You see the scopes before you connect
The Connections screen says exactly what IL Co reads from and writes to Slack, Linear and GitHub — before anyone clicks Connect.
Security
Nothing leaves IL Co until a person approves it.
IL Co reads from the tools your team already uses and writes back only what its author approved. These are the controls that exist today — described at the scope they are actually built.
GitHub is read-only
The IL Co GitHub App reads pull requests, reviews and commits in repositories you grant. It never commits, opens or merges a pull request, or changes a repository.
Nothing is posted without approval
A handoff reaches Slack or Linear only after its author approves it. Rejecting it means it is never published.
Drafts are private to their author
While a handoff waits for review, only the person it was drafted for can see it.
Tokens stay on the server, encrypted
Connection tokens are held by the IL Co server and encrypted at rest. Each connect handshake is bound to the browser that started it.
Inbound requests are signed
Slack commands and Linear webhooks are verified against the provider’s signature, with a short replay window, before anything is queued.
Everything is scoped to a workspace
Every request is checked against workspace membership and role. Guests can view, comment and search; they cannot create or change work.
Each handoff keeps its history
Drafted, edited, approved, published, questioned, reassigned, accepted — every step is recorded on the handoff itself.
What we do not claim
The honest boundary.
A trust page that overstates is worse than one that says less. So, plainly:
- IL Co holds no security certification. We do not claim SOC 2, ISO 27001, HIPAA or any compliance attestation, because none has been carried out.
- What IL Co writes outside the workspace is deliberately small: one Slack message and one Linear comment per approved handoff, and a Linear status change only when the author picks one.
- IL Co is in private beta and is being built with a small number of design partners. We do not publish customer names, usage numbers or benchmarks.
Context moves. Control stays with you.
IL Co is in private beta with a small number of engineering teams.