# HighLevel — CRM

HighLevel by HighLevel Internet, Inc. holds a panel rating of 2.5/5 from 6 AI judges (category median 2.5/5), as of 2026-11-04. Provenance: provenance unknown; sovereignty: 2 of 6 dimensions proven.

- Vendor: HighLevel Internet, Inc. (https://www.gohighlevel.com)
- Category: [CRM](https://whats-best.ai/software/crm.md)
- Provenance (editorial classification): provenance unknown
- Canonical page: https://whats-best.ai/software/crm/highlevel
- Alternatives: https://whats-best.ai/software/crm/highlevel/alternatives ([markdown](https://whats-best.ai/software/crm/highlevel/alternatives.md))
- Data as of: 2026-11-04 · evaluated 2026-11-04 · oldest source captured 2026-11-03

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: HighLevel Internet, Inc.
- Headquarters: Incorporated in United States [S2]
- Data hosting: Outside the EU by default [S2]
- Free plan: Not stated on the vendor’s pages as of 3 Nov 2026

## The panel's verdict

HighLevel is a CRM priced per account at Starter $97 /Month, Unlimited $297 /Month and Agency Pro at $497/month; pricing transparency scored a uniform 5 — prices are public, but we found no public information on annual pricing, VAT treatment or the usage meters behind phone and email rebilling. Scoring favors integrations at 7-8: a documented REST API across contacts, messaging, workflows, calendars and payments, OAuth 2.0 and Private Integration Tokens on all plans, webhooks, and rate limits published outright — though Twilio is the only named native integration documented. Weakest is sovereignty at 2-3: HighLevel LLC of Dallas, Texas hosts on Google Cloud Platform with no region named, the privacy policy discloses transfers to other countries including India, and we found no public information on EU hosting, a data processing agreement or a subprocessor list. Sales pipeline sits at 3-4, stages and flow only; automation at 6-7, contact management at 5-6 and data portability at 4-5 fill the middle. No criterion spans more than one point; the bench records no material split.

**Speaks for it:**
- A documented REST API covering contacts, messaging, workflows, calendars and payments, with OAuth 2.0 and Private Integration Tokens on all plans — the basis for integrations scores of 7-8
- Rate limits published outright — 100 requests per 10 seconds and 200,000 per day per Marketplace app per resource — and surfaced in rate-limit response headers
- Configurable contact deduplication, with primary and optional secondary match fields on email or phone, automatic merging on CSV import, messenger auto-merge and a manual merge
- A workflow builder with named triggers, conditions, filters, time delays, round-robin lead assignment and per-contact execution logs
- Public per-account prices on all three tiers, from Starter at $97 /Month with Unlimited Contacts and Unlimited Users to Agency Pro at $497/month

**Held against it:**
- Sovereignty scores of 2-3 for a US vendor, HighLevel LLC of Dallas, Texas, hosting on Google Cloud Platform with no region named and resting its GDPR posture on EU and UK representatives plus Data Privacy Framework certification
- The privacy policy discloses international transfers to other countries including India, and we found no public information on an EU hosting option, a data processing agreement or a published subprocessor list
- Sales pipeline scores of 3-4 — stages and deal flow are documented, and we found no public information on stage probabilities, forecasts, goals or win/loss reporting
- Only one self-service export is documented, companies to CSV including custom fields, and we found no public information on exporting contacts, deals, notes or activity history
- We found no public information on annual pricing, add-on prices, VAT treatment or the usage meters behind the "Rebill Phone & Email (no markup)" inclusion

**Best for:**
- You run a small team and want per-account pricing — Starter at $97 /Month includes 3 Sub-Accounts, Unlimited Contacts and Unlimited Users
- You build your own integrations and want a documented API with webhooks, versioned references and published rate limits on every plan
- You are migrating from HubSpot, ActiveCampaign, Keap, Zoho, ClickFunnels, Skool, Wix or Calendly and can rebuild email templates and landing pages by hand
- Your sales motion runs on stage-based pipelines and trigger-driven automation with round-robin assignment rather than weighted forecasting

