Subprocessors
The providers involved in the Service, their role, the data they handle and where that data is processed.
To provide the Service, Agence Hélium Inc. (“Gensy”) uses the following providers. Disclosures outside Quebec are subject to a privacy impact assessment (Law 25, s. 17) and are governed as described in the Privacy Policy (§7). Any new or replacement provider is announced at least 30 days before it goes into service, by email to the owner of each workspace, as provided in the Data Processing Agreement (§5).
Provider
Role
Data involved
Location
Supabase
Database, authentication, file storage
All Service data (accounts, employees, photos, encrypted tokens)
United States — AWS us-east-1 (North Virginia)
Vercel
Application hosting; audience measurement (with consent)
All Service data in transit (running the application); technical browsing data
United States / global CDN
Stripe
Payments and billing
Billing identity, subscription history
United States / Canada
Resend
Transactional email delivery
Email addresses, notification content
United States
Google (Gemini / Workspace)
Optional AI features; Gmail signature deployment
Content submitted to AI features; directory and signatures (if integration enabled)
United States
Microsoft (Graph)
Microsoft 365 directory import; Outlook add-in that inserts signatures
Directory and signatures (if integration enabled)
United States / Canada
Sentry
Application error monitoring
Technical error data (no IP, no cookies, text masked)
United States
Fal.ai
Optional image processing (photo background removal)
Photos submitted to the feature
United States
Mailgun
Email deliverability and rendering tests
Test emails (fictional data only)
United States / EU
Cloudflare (Turnstile)
Anti-bot protection on the sign-in form
Technical verification data
United States / global network
Cloudflare (R2)
Daily backup copy of hosted files
Staff photos, logos and brand assets — a copy of file storage, retained 29 days after deletion
United States / global network
Special case — MCP connector
If the Customer connects an AI assistant to its workspace through the MCP connector (remote connector https://app.gensy.email/api/mcp or local server gensy-mcp) or an API key, for example Claude, ChatGPT or Cursor, tool responses (names, emails, phone numbers, templates, statistics) pass through the provider of the chosen model (Anthropic, OpenAI…) and are subject to its terms, under the Customer’s responsibility; the consent screen says so. Portal tokens and billing identifiers are never served.
Change history: October 5, 2026, Cloudflare (R2) added for the daily backup copy of files; October 9, 2026, GitHub (Actions) added, which runs that copy.