Legal
Subprocessors
The service providers that help us deliver HelmHOA — what each one does, and where it processes data.
Last updated: August 8, 2026
HelmHOA keeps its provider list deliberately short. Each provider below processes customer data on our behalf, under its own security and privacy commitments, only for the purpose listed. We update this page before adding a new subprocessor.
| Subprocessor | Purpose | Region |
|---|---|---|
| Google LLC (Firebase / Google Cloud Platform) | Core infrastructure: authentication, database, file storage, hosting, and server-side functions. All platform data is stored encrypted in Google Cloud. | United States |
| Anthropic PBC | AI processing for the platform's assistive features (see the AI Disclosure). Content is sent only when a feature is used; Anthropic does not use API-submitted data to train its models by default. | United States |
| Email delivery service | Transactional email only — invitations, notices, and reminders sent by the platform on the association's behalf. | United States |
| Stripe, Inc. (not yet active) | Payment processing, when subscription billing goes live. Card details will be handled by Stripe directly and never touch HelmHOA's servers. Until billing activates, Stripe processes no customer data. | United States |
| Samsung SmartThings (owner-connected) | Leak-sensor telemetry for the LeakCheck module. The unit owner holds the SmartThings account and authorizes a read-only connection; sensor events then flow from SmartThings to HelmHOA. HelmHOA never controls the owner's devices. | United States / global (per the owner's own SmartThings account) |
Questions and the DPA
A Data Processing Addendum describing our handling of customer personal data — including this subprocessor list, retention, and what happens on termination — is available on request for boards and their attorneys: email privacy@helmhoa.com or use the contact page.