**Avoid if:**
- You need personal data held in the EU — the vendor is a US entity whose privacy policy discloses transfers to other countries including India, and sovereignty scored 2-3
- Your forecast depends on stage probabilities, weighted pipeline values, goals or win/loss reporting — sales pipeline scored 3-4 on stages and flow
- You need a documented self-service exit for contacts and deals — only a company CSV export is documented, and the privacy policy states it may charge a processing fee where permitted by law for access requests
- Your integrations must be plan-stable — the captured pages give different figures for API access by plan

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v2). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The Solo Seller | The Data Protection Officer | The Sales Ops Lead | The RevOps Integrator | The Migrator | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Contact & data model | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 | 2.5/5 |
| Pipeline & forecasting | 2/5 | 1.5/5 | 2/5 | 2/5 | 1.5/5 | 1.5/5 |
| Automation & workflows | 3/5 | 3/5 | 3/5 | 3.5/5 | 3/5 | 3/5 |
| Integrations & API | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 4/5 | 3.5/5 |
| European sovereignty | 1/5 | 1/5 | 1.5/5 | 1/5 | 1/5 | 1/5 |
| Import, export & exit | 2/5 | 2/5 | 2.5/5 | 2.5/5 | 2.5/5 | 2/5 |
| Pricing transparency | 2.5/5 | 2.5/5 | 2.5/5 | 2.5/5 | 2.5/5 | 2.5/5 |
| **Weighted verdict** | **2.5/5** | **2/5** | **2.5/5** | **3/5** | **2.5/5** | **2.5/5** |

### The judges

- **The Solo Seller** (v1.2): Runs their pipeline between customer calls and pays with their own card. Optimizes for a CRM that is set up in an afternoon, priced honestly at 1-5 seats, and never asks them to configure an object model. Rejects seat minimums and features held hostage in enterprise tiers.
- **The Data Protection Officer** (v1.0): Knows a CRM is a database of other people's personal data before it is a sales tool. Optimizes for GDPR posture: EU hosting, DPA, subprocessor hygiene, consent fields, retention and deletion that actually delete. Rejects US-default hosting and enrichment features that scrape contacts from the open web.
- **The Sales Ops Lead** (v1.0): Owns the forecast a 40-seat team lives by. Optimizes for pipeline discipline: stage hygiene, required fields, routing, quota and forecast reporting the CFO will accept. Rejects freeform pipelines that cannot enforce a process and reporting that stops at a dashboard screenshot.
- **The RevOps Integrator** (v1.0): Treats the CRM as one system in a revenue stack. Optimizes for two-way email and calendar sync, a real API with webhooks, and native connections to the tools money already flows through. Rejects closed ecosystems and integrations that are one-way imports in disguise.
- **The Migrator** (v1.1): Has moved a company off a CRM twice and remembers every scar. Optimizes for clean import with dedupe, full export of every object including notes and activity history, and contract terms that permit leaving. Rejects export behind support tickets and per-record API metering that makes exit a project.
- **The Skeptic** (v1.2): Assumes the pricing page is the nicest thing the vendor will ever say. Hunts per-seat maths that explode at renewal, "unlimited" with footnotes, AI features priced by credits, dead changelogs and acquisition rumours. Exists to keep the rest of the bench honest.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: 2 of 6 dimensions proven.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Incorporated in US | 0/2 | [S2] |
| Hosting location | Outside the EU | 0/4 | [S2] |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- AI training: no [S2]
- Australia response days: Office of the Australian Information Commissioner · 30 [S2]
- Automated profiling: no [S2]
- Background checks: employee background checks · yes [S3]
- Complaint response days: 45 [S2]
- Dnt: no [S2]
- Dpf certified entities: /EU-U.S. DPF · UK Extension to the EU-U.S. DPF · Swiss-U.S. DPF · /HighLevel LLC · LeadConnector LLC [S2]
- Dpf dispute resolution: JAMS Mediation, Arbitration, and ADR Services · yes [S2]
- Encryption: AES-256 · TLS 1.2+ [S3]
- EU US dpf: yes · EU-U.S. Data Privacy Framework [S3]
- GDPR CCPA: yes · yes · yes · yes · yes [S3]
- GDPR rights regions: /EU/EEA · UK · Switzerland · GDPR / UK GDPR / Swiss nFADP [S2]
- HIPAA baa: yes · yes [S3]
- Legal bases: /consent · contract performance · legal obligation · legitimate interests [S2]
- Penetration testing: penetration testing · yes [S3]
- Sensitive data handling: yes [S2]
- Sig lite: SIG Lite · yes [S3]
- SOC 2 type ii: yes · annual · SOC 2 Type II [S3]
- System status: operational · yes [S3]
- US sale share: no · yes [S2]
- Vendor risk management: yes [S3]
- Vulnerability scanning: yes [S3]

