policy is reviewed at least annually and whenever there are material changes to AI usage, infrastructure, legal obligations, or customer security requirements. Revisions are versioned and approved by designated leadership.