Subprocessors
Every third party that processes customer data, what it does, and where it is.
Helm Shift uses a small number of third party providers to deliver the Service. This page lists every provider that processes customer data, and is kept current.
Providers in use today
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare | Application hosting (Pages and Workers), and bot protection on our forms | Global edge network |
| Supabase | Database, authentication and file storage | Canada (AWS ca-central-1, Montréal) |
| Anthropic | AI assistant features (Claude API) | United States |
| Resend | Transactional email delivery (invitations, schedule and low stock notifications). Receives staff names and email addresses. | United States |
| Push notification delivery to staff devices (Firebase Cloud Messaging), and embedded how-to videos (YouTube, in privacy-enhanced mode) | United States | |
| Calendly | Scheduling the walkthrough call booked from our website. If you book a call, the name, email, business and message you enter are sent to Calendly. | United States |
Providers used only if you turn them on
These process customer data only once you choose to use the feature. If you never connect them, they receive nothing.
| Provider | Purpose | Location |
|---|---|---|
| Stripe | Subscription payments and billing, once you move to a paid plan | United States |
| Square | Point of sale integration, if you connect your Square account | United States |
| Toast | Point of sale integration, if you connect your Toast account | United States |
Anthropic does not retain customer data for model training.
Your database, authentication records and uploaded files are stored in Canada. Providers located outside Canada are bound by contractual safeguards as described in section 10 of our Privacy Policy.
We will update this page before adding a new subprocessor that processes customer data, and customers may ask to be notified of changes by contacting us at [email protected].