HeliumOS Subprocessor List

EFFECTIVE SINCE

October 9, 2026

LAST UPDATED

October 9, 2026

1. Introduction

This HeliumOS Subprocessor List (this “List”) identifies the Subprocessors that Nova Labs, Inc. d/b/a “Helium” ("Nova Labs") engages to process Customer Personal Data in connection with the Services as of the date stated above. “Agreement” means the agreement between Nova Labs and Customer under which Customer orders the Services, which is the HeliumOS Terms and Conditions posted at helium.com/legal/heliumos unless Customer and Nova Labs have agreed otherwise in a signed writing. Capitalized terms used but not defined in this List have the meanings given in the Agreement or the DPA.

Nova Labs provides notice of new or replacement Subprocessors as described in Section 10.7 of the Agreement and Section 8 of the DPA. Nova Labs remains responsible for each Subprocessor’s compliance with the Agreement. Customer may subscribe to notices of changes to this List by contacting support@helium.com. The current version of this List is posted at helium.com/legal/subprocessors.

2. Current Subprocessors

Subprocessor	Purpose and Services Supported	Categories of Customer Personal Data	Processing Location
Railway Corporation	Hosting of the HeliumOS API, background jobs, and primary database (all Services)	All categories described in DPA Annex 1	United States
Tigris Data, Inc.	File storage for invoices, migration files, and record exports (Carrier Enablement Platform)	Subscriber names, service addresses, and records; call and text records	United States (Virginia and California)
Databricks, Inc. (Neon)	Database for the admin dashboard and saved HeliumAI conversations (HeliumAI; all Services)	Authorized User account data; Customer Data contained in saved HeliumAI conversations	United States
Vercel Inc.	Hosting of the admin dashboard and documentation; storage of support-ticket attachments; AI model routing (all Services; HeliumAI)	Authorized User IP addresses; support-ticket attachments; content submitted to AI features	United States (content may be cached on Vercel’s global network)
Amazon Web Services, Inc.	Data lake for usage records; carrier integration relay; encryption key management (all Services)	Call, text, and data usage records; line details sent to carriers	United States
Anthropic, PBC	AI model processing for HeliumAI and AI features (HeliumAI; Carrier Enablement Platform)	Content submitted to AI features and Customer Data used to answer queries	United States
TypeSafe AI, Inc.	Routing of AI queries to the appropriate AI model (HeliumAI; Carrier Enablement Platform)	Content submitted to AI features and query context	United States
Plus Five Five, Inc. (Resend)	Delivery of dashboard and support email (all Services)	Authorized User and support contact names and email addresses; support-ticket correspondence	United States
Functional Software, Inc. (Sentry)	Error tracking for the admin dashboard (all Services)	Error and request details	United States
AppSignal B.V.	Error and performance monitoring for the HeliumOS API (all Services)	Error and request details. Subscriber data fields are removed before transmission.	Netherlands
Cloudflare, Inc.	Bot protection for dashboard login and password reset (all Services)	Visitor IP addresses and browser signals	Global network
Bouncer Sp. z o.o.	Email address verification for fraud screening (Carrier Enablement Platform)	Subscriber email addresses	European Union
Nikolai Tschacher, trading as ipapi.is	IP address risk and location screening for fraud prevention (Carrier Enablement Platform)	Subscriber IP addresses	Germany
Avalara, Inc.	Telecom tax calculation, through November 30, 2026 (Carrier Enablement Platform)	Service addresses and taxed line items	United States
CereTax, Inc.	Telecom tax calculation, from December 1, 2026 (Carrier Enablement Platform)	Service addresses and taxed line items	United States

3. Affiliates

Nova Labs may also process Customer Personal Data through the Affiliates listed below, each of which is subject to the same obligations as a Subprocessor under the Agreement and the DPA.

Affiliates: None

4. Third-Party Services

Third-Party Services selected or contracted by Customer or a Venue Owner, including carriers, AAA providers, and Customer Systems, are not Nova Labs Subprocessors. Customer is responsible for its own agreements with those providers.

Select Language

English

HELIUM

BUSINESS

Convert your Wi-Fi Network