Does HubSpot’s Breeze AI train on your CRM data? HubSpot bars the AI providers it uses from training on your data. HubSpot itself does, by default: its terms let it train its own AI models on your customer data, and a Super Admin can switch that off without losing any AI features.
Plain-English risk rating: 2 of 5
Scope note, added 3 September 2026. This rating covers a product that does not exist on HubSpot’s free tools. HubSpot states that Agent Hub is included in all Starter, Professional and Enterprise editions, with custom agents consuming HubSpot Credits beyond the base plan. A free-tools account is not running the thing rated below, and on a paid one the credit model means usage is a second cost. The rating itself is unchanged.
HubSpot's AI features (consolidated under the Breeze brand during 2024-2025, expanded substantially with the Spring Spotlight 2026 release) are embedded across its Marketing, Sales, Service, and CMS Hubs. HubSpot's defaults are mixed. It trains its own AI on customer data by default, unless a Super Admin switches that off (see the training section), while it says it does not permit its AI providers to use customer data for model training (a help-centre statement, not a term of your contract), zero-data-retention enforced "wherever possible," US customer data stays in US infrastructure, and the Spring Spotlight 2026 release formalised an AI governance framework as a platform layer rather than a policy add-on. HubSpot holds SOC 2 Type II and ISO 27001 certifications and supports HIPAA via BAA on Enterprise tier.
The risk picture is comparable to Salesforce Einstein but at SMB-appropriate pricing and complexity. The Breeze documentation is unusually detailed about which AI service providers process which data (its AI Model Cards, read 3 October 2026, list models from OpenAI, Anthropic, Google and Perplexity; this profile previously named Stability AI, which no longer appears) and HubSpot publishes AI Model Cards explaining the provider stack.
Recommended for
- Sole proprietor: Free CRM tier with basic Breeze features is a legitimate starting point. Starter Hub plans at ~$20/month/seat include limited Breeze. Acceptable for small-scale marketing or sales work.
- Small team (2-10 people): Professional tier with Breeze AI included. The pricing model (per-hub-tier rather than per-AI-feature) avoids the upgrade-pressure pattern of competitors. As of 2026, Smart CRM & Data Enrichment (formerly "Breeze Intelligence") is included free with Core Seats at Starter+ tiers, which is a meaningful value addition.
- Regulated industry: Enterprise tier with BAA where applicable, appropriate data residency configuration, and disabled Breeze features for any PHI-touching workflows.
- The honest answer for most 1-10 employee businesses considering a CRM with AI: HubSpot with Breeze is a reasonable SMB choice once a Super Admin has switched off HubSpot's own training on your data. Agent Hub is not on the free tools, so the free tier is a starting point for the CRM, not for agents. The Spring Spotlight 2026 governance features (audit cards, permission-aware agents, approval workflows) are useful for any team that needs to demonstrate AI governance.
Critical pre-deployment warning (Breeze Agents and HubSpot Credits)
Breeze Agents consume HubSpot Credits per action, with pricing varying by agent type and complexity. HubSpot offers general-availability Core Agents (Customer Agent, Prospecting Agent, Data Agent, Content Agent) and further agents in its marketplace. For SMBs deploying Breeze Agents in production, start with the Core Agents and expand to marketplace agents once you are confident in how they behave. Corrected 25 October 2026: we previously said which model generation each group of agents runs on, which we could not source; HubSpot's AI Model Cards list models from several providers without tying them to agents in that way.
For any team deploying Breeze Customer Agent in production: configure approval workflows so no AI-generated outreach goes to clients without human review, define escalation rules for sensitive topics (complaints, legal inquiries, account changes), and review the timestamped audit cards weekly during the pilot phase.
Data retention default
- Standard HubSpot retention applies to AI feature output
- LLM provider retention: zero-retention under HubSpot's contractual arrangements ("enforced wherever possible" per HubSpot AI Cloud Infrastructure FAQ)
- Breeze Copilot and Breeze Agents log activity for audit purposes (2026 audit card feature provides timestamped reviewable records)
- Permission-aware access: Breeze respects HubSpot user permissions — the agent only sees what the user could see
Training opt-out
HUBSPOT TRAINS ITS OWN AI MODELS ON CUSTOMER DATA BY DEFAULT. A SUPER ADMIN CAN TURN THIS OFF WITHOUT LOSING AI FEATURES. HUBSPOT'S AI SERVICE PROVIDERS ARE BARRED FROM TRAINING.
