Newsletter platforms
HubSpot privacy rating
Customer platform whose Marketing Hub sends marketing email, with a CRM, forms, landing pages, automation and open and click tracking.
Summary
HubSpot scores 41 out of 100 (grade D) on the newsletter platforms criteria. It meets 3 of 8 criteria: transparency report, tells users about requests and TLS configuration. It partly meets independent audit and security headers. It does not meet open source, no trackers or telemetry and no ads or data sales. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.
Score 41 out of 100. How scoring works
Criteria
- No
-
No
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
The privacy policy covers ad network cookies and web beacons on the website, and marketing emails track opens and clicks unless turned off.
-
No
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
The privacy policy states identifiers were sold or shared with advertising partners, and business contact data from its commercial dataset is sold to customers of its enrichment products.
-
Partial
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
A SOC 3 report is public. The SOC 2 Type 2 report and penetration test summaries are only available to customers and prospects.
-
Yes
Transparency report Weight 2 of 3
Does the provider regularly publish how many government and legal requests it receives and how it responds?
Publishes yearly counts of US and international government and civil requests for customer data and how each was answered.
-
Yes
Tells users about requests Weight 1 of 3
Does the provider promise to tell users about requests for their data, unless a court forbids it?
HubSpot notifies customers of requests for their data unless prohibited by law or in an emergency involving danger of death or serious injury.
Automated tests
-
Yes
TLS configuration Weight 2 of 3
Does the website pass the Qualys SSL Labs test with a grade of A or better?
Grade A+
-
Partial
Security headers Weight 1 of 3
Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
Grade B (70/100+)
-
Not tested yet
Modern web standards Weight 1 of 3
Does the website score 90% or higher on the Internet.nl website test?
Not tested yet.