Subprocessors
Last updated: 2026-04-22
HelpMesh engages the following third-party subprocessors to deliver the Service. Each subprocessor is contractually bound to data protection terms consistent with our Data Processing Agreement and applicable privacy law (GDPR, UAE PDPL, CCPA, PIPEDA).
Current Subprocessors
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure — compute (ECS Fargate), database (RDS), cache (ElastiCache), object storage (S3), CDN (CloudFront) | All customer data at rest and in transit | ap-south-1 (Mumbai, India) primary. Per-tenant region selection — including me-central-1 (UAE), us-east-1, eu-west-1 — on the Phase 6.5 roadmap. |
| Stripe, Inc. | Subscription billing, payment processing, invoice delivery | Billing contact, company name, payment method (tokenised). No end-customer data. | United States, European Economic Area |
| Postmark (ActiveCampaign, LLC) | Transactional email delivery (account, notifications, invoice receipts) | Recipient email address, email subject/body, delivery status | United States |
| Pusher (100ms, Inc.) | Realtime message delivery to agent UI and widget | Channel IDs (opaque), message payload in transit only — not stored | United States (us-east-1 cluster) / EU (eu cluster) per tenant region |
| Anthropic, PBC | AI-powered features (draft suggestions, summarisation, tagging) | Message content submitted to AI features (opt-in per tenant); zero data retention contract | United States |
| OpenAI, L.L.C. | AI fallback provider when Anthropic is unavailable | Message content for AI features; zero data retention contract | United States |
| Cloudflare, Inc. | DNS, edge WAF, DDoS protection | IP addresses, request metadata for rate limiting and security | Global edge network |
| Twilio, Inc. | SMS and voice channel delivery (optional, per tenant) | Phone numbers, message content, call metadata | United States, European Union |
| Meta Platforms, Inc. (WhatsApp Business) | WhatsApp channel (optional, per tenant) | WhatsApp phone numbers, message content | Meta-operated infrastructure per region |
| Sentry (Functional Software, Inc.) | Application error monitoring | Error stack traces, request context (PII scrubbed before send) | United States / European Union per account region |
Notification of Changes
We will provide at least 30 days' prior notice before engaging a new subprocessor or changing the scope of an existing one's processing. Notifications are sent to the account owner email and posted to this page.
To receive subprocessor change notifications via email, subscribe at status.helpmesh.io and enable the “Subprocessor updates” category.
Right to Object
Customers on Enterprise plans may object to a new subprocessor on reasonable grounds within 30 days of notification. If we cannot accommodate the objection, Customer may terminate the affected service and receive a pro-rata refund of prepaid fees.
Contact
Questions: privacy@helpmesh.io