**Data**
- Access fee possible: yes [S2]
- Anonymized research retention: yes [S2]
- Children age limit: 16 [S2]
- Sms optin sharing: no [S2]

**Hosting**
- International transfers: United States · India [S2]
- Provider: Google Cloud Platform (GCP) [S3]

**Integrations**
- Agency pro restricted endpoint list: Create Sub-Account · Enable SaaS for Sub-Account [S10]
- Agency pro restricted endpoints: no · no · yes [S10]
- API key generation removal: being removed from Agency and Sub-account settings [S10]
- API rest endpoints: REST endpoints for contacts, messaging, workflows, calendars, payments, webhooks, and more [S10]
- API v3 available: yes [S10]
- Auth methods all plans: yes · yes · no [S10]
- Auth use cases: internal or single-location integrations · public integrations and Marketplace apps [S10]
- Company export all: three-dot menu Export · yes [S13]
- Company export CSV: CSV · Contacts → Companies · yes [S13]
- Company export custom fields: yes [S13]
- Company export selected: checkbox selection + action bar Export · yes [S13]
- Courses API v3: yes · Courses [S10]
- CSV contact import: CSV import of contacts/companies with field mapping [S12]
- Docs URL: https://marketplace.gohighlevel.com/docs/ [S10]
- Favorite tools: Integrates With Your Favorite Tools [S1]
- Github feature requests: yes [S10]
- Migration guides: Migration guides for ActiveCampaign, ClickFunnels, Skool, Keap, Wix, Calendly, Zoho [S12]
- Oauth consent screen: yes · OAuth install page shows app name/logo, full list of requested permissions (scopes), explanation of each scope, and warnings for sensitive permissions before installation [S11]
- Oauth deny behavior: no · no [S11]
- Oauth existing apps affected: no · new installations or reauthorization via OAuth [S11]
- Oauth link format: https://marketplace.gohighlevel.com/oauth/chooselocation?… [S11]
- Oauth private apps: yes [S11]
- Oauth scope examples: Contacts: readonly: View your contact list. · Conversations: write: Send messages on your behalf. · Locations: readonly: View account location details [S11]
- Oauth scope warning: special warning displayed before proceeding · users: write · locations: write [S11]
- Oauth white label support: https://marketplace.leadconnectorhq.com/oauth/chooselocation · yes [S11]
- Plan API access all plans: Starter · Unlimited · Agency Pro · yes [S10]
- Rate limit burst: Marketplace app per resource · 10 · 100 [S10]
- Rate limit daily: Marketplace app per resource · 200000 [S10]
- Rate limit headers: X-RateLimit-Limit-Daily · X-RateLimit-Daily-Remaining · X-RateLimit-Interval-Milliseconds · X-RateLimit-Max · X-RateLimit-Remaining [S10]
- Standard endpoints all plans: yes · yes · yes [S10]
- Stoplight deprecated: yes [S10]
- Twilio setup: Twilio integration for calling and SMS [S12]
- V1 end of support: 2025-12-31 [S10]
- V1 existing integrations work: no · yes [S10]
- Versioned docs: yes [S10]
- Webhooks available: available or supported for certain integrations · yes [S10]

**Legal**
- Address: 1801 N. Lamar St., Suite 600, Dallas, Texas 75202 · Dallas · Texas [S3]
- Address: 75202 · Dallas · Texas · 1801 N. Lamar St., Suite 600 [S1]
- Address: HighLevel LLC · 5473 Blair Rd Ste 100, PMB 383313, Dallas, Texas 75231-4227 [S2]
- Controller role: EEA · United Kingdom · yes [S2]
- Entity: GoHighLevel Inc. · HighLevel LLC [S2]
- EU representative: Bonn · Germany · Rickert Rechtsanwaltsgesellschaft mbH [S2]
- Policy last updated: JULY 2026 [S2]
- UK representative: United Kingdom · Rickert Services Ltd [S2]

