Subprocessors
Every third party that processes customer data, what it does, and where it is.
Helm Shift uses a small number of third party providers to deliver the Service. This page lists every provider that processes customer data, and is kept current.
Providers in use today
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare | Application hosting (Pages and Workers), and bot protection on our forms | Global edge network |
| Supabase | Database, authentication and file storage | Canada (AWS ca-central-1, Montréal) |
| Anthropic | AI assistant features (Claude API) | United States |
| Resend | Transactional email delivery (invitations and schedule notifications). Receives staff names and email addresses. | United States |
| Embedded how-to videos (YouTube, in privacy-enhanced mode) | United States | |
| Calendly | Scheduling the walkthrough call booked from our website. If you book a call, the name, email, business and message you enter are sent to Calendly. | United States |
Providers used only if you turn them on
These process customer data only once you choose to use the feature. If you never connect them, they receive nothing.
| Provider | Purpose | Location |
|---|---|---|
| Stripe | Subscription payments and billing, once you move to a paid plan | United States |
Helm Shift does not connect to any point of sale system. It works alongside whatever POS you already use, and we never need access to it. If that ever changes, this page is updated before the feature ships.
Anthropic does not retain customer data for model training.
Your database, authentication records and uploaded files are stored in Canada. Providers located outside Canada are bound by contractual safeguards as described in section 10 of our Privacy Policy.
We will update this page before adding a new subprocessor that processes customer data, and customers may ask to be notified of changes by contacting us at [email protected].