Corrected 1 October 2026. This section said HubSpot’s own position was not stated. It is stated, in HubSpot’s Customer Terms of Service (effective 16 September 2026), section 5.3.1: “We may also use Customer Data to train our AI models in compliance with our obligations under the Agreement.” HubSpot’s help article on AI model training (updated 10 July 2026) says the setting is on by default, that a Super Admin can turn off the AI Model Training toggle under Settings > Account management > AI, that “Opting out of AI model training does not limit your access to AI features”, and that “Opt-outs will only apply moving forward.” See Corrections.
Corrected 20 September 2026. This section previously read "NO TRAINING ON CUSTOMER DATA BY DEFAULT across plan tiers", which is broader than the evidence beneath it. See Corrections.
Verified 3 September 2026 against HubSpot own AI infrastructure FAQ, which says it in these words: "We do not permit HubSpot AI service providers that we engage to provide the Subscription Service to use your data for model training". Read the scope: the commitment is about the service providers HubSpot engages. HubSpot also states it contracts for "zero-day data retention where possible". HubSpot says these commitments sit in its agreements with the providers. They are not in your contract with HubSpot: the Product Specific Terms (last modified 16 September 2026, §7.6) say only that AI inputs and outputs, including Customer Data, are shared with AI service providers “to enable your use of HubSpot AI, content moderation, and other business purposes consistent with this Agreement”. Two different controls exist. Turning off the AI Model Training toggle stops HubSpot training its own models on your data from that point on and keeps Breeze working. Disabling AI service provider access stops AI processing altogether, and with it the Breeze features.
The providers are named on a published list. HubSpot's Sub-Processors Page (last modified 16 September 2026, read 3 October 2026) is incorporated into the DPA and labels its AI rows explicitly: Amazon Web Services, Google LLC and OpenAI, L.L.C. each carry the purpose "AI Service Provider" for HubSpot AI, and Hyperdoc, Inc. is named for meeting recordings and transcripts under HubSpot AI. HubSpot's no-training statement covers its “AI service providers”; it is made in HubSpot's help centre, not in your contract. From 16 October 2026 the list adds Baseten Labs as an AI service provider and Bright Data and Exa Labs for web search results in HubSpot AI. HubSpot's AI Model Cards also list models from Anthropic and Perplexity, which are not named on the sub-processor list. Corrected 3 October 2026: this paragraph previously called the list and the no-training bar contractual. Customers can subscribe to at least 30 days notice before any sub-processor is added or replaced. Added 20 September 2026: this profile previously named only OpenAI, AWS and Google, omitting the sub-processor that handles meeting recordings and transcripts.
Zero Data Retention availability
- Default via zero-retention contracts with LLM providers (where supported by the provider; HubSpot uses the language "wherever possible" to reflect that some providers/endpoints do not support full ZDR)
- EU Data Residency available at qualifying tiers
Plan tiers and pricing (as of early 2026)
| Tier | Price (USD) | AI features | Suitable for |
|---|---|---|---|
| Free CRM | $0 | Basic Breeze features | Sole proprietors starting out |
| Starter | ~$20/seat/month | Standard Breeze + Smart CRM enrichment | Small teams getting organised |
| Professional | $450-800/month | Full Breeze incl. agents | Growing teams |
| Enterprise | $1,500-3,600/month | Full Breeze + admin controls | Larger orgs needing SSO, governance |
Plan detail re-checked against HubSpot own pricing page on 3 September 2026. Starter is confirmed at $20 per seat per month as the standard rate, currently discounted for new customers, and it now includes 500 HubSpot Credits. The Free tier is capped at 2 users, which this table did not say. The Professional and Enterprise figures above could not be confirmed – HubSpot pricing page did not display them in this pass and C2 did not import third-party numbers. Treat those two rows as unverified until someone checks them against a HubSpot quote.
Note: HubSpot prices its hubs (Marketing, Sales, Service, CMS, Operations) separately, then bundles them into Suites at discount. The Professional and Enterprise pricing ranges above reflect Suite pricing variation. Breeze Agents additionally consume HubSpot Credits per action.
Jurisdiction
- Primary processor: HubSpot Inc., Cambridge, Massachusetts, USA
- Cloud infrastructure: AWS
- Third-party AI sub-processors (HubSpot Sub-Processors Page, last modified 16 September 2026, read 3 October 2026): Amazon Web Services, Google and OpenAI as AI service providers; Hyperdoc for meeting recordings and transcripts; from 16 October 2026 also Baseten Labs (AI service provider), Bright Data and Exa Labs (web search results). The AI Model Cards also list Anthropic and Perplexity models. HubSpot states that its AI service providers may not train on customer data; that statement is in its help centre, not in the customer contract. Corrected 3 October 2026.
