Data Center locations

[joeycanada1]

I have tried several times to find out if HubSpot has Canadian data centers, but can't seem to get an answer.

I realize this may not be the location for this, but is anyone able to answer this for me? We have data residency requirements and our data must be kept within Canada.

[nicolebrenner · Accepted solution]

Hi @joeycanada1, welcome to the community. HubSpot uses Amazon AWS and Akamai as our data centers, which are hosted all over the world. At this time, we don't have a way to guarentee that all of a customers data is stored within their country, but it is something that we are looking into moving forward. 

[nicolebrenner · Accepted solution]

Hi @joeycanada1, welcome to the community. HubSpot uses Amazon AWS and Akamai as our data centers, which are hosted all over the world. At this time, we don't have a way to guarentee that all of a customers data is stored within their country, but it is something that we are looking into moving forward. 

[Meka]

I understand that it may not be possible to store the data in each country but with GDPR could HubSpot ensure for EU users that their data will not be transferred outside EU/EAA?

If you do need to transfer, please provide a detailed list of locations in which the data may be processed.

[edjusten · Accepted solution]

Hi @Meka , @joeycanada1 , @Jeppe_Nyrup, 

FYI - HubSpot has released its GDPR product roadmap. This roadmap addresses physical location of data. Find out more here:
https://www.hubspot.com/data-privacy/gdpr/product-readiness

Ed Justen

[22Eighteen]

This doesn't address the need for Canadian data to be stored in Canada...which is becoming an increasing requirement for large Government, Education, Healthcare, and Insurance industries....and the vendors who service them.

[jennysowyrda]

Hi @22Eighteen,

For specifics on data centers and data protection I wanted to share these resources with you. 

1. Can I restrict where HubSpot stores my data

2. HubSpot your data and you

3. Privacy policy

Thanks,
Jenny

[22Eighteen]

As a Canadian, who has Canadian clients (who also sell to/service Industries sensitive about where Canadian citizen data is stored) I'm specifically interested in PIPEDA compliance.  Not EU GDPR.  

The Personal Information Protection and Electronic Documents Act (PIPEDA) (the Act) is a Canadian law relating to data privacy. It governs how private sector organizations collect, use and disclose personal information in the course of commercial business.

I specifically need to know if HubSpot is PIPEDA compliant.  If I can say HubSpot follows the regulations in PIPEDA, I may be able to convince my client's clients that their data is safe - even though it's stored in the US and potentially subject to the US Patriot Act.

This is not at all a new issue.  http://www.presleyandpartners.com/the-u-s-patriot-act-and-canadian-data-security/

[jennysowyrda]

Hi @22Eighteen, 

HubSpot mentions PIPEDA in its Acceptable Use Policy, specifically stating: 

In addition, and without limiting the other requirements in this AUP, you may not (directly or indirectly) use the HubSpot Service with content, or in a manner that:...

• is in violation of any applicable local, state, national or international law or regulation, including all export laws and regulations and without limitation the Controlling the Assault of Non-Solicited Pornography and Marketing Act (CAN-SPAM Act) (15 U.S.C. § 7701 et seq.), the U.S Telephone Consumer Protection Act of 1991 (47 U.S.C. § 227), the Do-Not-Call Implementation Act of 2003 (15 U.S.C. § 6152 et seq.; originally codified at § 6101 note), the Directive 2000/31/EC of the European Parliament and Council of 8 June 2000, on certain legal aspects of information society services, in particular, electronic commerce in the Internal Market ('Directive on Electronic Commerce'), along with the Directive 2002/58/EC of the European Parliament and Council of 12 July 2002, concerning the processing of personal data and the protection of privacy in the electronic communications sector ('Directive on Privacy and Electronic Communications'), regulations promulgated by the U.S. Securities Exchange Commission, any rules of national or other securities exchange, including without limitation, the New York Stock Exchange, the American Stock Exchange or the NASDAQ, the Personal Information Protection and Electronic Documents Act (PIPEDA) (S.C. 2000, c. 5), Canada’s Anti-Spam Legislation (CASL) (S.C. 2010, c. 23), Japan’s Act on Regulation of Transmission of Specified Electronic Mail (Act No. 26 of April 17, 2002) and any regulations having the force of law or laws in force in your or your email recipient's country of residence.

Additionally, HubSpot's security program outlines specifics around data security. 

If you would like to continue the conversation around PIPEDA compliance specific to your portal/clients' portals, the best resource for those conversations will be your Account Manager at HubSpot. 

Thank you,
Jenny

[Tom_FBN]

Hi - there does not appear to be any information on the location of the data centers on the "product readiness" page. https://www.hubspot.com/data-privacy/gdpr/product-readiness

Will you please provide the URL of the exact page where this information is posted?

[Jeppe_Nyrup]

Hi @nicolebrenner
Any news on this?

[joeycanada1]

Thanks @nicolebrenner, appreciate the info!