**Pricing**
- Agency pro plan price: 497 · USD [S10]
- Starter plan: Starter · freelancers & solo marketers · 3 · 97 [S1]
- Unlimited plan: Unlimited · agencies or growing businesses · 297 [S1]

**Product**
- Agent studio public API: yes [S10]
- All in one: A truly all-in-one platform built for operators, not just marketers [S1]
- Appointment notes sync:  [S4]
- Automation: Automation: Set it up once and let it run. [S1]
- Automation section setup: Workflows are set up in the Automations section of the CRM [S9]
- Bulk import not triggered: no [S8]
- Capture modules: CRM · Voice AI · Forms, Surveys & Quizzes · Websites, Funnels & Landing Pages · Webinar Funnels · Chat Widget / Conversation AI · Call Tracking · Inbound SMS & Social DMs · Social Planner · Missed Call Text-Back · AI Biz Card Scanner · QR… [S1]
- Community development: community-driven Ideas Board for voting on development direction [S1]
- Company export progress: record count · percent complete · yes [S13]
- Company export setup: no [S13]
- Company notes aggregation: product.opportunity_notes_filters · Filters allow you to include additional contacts’ notes linked to the same opportunity. · {"filters_for_related_contacts": true} [S4]
- Connected apps management: Settings > Connected Apps [S11]
- Conversations inbox: Conversations Inbox connecting email, SMS, Facebook Messenger [S12]
- CSV import available: yes [S7]
- CSV import merge behavior: email · phone · yes · no [S5]
- Custom stages: yes [S7]
- Ddos waf: yes · yes [S3]
- Dedup applies to sources: Forms · Zapier · Facebook · Instagram Messenger · CSV imports [S5]
- Dedup primary field: Email · Email · Phone [S5]
- Dedup secondary field: yes [S5]
- Dedup settings autosave: yes [S5]
- Dedup settings location: Settings > Business Profile > Contact Deduplication Preferences [S5]
- Duplicate detection: Duplicate detection may recognize contacts with same email/phone; merged records do not re-trigger the workflow [S8]
- Execution logs: yes [S8]
- Landing page builder: Landing page builder under Sites [S12]
- Merge contacts feature: yes [S5]
- Messenger auto merge: only when Allow Duplicate Contact is disabled · yes [S5]
- Mobile app: Mobile App: Run your business from anywhere. [S1]
- Notes access control: team members with record access; subject to roles and permissions [S4]
- Notes attachments: yes [S4]
- Notes automations: no [S4]
- Notes internal only: Notes are internal only; clients cannot view them in their portal or external communications [S4]
- Notes modules: contacts · opportunities · companies [S4]
- Notes pinning: yes [S4]
- Notes search: yes [S4]
- Notes sorting: ascending · descending [S4]
- Notes titles colors: yes · yes [S4]
- Opportunities pipelines: Pipelines under Opportunities; deals recreated or imported [S12]
- Opportunity creation methods: yes · yes · yes [S7]
- Opportunity move setting: Allow Opportunity to Move [S7]
- Payments products invoices: Products, invoices and payment links under Payments [S12]
- Permissions audit logs: yes · yes [S3]
- Pipeline structure: Contact → Opportunity → Pipeline → Stage [S7]
- Pipelines overview: Pipelines and opportunities organize sales process and track potential deals from first interaction through completion [S7]
- Round robin assignment: yes [S8]
- SSO: SSO · yes [S3]
- Stats: 7M+ · 7.3B · 179M · $5.2B+ [S1]
- Trigger filters: Trigger supports filters on tags, custom fields, or type; tag operators include Equals to / Not equals to, Any of, None of, and multiple tag filters with AND logic [S8]
- Two factor auth: 2FA · yes [S3]
- Workflow triggers: Customer Booked Appointment · Contact Tag · Facebook Lead Form Submitted · Payment Received · Contact Created · Call Status · Survey Submitted · Form Submitted [S7]
- Workflows builder: Automation Workflows with triggers, actions, delays, conditional logic [S12]

