Contracting party
Customers in Germany, Austria, Switzerland and Liechtenstein contract with HubSpot Germany GmbH.
EU compliance setup · HubSpot
HubSpot, set up GDPR-compliant
HubSpot ships with most GDPR switches built in. The question is whether they are on in your account, and what 'confirmed' really means in HubSpot.
- Facts checked on 3 October 2026, each with its source.
- Fixed price € 890 for your whole stack, not per tool.
- Technical setup, not legal advice.
What we looked up for HubSpot
Data centre
HubSpot is hosted on AWS in the US, Canada, Australia and the EU (Germany). Which data centre an account gets is set at purchase by the geolocation of the sign-up IP address.
Limits of the location
The hosting location does not cover everything: add-ons, third-party products and beta services are excluded, and HubSpot explicitly makes no warranty that a location meets your data residency requirements.
EU-US Data Privacy Framework
HubSpot, Inc. is on the official list. Status on 3 October 2026: active, next recertification due on 6 November 2026.
Data processing agreement
The data processing agreement is incorporated into the Customer Terms of Service and applies with the subscription.
Data privacy settings
Data privacy settings are on by default only for accounts whose data is stored in the EU.
Double opt-in
With Marketing Hub Starter or the free tools, double opt-in comes as a basic feature: one default confirmation email that applies to all forms and pages.
Confirmation status
'Confirmed' does not always mean a click: contacts who received an email before double opt-in was turned on count as 'Confirmed from previous behavior'.
Sending domain
Without authentication, HubSpot sends with an email variable domain as the From address, which may look suspicious to a recipient's provider.
AI training
HubSpot may use customer data to train its AI models unless you opt out in your account settings.
This page is not legal advice and we are not a law firm. We report what the vendor itself documents, with a date. Vendors change their terms; the linked source in its current version always prevails.
Where HubSpot setups snag in Europe
US account, EU contacts
If the account is not in the EU data centre, the data privacy settings are off. Then the legal basis field, the consent section in forms and the cookie banner are missing until someone switches them on.
'Confirmed' is not the same as clicked
After double opt-in is switched on, earlier recipients count as confirmed. That status is not proof; if you have to demonstrate consent, you need the click or another source.
How we set up HubSpot
Check the account
Check the data centre, switch on data privacy settings, maintain the legal basis per contact, decide on AI training deliberately.
Double opt-in and forms
Switch on double opt-in, set up subscription types, forms with consent wording and a link to the privacy notice.
Sender and agreements
Sending domain with DKIM, SPF and DMARC, HubSpot Germany GmbH as processor in your records, US transfers documented.
What people ask about HubSpot
Is HubSpot GDPR compliant?
No tool is compliant on its own; it depends on the setup. HubSpot ships with data privacy settings, legal basis per contact, double opt-in and an EU data centre. What matters is whether those features are switched on in your account.
Is my HubSpot data in the EU?
It depends on where the account was created: HubSpot assigns the data centre by the sign-up IP address. Even in the EU data centre, add-ons, third-party apps and beta services are excluded from the location.
What does 'Confirmed from previous behavior' mean?
The contact received an email before double opt-in was switched on and therefore counts as confirmed. The status does not prove a click on a confirmation link.
Who do I contract with in Austria?
With HubSpot Germany GmbH. That is also the entity to name in your records of processing.
There is usually more than one tool
The setup costs € 890 for your whole stack. The other tools we have checked the same way:
Tell us how HubSpot runs for you.
Tell us which tools you use and where your contacts come from. In the first call we will tell you whether € 890 covers it or whether more needs fixing, honestly either way.
Request the setup