Provision record
HubSpot · HubSpot Sub-Processors · View original document ↗

Payment Processor Sub-Processor (Stripe)

Low severity High confidence Explicit document language Unique · 0 of 352 platforms
Stay ahead of the changes
Track HubSpot and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
Document Record

What it is

This provision identifies Stripe, Inc. as a feature-specific Sub-Processor engaged to support Commerce Hub products and services, with data centers listed in the United States across all regional data center columns.

This analysis describes what HubSpot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision discloses that payment-related Customer Data processed through HubSpot Commerce Hub is handled by Stripe, Inc. as a Sub-Processor. Customers using Commerce Hub for payment processing should be aware that payment and transaction data may be accessible to Stripe across US-based infrastructure, with no EU or other regional data center listed for this Sub-Processor.

Consumer impact (what this means for users)

Under this provision, Customer Data associated with Commerce Hub payment transactions is processed by Stripe, Inc. using US-based infrastructure. Customers in the EU or other non-US jurisdictions using Commerce Hub should evaluate the transfer mechanisms applicable to payment data transferred to Stripe's US infrastructure.

Cross-platform context

See how other platforms handle Payment Processor Sub-Processor (Stripe) and similar clauses.

Compare across platforms →
▸ View Original Clause Language DOCUMENT RECORD
"
Stripe, Inc. Payment Processor Support Commerce Hub products and services United States United States United States United States

Excerpt from HubSpot's Sub-Processors

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

(1) REGULATORY LANDSCAPE: Payment data processing engages GDPR Article 28 for EU customers, as well as PCI DSS requirements applicable to payment card data.

Insight

Unlock the full institutional analysis

Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.

Applicable agencies

  • Federal Trade Commission (ftc)
    Oversees unfair or deceptive business practices and can investigate companies that mislead consumers about data collection, sharing, or use.
    Who can file: Anyone affected by the company's practices (US or international)
    What you need: Your account details, a timeline of relevant events, and a description of the specific issue
    What to expect: Complaints inform FTC enforcement priorities and investigations but do not result in individual resolution or compensation
    File a complaint →

Provision details

Document information
Document
HubSpot Sub-Processors
Entity
HubSpot
Document last updated
July 6, 2026
Tracking information
First tracked
July 6, 2026
Last verified
July 9, 2026
Record ID
CA-P-015671
Document ID
CA-D-00932
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
be1ee395d61eaf157e884c8abd16fb6f7764b8b8dffdb3704efbafbd67a0364d
Analysis generated
July 6, 2026 23:16 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: HubSpot
Document: HubSpot Sub-Processors
Record ID: CA-P-015671
Captured: 2026-07-06 23:16:08 UTC
SHA-256: be1ee395d61eaf15…
URL: https://conductatlas.com/platform/hubspot/hubspot-sub-processors/provision/CA-P-015671/payment-processor-sub-processor-stripe/
Accessed: Sept. 8, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Low
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does HubSpot's Payment Processor Sub-Processor (Stripe) clause do?

This provision discloses that payment-related Customer Data processed through HubSpot Commerce Hub is handled by Stripe, Inc. as a Sub-Processor. Customers using Commerce Hub for payment processing should be aware that payment and transaction data may be accessible to Stripe across US-based infrastructure, with no EU or other regional data center listed for this Sub-Processor.

How does this clause affect you?

Under this provision, Customer Data associated with Commerce Hub payment transactions is processed by Stripe, Inc. using US-based infrastructure. Customers in the EU or other non-US jurisdictions using Commerce Hub should evaluate the transfer mechanisms applicable to payment data transferred to Stripe's US infrastructure.

Is ConductAtlas affiliated with HubSpot?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by HubSpot.