HubSpot
Verified“A US company, full stop β Boston-built, NYSE-listed, AWS-hosted.”
- FY2024 revenue
- $2.63B
- Employees
- 8,246
- Customers
- 247,939
- Listing
- NYSE: HUBS
16 = midpoint of Control 9 & Data 23
Sovereignty Quadrant
Control β who owns & governs the company Β· Data β where your data lives. Every dot is a company β click to open it.
Every number below traces to 12 sourced facts across 6 independent sources, last verified 2026-06-12. 3 open questions hold confidence at 88% β they lower confidence, never the score.
Control β
Who legally and economically controls the company
Legal & Jurisdiction
10
Formed as an LLC in Delaware (2005), converted to a Delaware corporation (2007), and headquartered in Cambridge, Massachusetts. The operating parent (HubSpot, Inc.) sits entirely in US jurisdiction. EU law reaches it only as a GDPR data processor serving EU customers β not because any controlling entity is EU-incorporated or EU-established. Incorporated and run outside the EU puts this squarely in the 0-30 band.
Why 10? 3 sourced facts · click to expand
Incorporation
HubSpot FY2024 Form 10-K (SEC EDGAR) Β· as of 2025-02-12
Headquarters / principal executive offices
HubSpot Investor Relations / 10-K Β· as of 2026-06-12
EU reach is via GDPR processor obligations, not EU establishment of the parent
HubSpot Cloud Infrastructure & Data Hosting FAQ Β· as of 2026-06-12
Control & Ownership
8
Publicly listed on the NYSE under HUBS since the October 2014 IPO. Single-class, one-share-one-vote capital structure with no dual-class supervoting and no controlling shareholder. Ownership is ~95% institutional, dominated by US asset managers (BlackRock filed a Schedule 13G as a >5% holder). Both voting control and the economic majority sit in the US β a clear foreign-control profile (0-30).
Why 8? 3 sourced facts · click to expand
Listing venue and ticker
HubSpot Investor Relations Β· as of 2026-06-12
Capital structure
HubSpot SEC filings (10-K / proxy) Β· as of 2025-02-12
Major institutional holder >5%
SEC EDGAR Schedule 13G/A Β· as of 2025-02
Data β
Where your data lives and who can reach it
Data & Infrastructure
22
HubSpot's product infrastructure runs exclusively on Amazon Web Services (US hyperscaler). It offers data residency across five AWS regions including the EU (Germany / Frankfurt), so EU customers can keep primary storage in the EU β but the underlying infrastructure is US-owned and CLOUD Act-exposed, default region is assigned by signup geolocation, and HubSpot states a limited amount of processing (analytics, support, integrations) can occur outside the chosen region. EU regions on a US hyperscaler with foreign-law exposure lands in the low end of the 20-40 band.
Why 22? 3 sourced facts · click to expand
Cloud provider
HubSpot Cloud Infrastructure & Data Hosting FAQ Β· as of 2026-06-12
EU data residency option
HubSpot Cloud Infrastructure & Data Hosting FAQ Β· as of 2026-06-12
Region assignment and out-of-region processing
HubSpot Cloud Infrastructure & Data Hosting FAQ Β· as of 2026-06-12
Operations & People
24
Operations are US-centered: HQ in Cambridge MA, US-based CEO (Yamini Rangan) and co-founder/CTO (Dharmesh Shah), and USD financial reporting. HubSpot does run substantial international operations including EU offices (notably Dublin, Ireland and Berlin, Germany) and serves customers in 135+ countries, which lifts the score off the floor, but center of gravity β leadership, listing, currency, decision-making β is American. Foreign-centered with meaningful EU presence (0-30).
Why 24? 3 sourced facts · click to expand
Workforce
HubSpot FY2024 Form 10-K (SEC EDGAR) Β· as of 2024-12-31
FY2024 total revenue (reporting currency USD)
HubSpot Q4 & Full Year 2024 Results Β· as of 2025-02-12
Leadership
HubSpot company news / IR board page Β· as of 2026-06-12
Aligned to the EU Commission’s official Cloud Sovereignty Framework (SEAL, Jun 2026) β
What we don’t know
3 open questions β they lower confidence, never the score
- ?
What share of HubSpot's customer data actually resides in the EU (Frankfurt) region versus US regions?
EU residency is opt-in/geolocation-default, so the real-world EU-resident data fraction is unknown and could be small; this is the main swing factor for the infra score.
- ?
Exact split of the ~95% institutional ownership β how much is held by EU-domiciled funds?
Some economic ownership flows to EU index/pension funds via global trackers, but the controlling/economic majority is US; precise EU economic share is unquantified.
- ?
What is HubSpot's EU-region headcount and the legal weight of its EU entities (e.g., Irish/German subsidiaries)?
Larger EU operational footprint could marginally lift the operations score, but would not change US control.
EU Cloud Sovereignty Framework lens
SEAL-style mapping is illustrative only β the framework targets cloud providers; this is an analogous sovereignty read of a US SaaS vendor, not a certification.
Strategic
US-headquartered, NYSE-listed, US-controlled; strategic direction set entirely outside the EU.
Legal & jurisdictional
Delaware-incorporated, Cambridge MA HQ; EU law reaches it only as a GDPR processor via a DPA, not as an EU establishment.
Data & AI
Optional EU (Frankfurt) AWS data residency exists, but underlying infra is US-owned and CLOUD Act-exposed; default region is geolocation-based.
Operational
US leadership and USD reporting; EU offices (Dublin, Berlin) exist but operational center of gravity is American.
Supply chain
Core dependency on a single US hyperscaler (AWS) plus Google Cloud for some analytics/AI; no EU-sovereign alternative.
Technological
Proprietary US-developed platform; no EU technological control or open European stack.
Security & compliance
SOC 2 Type II and ISO 27001 via AWS, GDPR DPA and SCCs available; compliance achievable but US-jurisdiction risk remains.
Environmental sustainability
Not evaluated in this sovereignty-focused profile.
EU alternatives
Belgium-headquartered open-source business suite with CRM/marketing; EU-incorporated and can be self-hosted or run in EU clouds.
Belgium-based European CRM group with EU data hosting; positioned as a sovereign alternative to US CRMs.
Long-standing Norwegian CRM with EEA hosting; Norway is EEA/GDPR but not an EU member state.
How the method works
Methodology v2 (provisional): the score is the midpoint of two axes β Control (who owns and governs the company) and Data (where your data lives and who can reach it). Each axis is scored only on verified evidence; unknowns reduce confidence, never the score. Every input below is sourced; the weights and judgments are open to challenge.
Spotted an error? Every claim is sourced β challenge it and we correct the record.
- 2026-06-12 β Initial golden profile, authored from primary sources (human + AI review).
Report Incorrect Data
Found an error in this company's profile? Help us improve our data by submitting a correction.
Verified 2026-06-12 Β· Human + AI joint review (sources independently checked) Β· Methodology