- Data residency: US customer data stays in US infrastructure; no cross-border processing introduced by AI features (per HubSpot AI Cloud Infrastructure FAQ)
- SOC 2 Type II, ISO 27001 certified; HIPAA (Enterprise with BAA), GDPR-compliant
- EU Data Residency available
Breach history (public incidents)
March-April 2024 — HubSpot account compromise campaign
In early 2024, HubSpot disclosed a targeted campaign affecting a small number of customer accounts via credential stuffing and OAuth token abuse. The incidents were not infrastructure breaches but rather customer-side credential exposures that attackers leveraged to access connected HubSpot accounts. HubSpot's response included forced password resets for affected accounts and improved monitoring.
Source: HubSpot Trust Center disclosure (March-April 2024)
No publicly-disclosed HubSpot Breeze AI-specific breach as of May 2026.
Category-level risk: Breeze Agents put HubSpot in the same agentic-AI category as Microsoft 365 Copilot (EchoLeak), Salesforce Agentforce (ForcedLeak), and Cursor (NomShub). The same indirect prompt injection class risk applies in principle. HubSpot's Spring Spotlight 2026 governance framework (audit cards, permission-aware access, approval workflows) is a meaningful mitigation pattern — not a guarantee against prompt injection but a structural improvement over agentic AI products without those controls. We are not aware of a publicly-disclosed HubSpot-specific EchoLeak-equivalent as of profile verification date.
What this means in plain English for SMB owners
Three honest takeaways:
- HubSpot with Breeze is the genuine SMB-appropriate enterprise-grade CRM-with-AI option. Strong privacy posture, no-training defaults, accessible pricing, free starter tier, transparent documentation of which AI providers process which data. For 1-10 employee businesses choosing a first CRM-with-AI, HubSpot is the path of least friction.
- The 2024 credential-stuffing incidents are a reminder that platform breach is not the only risk class. Multi-factor authentication on every HubSpot account is the baseline expectation; OAuth token review (which apps have access?) is a quarterly hygiene task.
- The Spring Spotlight 2026 governance features matter more than they sound. Audit cards (timestamped reviewable records of every AI action), permission-aware access (agents only see what the user could see), and approval workflows are the structural controls that distinguish defensible agentic AI deployment from theatre. For teams using Breeze Customer Agent for client-facing communication, these controls are not optional discipline — they are the actual safeguard against AI-mediated client-relationship damage.
Sources
- HubSpot security and privacy documentation (legal.hubspot.com/security, verified 2026-05-24)
- HubSpot Trust Center for current certifications and incident disclosures
- HubSpot AI Cloud Infrastructure FAQ (knowledge.hubspot.com, verified 2026-05-24)
- HubSpot Breeze AI product documentation
- HubSpot AI Model Cards (provider stack disclosure)
- HubSpot Privacy Policy (legal.hubspot.com/privacy-policy, April 2026 version)
- Vantage Point: How to Use Breeze and AI Agents in HubSpot 2026 Guide (May 2026)
- Syncbricks: HubSpot Breeze AI 2026 Complete Guide (April 2026)
- On the Fuze: HubSpot Breeze AI Agents 2026 Guide for SMBs (February 2026)
- Fast Slow Motion: HubSpot AI Governance Data Privacy & Transparency in 2026 (April 2026)
- Huble: HubSpot AI security FAQ for CTOs and CIOs
- MyAskAI: HubSpot Breeze AI Guide to Features Pricing Limitations (March 2026)
- Resolve247: What Is HubSpot Breeze Features & Honest Review (2026)
- HubSpot pricing page (read 3 September 2026)
- HubSpot: AI cloud infrastructure FAQ (read 3 September 2026)
Related on AI Leakage
- Compare all 29 AI tools in the risk directory — see how HubSpot AI (Breeze) stacks up against the rest, tier by tier.
- Take the 5-minute “Am I Leaking?” check — a personalised view of your business’s AI exposure.
- Check a prompt before you paste it — our free Data-Safe Prompt Rewriter.
- Shadow AI vs AI leakage — why even approved tools like HubSpot AI (Breeze) can leak data.
- Get plain-English AI Leakage Alerts — we email you when an AI tool you use changes its data policy or has an incident.
- Get the free AI Acceptable Use Policy template — a plain-English policy with the tool-by-tool risk guide built in.
Compare similar tools: HubSpot AI (Breeze) is one of 4 tools in AI in customer service and CRM compared, which sets out each one’s rating and what it does with your data, side by side.