You see the scopes before you connect
The Connections screen says exactly what IL Co reads from and writes to Slack, Linear and GitHub — before anyone clicks Connect.
Nothing leaves IL Co until a person approves it.
IL Co reads from the tools your team already uses and writes back only what its author approved. These are the controls that exist today — described at the scope they are actually built.
The list of what each connection can read and write is on What IL Co reads.
GitHub is read-only
The IL Co GitHub App reads pull requests, reviews and commits in repositories you grant. It never commits, opens or merges a pull request, or changes a repository.
Nothing is posted without approval
A handoff reaches Slack or Linear only after its author approves it. Rejecting it means it is never published.
Drafts are private to their author
While a handoff waits for review, only the person it was drafted for can see it.
Tokens stay on the server, encrypted
Connection tokens are held by the IL Co server and encrypted at rest. Each connect handshake is bound to the browser that started it.
Inbound requests are signed
Slack commands and Linear webhooks are verified against the provider’s signature, with a short replay window, before anything is queued.
Everything is scoped to a workspace
Every request is checked against workspace membership and role. Guests can view, comment and search; they cannot create or change work.
Each handoff keeps its history
Drafted, edited, approved, published, questioned, reassigned, accepted — every step is recorded on the handoff itself.
Your data is never used for training.
IL Co does not train AI models on customer data, and does not let its AI provider do so. When AI drafting is on, a handoff's own cited sources go to Anthropic through its commercial API, whose terms keep API inputs and outputs out of model training.
How we process your data.
A summary of the terms a data processing agreement covers, as IL Co works today.
- Your workspace decides what IL Co processes. IL Co processes it only to provide the service: to draft, store, show and post the handoffs your team approves.
- Only the sub-processors listed below receive data, each only what its job needs.
- Access inside IL Co is limited to workspace members by role, and drafts to their author until they approve.
- You can export your account data and delete your account in Settings, and ask us to erase it permanently.
- A signed data processing agreement is available on request: email cto@ilconcetto.org with the terms your company needs.
Sub-processors.
| Service | What it does for IL Co |
|---|---|
| Render | Runs the IL Co API and background worker. |
| Cloudflare | Serves this website and stores uploaded files. |
| Neon | The database: accounts, workspaces and handoffs. |
| Upstash | Short-lived counters and caches. |
| Resend | Sign-in, invitation and handoff email. |
| Sentry | Error reports, sent without personal data such as emails or tokens. |
| Anthropic | Drafts handoff text from a handoff’s own cited sources, when AI drafting is on. |
| Razorpay | Takes card payments for paid plans. IL Co never sees card numbers. |
Slack, Linear, Jira, GitHub and GitLab receive only what an approved handoff posts back to them. IL Co does not sell personal data or share it for advertising.
How long data is kept.
- Workspace content (handoffs, edits, comments, imported excerpts) is kept until someone deletes it in IL Co or the workspace is deleted.
- A deleted account is closed at once and every session ends. It can be recovered for 30 days. Permanent erasure is done on request by email; it is not yet automatic.
- Connection tokens are kept while a tool is connected and removed when it is disconnected. AI-client connections end when they expire or are revoked.
- The public pull-request tool keeps a result in memory for up to 10 minutes, then forgets it.
- Beta requests from the site are kept until you ask us to delete them.
The honest boundary.
A trust page that overstates is worse than one that says less. So, plainly:
- IL Co holds no security certification. We do not claim SOC 2, ISO 27001, HIPAA or any compliance attestation, because none has been carried out.
- What IL Co writes outside the workspace is deliberately small: one Slack message and one Linear comment per approved handoff, and a Linear status change only when the author picks one.
- IL Co is in beta. We do not publish customer names, usage numbers or benchmarks.
Context moves. Control stays with you.
Free for up to 10 people and 7 handoffs a month. No card. Works with Slack, Linear, Jira, GitHub and GitLab.