HubSpot
Vannus has not established which model this vendor runs, and does not infer one. Every finding below is quoted to the vendor’s own document, or marked not disclosed where the vendor publishes nothing.
- Contracting entity
- Region-dependent per the Jurisdiction Specific Terms Appendix. HubSpot, Inc. (Customer Location in North America or South America, except Canada and except Colombia where fees are paid in Colombian Pesos; also the default for any region not listed in the Appendix). HubSpot Ireland Limited (Europe including Russia but excluding the UK, France, Spain, Liechtenstein, the Netherlands and the DACH Region; plus the Middle East, Africa, Antarctica). Other local entities: HubSpot Canada Inc.; HubSpot Latin America S.A.S (Colombia, fees in COP); HubSpot Germany GmbH (DACH Region plus Liechtenstein); HubSpot France S.A.S.; HubSpot Spain, S.L.; HubSpot Netherlands B.V.; HubSpot UK Holdings Limited; HubSpot Australia Pty Ltd (Australia and New Zealand); HubSpot Japan KK; HubSpot India Private Limited (India, available to new customers as of the India Jurisdiction Terms Effective Date; customers in India with an existing Agreement do not automatically change contracting entities); HubSpot Asia Pte. Ltd. FREE SERVICES: General Terms 11.2(iii) assigns users of only the Free Services to HubSpot, Inc. and Massachusetts law. Whether a region's Jurisdiction Specific Terms displace that for free users is not settled by the Terms this record cites (§283).
- Jurisdiction
- United States (HubSpot, Inc., Two Canal Park, Cambridge, MA 02141) for the Americas and as global default; Ireland (HubSpot Ireland Limited, HubSpot House, One Sir John Rogerson's Quay, Dublin 2) for EMEA; plus local entities in Canada, Colombia, Germany, France, Spain, the Netherlands, the UK, Australia, Japan, India and Singapore. The ToS does not state HubSpot, Inc.'s state of incorporation, so none is asserted here.
- Governing law
- Region-dependent, and genuinely non-US outside the Americas. Americas / any region not listed in the Appendix: 'the laws of the Commonwealth of Massachusetts, U.S.A., without reference to conflicts of law principles', exclusive jurisdiction and venue in the courts of Boston, Massachusetts, U.S.A. (General Terms 11.2). Europe ex UK/FR/ES/LI/NL/DACH, Middle East, Africa, Antarctica: laws of the Republic of Ireland, exclusive jurisdiction courts of Ireland (jst-europe 3). All verified from the JST pages: Canada - laws of Ontario, exclusive venue Toronto Courts of the Superior Court of Ontario; Colombia (fees in COP) - laws of Colombia; Germany, Austria, Switzerland and Liechtenstein - laws of Germany; United Kingdom - laws of England and Wales; France - laws of France; Spain - laws of Spain; Netherlands - laws of the Netherlands, exclusive venue Netherlands Commercial Court (NCC); Australia and New Zealand - laws of the state of New South Wales, Australia; India - laws of India, with an arbitration clause at jst-india 6; Japan - laws of Japan; rest of Asia-Pacific - laws of Singapore.
- US corporate control
- More than one contracting entity is on record, and which one a buyer signs with depends on facts about the buyer, such as where it is. The record does not establish US corporate control on every track, so it makes no single finding on US legal reach. the rule
- Depends on
- The contracting entity depends on your region or order form: read the clause for your position. The agreement is under a governing law that depends on where the customer is based.
All-in-one CRM, marketing automation, and sales platform
At HubSpot, we leverage both proprietary AI models and those from third-party service providers.
This page gives the finding and links the document it comes from. The AI Subprocessor Jurisdiction Report ($299) quotes the clause this finding rests on, and the clause for each other vendor in your stack where the report can quote one, in one dated document you can hand to an auditor.
Applies to: Enterprise subscriptions only, and only while the Sensitive Data setting is turned on: Marketing Hub Enterprise, Sales Hub Enterprise, Service Hub Enterprise, Data Hub Enterprise, Content Hub Enterprise, Smart CRM Enterprise, Revenue Hub Enterprise.
From the AI FAQ: “Accounts with Sensitive Data are automatically opted out of HubSpot AI model training and cannot opt in while Sensitive Data is turned on.” knowledge.hubspot.com ↗
Training and retention posture varies by plan. The default-plan row above describes the vendor’s free or standard tier; the paid-plan row is quoted from the document linked beside it. A negotiated contract can override either. Check your own agreement before relying on this.
On U.S. CLOUD Act reach specifically: the statute reaches a provider subject to U.S. jurisdiction over data in its possession, custody or control. Corporate control is a strong indicator of that and it is what we can evidence from published documents — but it is not the whole test. A company founded outside the U.S. can still contract through a U.S. entity or run substantial U.S. operations. Treat this as a starting point for your own review, not a legal determination, and take advice on anything that matters.
- 30 Sep 2026 · the record changed. Changed: the US-control finding. Why: we corrected our reading.
- 27 Sep 2026 · the record changed. Changed: the contracting entity. Why: we corrected our reading.
- 25 Sep 2026 · the record changed. Changed: the contracting entity. Why: we corrected our reading.
- 21 Sep 2026 · the record changed. Changed: what the answer depends on. Why: we corrected our reading.
- 8 Aug 2026 · first recorded: “Contracting entity depends on your region or order form — read the clause.”
This is the history of our record of this vendor: when we first recorded it; each time one of these changed: the determination sentence, the contracting entity, its country, the governing law, the US-control finding, what the answer depends on, the note beside the finding, or the cited document; and each time the vendor's document was read again and none of them changed. A change only in capitals, punctuation or spacing is not a line, and neither is a first document title. A line names what changed and does not repeat what those fields said before; the determination above says what they say now. Where the determination sentence itself changed, the line shows the earlier sentence too, marked as before, with why it changed. The automated re-check's latest result is not a line here; it is printed beside the clause above. A change here may be the vendor changing its document or us correcting our reading of it, and a line says which only where the record shows it; otherwise it says the cause is not established. Each line is today's reading of the record as it stood on that date. A reading we later found its citation does not carry was withdrawn, and is not repeated here. This history as data.
The vendor's published or catalog-recorded posture — the concrete facts this entry is built from. A full audit verifies each against the vendor's current documentation.
HubSpot: “Contracting entity depends on your region or order form — read the clause.” Vannus, https://vannus.co/tool/hubspot legal.hubspot.com · read 2026-09-27
Vannus records, from the vendor's own published documents, the legal entity a customer contracts with, the country that entity sits in, and the governing law of its terms — and whether the vendor runs its own model or resells someone else's. Each finding is quoted to its source and dated, or marked not disclosed where the vendor publishes nothing. No paid placement on a record, in the catalog or in search — affiliate status is walled off from the record, enforced by a test in the build. See the methodology →
Work here and think we got something wrong? Corrections and right of reply → — free, no account, and we publish your response next to our entry.