HubSpot Sub-Processors

This document is HubSpot's sub-processor list, published as a transparency disclosure under data processing obligations most directly associated with the GDPR's requirements for controllers and processors to document and disclose third-party sub-processors engaged in personal data processing. The document identifies third-party vendors to whom HubSpot transfers or grants access to personal data processed on behalf of its customers, categorizing each by name, purpose, and data processing location. The list is operationally significant because under GDPR Article 28, data processors must obtain controller authorization before engaging sub-processors, and this list serves as the mechanism by which HubSpot provides that disclosure to its business customers; however, the document as rendered does not include the full tabular sub-processor data due to HTML truncation, limiting the ability to assess the complete scope of third-party data flows. The document engages the EU General Data Protection Regulation, the UK GDPR, and potentially the Swiss Federal Act on Data Protection, given HubSpot's European customer base and cross-border data transfer obligations. Material compliance considerations include HubSpot customers' obligation to review sub-processor additions or changes and assess whether those changes affect their own data processing agreements, consent frameworks, or data transfer mechanisms such as Standard Contractual Clauses.