Vendor record · hubspot.com
What HubSpot promises about your data.
Where HubSpot publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
HubSpot lists its sub-processors at legal.hubspot.com/sub-processors-page. We last read it on October 15, 2026.
- What has changed
We've recorded no change to its sub-processor list or data processing agreement between September 12, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at legal.hubspot.com/dpa (read October 10, 2026) gives you 30 days to object.
- Window
- 30
- Sub-processors
- 32
- Pages
- 9
- Copies
- 66
days to object when it adds a sub-processor
sub-processors named
pages we watch
dated copies of all its pages, since August 31, 2026
HubSpot DPA
HubSpot's data processing agreement gives 30 days to object to a new sub-processor. Here is the clause, from our October 10, 2026 copy:
30
days to object
“We will give you the opportunity to object to the engagement of new Sub-Processors on reasonable grounds relating to the protection of Customer Personal Data within 30 days of notifying you.”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that HubSpot published it.
legal.hubspot.com/dpa · read 2026-10-10 · fingerprint 8e71bdd1dab8d255…
How it says it sends notice
“You may subscribe to receive notifications by email if we update this page to add or replace any Sub-Processors, if any of our Sub-Processors materially change the services that they provide, or if they change the country from which they provide them.”
legal.hubspot.com/sub-processors-page · read 2026-10-10
How it says it sends notice
“You may subscribe to receive notifications by email if we make changes to the HubSpot Sub-Processors Page by completing the form available at https://legal.hubspot.com/subscribe-subprocessor-updates.”
legal.hubspot.com/dpa · read 2026-10-10
HubSpot sub-processors
HubSpot publishes a sub-processor list at legal.hubspot.com/sub-processors-page; we last read it on October 15, 2026. It names 32 entries. The first 15, as the list prints them: Ably Realtime Ltd.; Amazon Web Services, Inc.; Baseten Labs, Inc. (Effective October 16, 2026); Bright Data Ltd. (Effective October 16, 2026); Cloudflare, Inc.; ConvertAPI, UAB; Dropbox, Inc.; Exa Labs, Inc. (Effective October 16, 2026); Google LLC; HubSpot, Inc.; HubSpot Asia Pte. Ltd.; HubSpot Australia Pty. Ltd.; HubSpot Belgium NV; HubSpot Canada Inc.; HubSpot France S.A.S.; and 17 more in the full table below. The public record holds no change to the list read before September 15, 2026. A change we read after September 15, 2026 is published 30 days after we read it.
32 named · full table
Every public change we have recorded · Where vendors publish their lists
How long HubSpot keeps your data
HubSpot's privacy policy (hubspot.com/privacy, in the copy read October 15, 2026) says: “Any stored public YouTube API data is refreshed or completely deleted within 30 calendar days, or deleted immediately upon user request.”
Training on customer data
“If you opt out, we will no longer collect Customer Data to train our AI models, unless you later update your settings and opt in.”
hubspot.com/terms-of-service · read 2026-10-10
Training on customer data
“We use this data for a variety of purposes, including to provide our products and services to you, contact you about relevant content, and improve and promote our products and services.”
hubspot.com/privacy · read 2026-10-15
Training on customer data
“We may also use Customer Data to train our AI models in compliance with our obligations under the Agreement.”
hubspot.com/terms-of-service · read 2026-10-10
Training on customer data
“Purpose(s) of the Transfer and Further Processing Controller Personal Data will be transferred for the purposes contemplated in the Agreement, including to provide Customer with business information and to provide, maintain, append, improve, enhance, and develop HubSpot’s commercial dataset and the Subscription Services.”
legal.hubspot.com/dpa · read 2026-10-10
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Sub-processors named · 32 · 2 name an AI provider we list
Ably Realtime Ltd.
Conversation & Chat Functionality
United States
Amazon Web Services, Inc.
Hosting & Infrastructure
United States
Baseten Labs, Inc. (Effective October 16, 2026)AI · Baseten
AI Service Provider
United States
Bright Data Ltd. (Effective October 16, 2026)
Web Search Results
United States
Cloudflare, Inc.
Content Delivery Network
United States
ConvertAPI, UAB
File Functionality
United States
Dropbox, Inc.
E-Signature Functionality
United States
Exa Labs, Inc. (Effective October 16, 2026)
Web Search Results
United States
Google LLC
Infrastructure - Regional Data Processing
United States
HubSpot, Inc.
Services & Support
United States
HubSpot Asia Pte. Ltd.
Services & Support
Singapore
HubSpot Australia Pty. Ltd.
Services & Support
Australia
HubSpot Belgium NV
Services & Support
Belgium
HubSpot Canada Inc.
Services & Support
Canada
HubSpot France S.A.S.
Services & Support
France
HubSpot Germany GmbH
Services & Support
Germany
HubSpot India Private Limited
Services & Support
India
HubSpot Ireland Ltd
Services & Support
Ireland
HubSpot Japan KK
Services & Support
Japan
HubSpot Latin America, S.A.S.
Services & Support
Colombia
HubSpot Netherlands B.V.
Services & Support
The Netherlands
HubSpot Spain, S.L.
Services & Support
Spain
HubSpot Sweden
Services & Support
Sweden
HubSpot UK Holdings Ltd.
Services & Support
United Kingdom
Hyperdoc, Inc.
Meeting recordings and transcripts
United States
Litmus Software, Inc.
Email Functionality
United States
Meta Platforms, Inc.
Conversation Functionality
United States
Mux, Inc.
Video Functionality
United States
OpenAI, L.L.C.AI · OpenAI
AI Service Provider
United States
Snowflake Inc.
Infrastructure
United States
Stripe, Inc.
Payment Processor
United States
Twilio Inc.
Calling and SMS Functionality
United States
Certifications the trust page names · ISO 27001 · SOC 1 · SOC 2 · SOC 2 Type II · SOC 2 Type II · SOC 3 · SOC 3
Laws the trust page names · GDPR · GDPR · HIPAA
Data location · European Union
“As of July 19, 2021, new HubSpot customers have the option to store their data in our EU data center located in Frankfurt, Germany.”
hubspot.com/security · read 2026-10-10
International transfer notice · United States
“DATA TRANSFERS You acknowledge and agree that we may access and Process Customer Personal Data on a global basis as necessary to provide the Subscription Service in accordance with the Agreement, and in particular that Customer Personal Data may be transferred to and Processed by HubSpot, Inc. in the United States and to other jurisdictions where HubSpot Affiliates and Sub-Processors have operati…”
legal.hubspot.com/dpa · read 2026-10-10
The pages' own stamps: Effective 2026-10-16 · Last Modified 2026-09-16 · Last Modified 2026-09-16 · Last Modified 2026-09-16 · Last Modified 2026-09-16 · Last Updated 2023-04-18
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
What this page doesn’t tell you
No score.
Nothing here rates HubSpot. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at HubSpot? With an email at hubspot.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is HubSpot in your product? Hear the morning we read a change.
You get the lines that moved, in HubSpot’s own words, and the date any window closes. No card. Nothing to cancel.