Subprocessors

Supabase — Postgres database, authentication, edge functions, realtime. Processes all Customer Data. United States.

Cloudflare — application hosting, CDN, and edge request handling for our web surfaces. Processes request traffic, including personal data submitted through the product. United States.

Railway — application hosting for the AI orchestrator and automation workers. Processes conversation and job data. United States.

Twilio — SMS delivery, voice webhooks, and A2P 10DLC registration. Processes phone numbers, message content, and call metadata. United States.

Retell AI — AI voice agent for inbound and scheduled calls. Processes call audio, transcripts, and caller phone numbers. United States.

Resend — transactional, lifecycle, and marketing email delivery. Processes email addresses and message content. United States.

Anthropic — large language model inference for AI turns, drafting, and operator agents. Processes conversation content. United States.

OpenAI — large language model inference and embeddings. Processes conversation content and knowledge-base text. United States.

Fireworks AI — hosted inference for open-weight models (including DeepSeek-architecture and NVIDIA Nemotron models) used for volume messaging and internal tasks. Processes conversation content. United States.

No AI subprocessor trains foundation models on Customer Data. We route open-weight models through US-hosted inference; our orchestrator refuses to start if configured against a non-US inference endpoint.

Stripe — subscription billing, checkout, and the customer billing portal. Processes billing contact details and payment metadata; full card numbers are handled by Stripe and never stored on our servers. United States.

PostHog — product analytics and usage diagnostics for our own web surfaces. Processes usage events, device/browser data, and IP address. Suppressed when a Global Privacy Control signal or a cookie preference opts out. United States.

GitHub — source control and automated QA workflow runs. Processes engineering data; not a routine recipient of Customer Data. United States.

This page is versioned. The effective date above changes whenever this list changes.

We will post material subprocessor changes here before the new subprocessor begins processing Customer Data, where practicable. To be notified by email when this list changes, email support@helmpro.io with the subject "Subprocessor notice" and we will add you to the notification list.

Customers under a Data Processing Addendum may object to a new subprocessor as set out in that addendum.

Questions: support@helmpro.io.