Security, Privacy, and Control

Crafted, not Cobbled

When your tools are cobbled together without a solid foundation, each tool has a different standard for security or protocols for controlling data. Too much data spread across systems leaves gaps and cracks.

HubSpot is crafted, not cobbled.

Our product team takes a forward-thinking approach to privacy and security with the “Mainsail”, a framework for building a secure, reliable, and consumer-grade product. HubSpot doesn’t build anything new unless they are meeting the security and privacy standards we’ve laid out.

Secure by Design

The core tenets of HubSpot’s security program are to safeguard customer data and to maintain customer trust. 

HubSpot uses a defense-in-depth approach to implement layers of security throughout our organization. HubSpot is passionate about defining new security controls and continuously refining existing ones.

HubSpot's security program is driven not only by compliance and regulatory requirements, but also by industry best practices like the OWASP Top 10 and the CIS Critical Security Controls and threat intelligence.

Data and Privacy

Whether you’re using HubSpot products that are free or paid, feature-rich or lightweight, HubSpot works hard to maintain the privacy of data you entrust with HubSpot.

Data you store in HubSpot products is yours -- HubSpot's security program was put in place to protect it, and use it only as permitted in HubSpot's Customer Terms of Service and Privacy Policy. HubSpot never shares your data across customers and never sells it.

Compliance with Confidence

Whether it’s GDPR or a similar local regulation, it’s more important than ever that your teams be mindful of data privacy.

With product features such as “GDPR delete” that permanently deletes record data, “lawful basis to communicate” consent tracking, subscription settings, and cookie tracking consent banners that are customizable across regions -- HubSpot makes it easier than ever to comply with GDPR and similar regulations.