Black Snow IntelligenceBlack Snow Intelligence
Black Snow Report

HubSpot

Method v1.6As At 2026-08-1313 Surfaces Read1 Offering Assessed

Your own published record, as at 2026-08-13.

Your Details

The Macro Picture17

Red · Adverse
2
of 17 banded observations across 1 offering band Adverse. 1 was never measured.

What Is Published8

Your Own Words3

HubSpot relies on the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework, as well as Standard Contractual Clauses approved by the European Commission, to provide appropriate safeguards for the transfer of personal data.
Data transfers page. UK Addendum and Swiss amendments are carried inside the DPA rather than named as separate top-level mechanisms; recorded here under SCCs/DPF per the checklist's mechanism categories. · Source
HubSpot may use customer data to develop, support, and improve HubSpot AI features ... and to train AI models. You can opt out of this at any time in your account settings.
HubSpot AI training knowledge-base article. Training is on by default; the opt-out is a self-serve account setting, not confirmed as a binding contractual term on the surfaces read. · Source
This Data Processing Agreement ... is incorporated into and forms part of the Customer Terms of Service.
DPA, publicly readable without login, including Annexes 1-3, UK Addendum Tables 1-4 and the Swiss amendment language. · Source

Parties You Name11

See which of these are assessed in this register

Register Check3

AI Role By Offering1

Assessment Basis

Produced under Method v1.6 from the entity's fact record. 8 of 8 observations were measured under that generation; the rest read Not Measured, which is a fact about this register's coverage and not a finding about the entity.

Read from 13 first-party surface(s) across 1 assessed offering(s), found by the entity's own link graph and sitemap rather than by guessed paths.

Fact Record
Version 1.0, dated 2026-08-13
Standards Commit
12087d807054
Register Control Quality
One View

Verification And Challenge

Every finding on this record is a statement about what could be read on your own published surfaces as at 2026-08-13. Correspondence route as recorded on this card input: ror@blacksnowintel.com.

What A Machine Could Not Establish4

4 questions are open and 4 are established, read as at 2026-08-13 under method v1.6.

The One Thing To Publish First

Publish it: say whether decisions about people are made automatically.

Red · AdverseAutomated Decision-Making

A finding on the public record.

Where To Put It

This was read on your own page at https://legal.hubspot.com/privacy-policy. That is the page a reader already reaches for and does not find it on, so it is the page to correct first.

Where Others Stand

4 organisations in the register say whether decisions about people are made automatically. You do not.

What A Published Answer Looks Like

Under certain laws, residents may also be permitted to opt out of certain profiling relating to automated processing analyzing certain categories of an individual's information that would produce a legal or similarly significant effect. [the vendor] does not engage in this type of profiling of individuals.

A question answered plainly in public, by an organisation read as Strong on it. It is not an endorsement of the position the sentence states — Black Snow reads what is published and never recommends what to practise. Read on a published trust or security page. Claim tier Quoted. The organisation that published it is not named. A name in the original is replaced; nothing else in the sentence is changed.

One is named here, and one is deliberate. The rest of the open questions are listed below without a prescription; what to publish for each, in what order, and drafted machine-readable evidence for all of them, is the Deep Dive.

Still Open

Deep Dive

The full assessment, plus consulting on what to fix.

Reviewing your record is free.