Sub-processors
Last updated: October 30, 2026
Helm uses the sub-processors below to run the service. Each one processes customer personal data only to provide its part of Helm. We give at least 30 days’ notice before adding or replacing one, as our Data Processing Addendum sets out.
Helm’s sub-processors
Supabase
- Purpose
- Database, sign-in, and file storage.
- Data
- All data stored in Helm, including conversations, transcripts, contact and booking details, and files you upload.
- Location
- United States (AWS us-east-1)
Vercel
- Purpose
- Hosting and running the Helm application and its scheduled jobs, and usage analytics for Helm’s own site and dashboard.
- Data
- Data passing through the application while it is processed.
- Location
- United States, with a global edge network
OpenAI
- Purpose
- AI models for replies, knowledge search, website voice, and phone calls.
- Data
- Conversation content, call audio and transcripts, and the knowledge you add.
- Location
- United States
Twilio
- Purpose
- Phone numbers, call connection, and text messages to callers, such as booking confirmations, for the phone line (early access).
- Data
- Phone numbers, call audio in transit, and text-message content.
- Location
- United States
Resend
- Purpose
- Email: notifications to your team, emails to your customers such as follow-ups and booking confirmations, and the email channel (early access).
- Data
- Names, email addresses, and message content.
- Location
- United States
Firecrawl
- Purpose
- Importing pages from your website as knowledge and checking them for changes.
- Data
- The public content of the pages you choose.
- Location
- United States
Stripe
- Purpose
- Billing and payments for your Helm subscription.
- Data
- Your business’s billing contact and payment details. No conversation data.
- Location
- United States
Sentry
- Purpose
- Error monitoring.
- Data
- Technical error details. User identity, cookies, headers, request bodies, and query strings are removed before sending.
- Location
- United States
Services you connect
These are used only when you connect them, under your own agreement with each provider. They are not Helm’s sub-processors.
Meta (WhatsApp Business, Facebook Messenger)
- Purpose
- Sending and receiving messages on those channels.
- Data
- Messages, phone numbers, and profile details.
Google Calendar
- Purpose
- Checking availability and adding bookings to your calendar.
- Data
- Booking times and attendee details.
Cal.com
- Purpose
- Checking availability and creating bookings.
- Data
- Booking times and attendee details.
Shopify
- Purpose
- Order lookups and, where you enable them, order actions; billing if you subscribe through the Shopify App Store.
- Data
- Order details, and the email or postal code used to verify a customer.
Your own tools
- Purpose
- Actions you set up, such as a webhook or API call, send the data you choose to the destination you choose.
- Data
- Whatever the action is set up to send.
Updates
We email workspace owners before a change. Anyone else who wants notice can ask at hello@helmchat.com.