**Subprocessors**
- Affiliate data shared: /name · email address · account plan [S2]
- Google: /Google Analytics · Google Ads [S2]

**Support**
- API no dev consulting: https://developers.gohighlevel.com/support · no [S10]
- API slack community: https://developers.gohighlevel.com/join-dev-community · developer Slack group [S10]
- Award winning: Award-winning support: Get real help from real people. [S1]
- Company export permissions: yes [S13]
- Dev council call: monthly, second to last Friday [S10]
- Resources: Support resources and community forums [S12]

## Questions

### Is HighLevel European?

Not determined: the vendor’s pages as captured do not say where HighLevel is based. Its vendor, HighLevel Internet, Inc., is incorporated in United States, per [the vendor’s page captured 3 Nov 2026](https://whats-best.ai/evidence/17028).

### Where does HighLevel store data?

HighLevel stores customer data outside the EU by default, per [the vendor’s page captured 3 Nov 2026](https://whats-best.ai/evidence/17028).

### Does HighLevel have a free plan?

Not stated on the vendor’s pages as of 3 Nov 2026.

### What are the best alternatives to HighLevel?

As of 4 Nov 2026, the panel rates [HubSpot Sales Hub (3/5)](https://whats-best.ai/software/crm/hubspot), [OnePageCRM (3/5)](https://whats-best.ai/software/crm/onepagecrm) and [Pipeliner CRM (3/5)](https://whats-best.ai/software/crm/pipeliner-crm) highest among the other 55 CRM products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [OnePageCRM](https://whats-best.ai/software/crm/onepagecrm) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [HighLevel alternatives](https://whats-best.ai/software/crm/highlevel/alternatives).

## What this page leaves out

- 4 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 4 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 compliance fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.

## Sources

- [S1] Vendor page: https://www.gohighlevel.com (checked 2026-11-03)
- [S2] Privacy policy — found from the homepage: https://www.gohighlevel.com/privacy-policy (checked 2026-11-03)
- [S3] Security / trust page — found from the homepage: https://www.gohighlevel.com/privacy-and-security (checked 2026-11-03)
- [S4] Contact & data model — found from sitemap: https://help.gohighlevel.com/support/solutions/articles/155000004555-highlevel-notes-for-managing-contacts-opportunities-and-company-records (checked 2026-11-03)
- [S5] Contact & data model — found from sitemap: https://help.gohighlevel.com/support/solutions/articles/48001181714-allow-duplicate-contacts-contact-deduplication-preferences- (checked 2026-11-03)
- [S6] Pipeline & forecasting — found from sitemap: https://help.gohighlevel.com/support/solutions/articles/155000007688-opportunity-forecasting-in-highlevel (checked 2026-11-03)
- [S7] Pipeline & forecasting — found from sitemap: https://help.gohighlevel.com/support/solutions/articles/155000005062-getting-started-setup-pipelines-and-opportunities (checked 2026-11-03)
- [S8] Automation & workflows — found from sitemap: https://help.gohighlevel.com/support/solutions/articles/155000002486-workflow-trigger-contact-created (checked 2026-11-03)
- [S9] Automation & workflows — found from sitemap: https://help.gohighlevel.com/support/solutions/articles/155000002477-workflow-trigger-contact-changed (checked 2026-11-03)
- [S10] Integrations & API — found from sitemap: https://help.gohighlevel.com/support/solutions/articles/48001060529-highlevel-api-documentation (checked 2026-11-03)
- [S11] Integrations & API — found from sitemap: https://help.gohighlevel.com/support/solutions/articles/155000005002-api-security-oauth-consent-for-marketplace-apps (checked 2026-11-03)
- [S12] Import, export & exit — found from sitemap: https://help.gohighlevel.com/support/solutions/articles/155000003388-hubspot-to-highlevel-migration-guide- (checked 2026-11-03)
- [S13] Import, export & exit — found from sitemap: https://help.gohighlevel.com/support/solutions/articles/155000007394-export-companies-csv-download- (checked 2026-11-03)

---

Cite as: whats-best.ai, "HighLevel — CRM", AI panel analysis, as of 2026-11-04. https://whats-best.ai/software/crm/highlevel

Corrections: https://whats-best.ai/correct/1392?target=page