HubSpot

SaaS / Software United States Website Reviewed Sept. 2, 2026

Marketing, sales, service and CMS hubs on a single CRM, widely used by SMB marketing and revenue teams.

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001:2022 Accredited third-party certification body HubSpot production platform and supporting ISMS Current
SOC 2 Type II and SOC 3 Independent third-party auditor HubSpot CRM platform. SOC 3 published publicly; SOC 2 available to customers under NDA Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
GDPR 2016/679
Full
HubSpot acts as processor under its DPA; SCCs and UK IDTA available
PCI DSS v4.0
Partial
Cardholder data handled by HubSpot payment partners rather than HubSpot itself

Assess HubSpot in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.