Does HubSpot offer EU data residency?

HubSpot, Inc. · CRM & Marketing · official site ↗

EU data residency availableEU-US DPF + SCCsDPA available
Where does HubSpot store EU data — and who can touch it?
HubSpot offers EU data residency, and relies on the EU-US Data Privacy Framework plus SCCs for transfers.
HubSpot offers EU (Frankfurt) data hosting selectable at account creation across paid tiers, is certified to the EU-US Data Privacy Framework, and uses Standard Contractual Clauses for transfers.

EU data residency

Can you keep data in the EU?
New customers can have their account hosted in HubSpot's EU (Frankfurt, AWS) data region. The hosting region is set when the account is created and is not changed afterward, so EU residency is a signup-time decision rather than a per-feature toggle.
Transfer mechanism
HubSpot self-certifies to the EU-US Data Privacy Framework and incorporates the EU SCCs into its DPA for transfers to the US and other non-adequate countries.

Sub-processors

Who else processes your data?
HubSpot maintains a public sub-processor list with general authorisation and email/RSS notice of additions before a new sub-processor is engaged. current sub-processor list ↗

Data Processing Agreement (DPA)

Does HubSpot sign a DPA?
A pre-signed Data Processing Agreement is published online and applies to all customers without separate negotiation. DPA ↗
What the trust-badge pages don't tell you
EU hosting is decided at account creation and is effectively permanent — a US-hosted HubSpot account cannot simply be flipped to EU residency later. Decide before onboarding EU personal data.
Last checked 2026-06-02confidence: medium · GDPR terms, residency regions and sub-processors change — confirm current terms with HubSpot, Inc. and run your own transfer impact assessment. This is not legal advice.
$249/moto monitor up to 25 vendors' DPA & residency
$3,000/yr, incl. cited bulk export

Monitor your whole vendor list for DPA & residency changes

The free lookup answers one vendor at a time. Teams running EU vendor intake track dozens and need to know the moment a sub-processor, residency region or DPA term changes. Leave your work email and we'll set up monitoring + a cited export for your list.

We'll reply to set up your vendor list and confirm pricing. No card, no checkout here.

Get notified when this changes

Compliance isn't one-and-done. Leave your email and we'll alert you when any vendor's BAA or HIPAA status we cover changes.

One email per change. No newsletter, no selling your address.

Frequently asked questions

Does HubSpot offer EU data residency?
Yes. New customers can have their account hosted in HubSpot's EU (Frankfurt, AWS) data region. The hosting region is set when the account is created and is not changed afterward, so EU residency is a signup-time decision rather than a per-feature toggle.
Where does HubSpot send my data, and does it rely on SCCs?
HubSpot self-certifies to the EU-US Data Privacy Framework and incorporates the EU SCCs into its DPA for transfers to the US and other non-adequate countries.
Who are HubSpot's sub-processors?
HubSpot maintains a public sub-processor list with general authorisation and email/RSS notice of additions before a new sub-processor is engaged. See the current list at https://legal.hubspot.com/hubspot-sub-processors.
Does HubSpot sign a GDPR Data Processing Agreement (DPA)?
Yes — A pre-signed Data Processing Agreement is published online and applies to all customers without separate negotiation.
Is HubSpot GDPR compliant?
HubSpot can be used in a GDPR-compliant way, but compliance depends on your configuration, not just the vendor: HubSpot offers EU (Frankfurt) data hosting selectable at account creation across paid tiers, is certified to the EU-US Data Privacy Framework, and uses Standard Contractual Clauses for transfers. You are the controller — confirm the current DPA, residency and sub-processor terms with HubSpot, Inc. and run a transfer impact assessment before processing EU personal data. This is not legal advice.

Sources

https://legal.hubspot.com/dpa
Supports: Pre-signed self-serve DPA; SCCs as transfer mechanismdated: 2026-06-02
https://legal.hubspot.com/hubspot-sub-processors
Supports: Public sub-processor list with advance change noticedated: 2026-06-02
https://knowledge.hubspot.com/account/where-is-my-hubspot-data-hosted
Supports: EU (Frankfurt) hosting region set at account creationdated: 2026-06-02
This page is cited public information, not legal or compliance advice. Whether HubSpot can lawfully process your EU personal data depends on your plan, configured region, contract and a transfer impact assessment you control. Always confirm current terms with HubSpot, Inc. before sending EU personal data.

Check another vendor