HubSpot (Breeze AI)

Data-handling profile

Trains on input

Yes, on the consumer tier (enterprise tier excluded)

Retention

Third-party AI providers are contractually barred from training on HubSpot customer data (zero data retention). Separately, HubSpot may use customer data to train its own Breeze/AI models unless the account-level 'AI model training' setting is turned off; when off, data is excluded and not shared with other customers.

Data region

US

Certifications

SOC 2 Type IIISO 27001

DPA available

Yes

Breach history

2022 breach: a compromised employee account was used to access data of ~30 HubSpot customer accounts via an internal support tool.

EU AI Act

Embedded CRM AI (lead scoring, content generation); lead/customer-scoring agent features warrant review for high-risk classification under EU AI Act depending on downstream use (e.g., credit or employment-adjacent decisions).

Sources

• https://www.hubspot.com/products/artificial-intelligence/ai-trust
• https://knowledge.hubspot.com/hubspot-ai-cloud-infrastructure-frequently-asked-questions
• https://vantagepoint.io/blog/hs/hubspot-ai-model-training-customer-data-opt-out-guide

Every fact above is drawn from the vendor's public documentation, reviewed by a human, and version-stamped. Monitored daily for changes.

Change history

No material changes recorded since monitoring began.