Not legal advice · Summaries of vendors' public pages, which change often. Verify with the vendor and your contract before relying on anything here.

Does HubSpot AI (Breeze) train on your data?

Business plan HubSpot · CRM · Last verified

Trains by default

Trains on business data unless you opt out.

Short answer: Yes, opt-out

"HubSpot may use customer data ... to train and improve HubSpot's own AI models." Super Admins can opt out; opt-outs apply going forward only (no deletion from already-trained models). Accounts with Sensitive Data on are opted out automatically.

Why this matters: Data used for training can't be pulled back out of a trained model, so opting out only protects what comes after. Why training matters →

1/7 assurances found·3 of 9 fields confirmed from vendor pages

Below: retention, SOC 2, ISO 27001/42001, DPA, BAA, data residency and zero-retention for HubSpot AI (Breeze), each linked to HubSpot's own page.

Summary of HubSpot's public pages as of Oct 17, 2026. Not legal advice: terms vary by plan and contract and can change. Confirm with HubSpot before relying on it.

Trains on your data by default

Yes, opt-out

"HubSpot may use customer data ... to train and improve HubSpot's own AI models." Super Admins can opt out; opt-outs apply going forward only (no deletion from already-trained models). Accounts with Sensitive Data on are opted out automatically.

Data retention

Unknown

Third-party AI providers: zero retention 'wherever possible'.

SOC 2 Type II

Unknown

Mentions data centers reviewed for SOC2 compliance; no HubSpot SOC 2 Type II claim on pages checked.

ISO/IEC 27001

Unknown

Not stated on the HubSpot pages we checked.

ISO/IEC 42001

Unknown

Not stated on the HubSpot pages we checked.

DPA available

Yes

HubSpot Data Processing Agreement.

BAA / HIPAA

Unknown

Not stated on the HubSpot pages we checked.

Data residency options

Unknown

Not stated on the HubSpot pages we checked.

Zero-retention option

Partial

Zero data retention with third-party AI providers 'wherever possible'.

Vendor pages we monitor for this tool

We save a fingerprint (SHA-256 of the page's visible text) on every check so we can spot when a vendor edits its terms.

Compare with

See all CRM tools · Why AI training on your data matters · How we source and verify this