Security / trust page — HubSpot Sales Hub

Cited by

Facts read from this source

• GDPR features Report an error

  “With product features such as “GDPR delete” that permanently deletes record data, “lawful basis to communicate” consent tracking, subscription settings, and cookie tracking consent banners that are customizable across regions -- HubSpot makes it easier than ever to comply with GDPR and similar regulations.”

• Data sharing Report an error

  “We never share your data across customers and never sell it.”

• Ssl certificate Report an error

  “Secure your content and lead data with standard SSL on all HubSpot-hosted content.”

• SSO Report an error

  “Let users sign in to HubSpot using single sign-on credentials, making it easy for them to log in while enhancing security and your control over who has access.”

• 2FA Report an error

  “With two-factor authentication (2FA) enabled, logging in requires verification using a second device, such as your mobile phone.”

• Custom domain security Report an error

  “Allow your IT teams to manage the security of your HubSpot-hosted content, dictating how external visitors access your website for maximum protection.”

• Password protected pages Report an error

  “Password-protect website pages and landing pages, giving you the ability to control who can see the content on a specific page”

• Memberships Report an error

  “Restrict access to specific HubSpot-hosted web pages, landing pages, and blog content by requiring visitors to log in with a username and password.”

• Provider Report an error

  “HubSpot’s product infrastructure is hosted on Amazon Web Services (AWS) in the United States East region.”

• EU datacenter Report an error

  “As of July 19, 2021, new HubSpot customers have the option to store their data in our EU data center located in Frankfurt, Germany. Existing HubSpot customers can migrate their data to the EU data center using our data migration tool.”

• Infrastructure certifications Report an error

  “HubSpot products are hosted with cloud infrastructure providers with SOC 2 Type 2 and ISO 27001 certifications, among others.”

• SSO availability Report an error

  “The “Sign in with Google” feature is available to all HubSpot customers. More advanced SAML-based SSO integrated with any SAML-based IDP is available with any hub at the enterprise tier level.”

• Password policy Report an error

  “The built-in login enforces a uniform password policy which requires a minimum of 8 characters and a combination of lower and upper case letters, special characters, whitespace, and numbers. People who use HubSpot’s built-in login cannot change the default password policy.”

• Security standards Report an error

  “Our security program is driven not only by compliance and regulatory requirements, but also by industry best practices like the OWASP Top 10 and the CIS Critical Security Controls and threat intelligence.”