HubSpot’s help center restricts its HIPAA business associate agreement to Enterprise only, while its own catalog lists Starter, Professional, and Enterprise as all qualifying, a contradiction the vendor has not resolved, and Mailchimp answers the same question more simply by publishing no HIPAA BAA at any tier and prohibiting the import of regulated sensitive data outright. Scope compared, criterion by criterion. Checked 7 September 2026.





HubSpot hosts on Amazon Web Services, in what it calls “US East,” and holds its own SOC 2 Type 2 and SOC 3 certifications, leaving ISO 27001 to the host; FedRAMP, StateRAMP, and GovCloud are absent entirely. Its HIPAA business associate agreement is real, but the tier it opens at is contradicted between HubSpot’s own pages: Enterprise only, according to the help center, versus Starter, Professional, and Enterprise all qualifying, according to the catalog.
Mailchimp hosts on its own US servers, naming no region and no third-party host, and holds SOC 2 of an unspecified type plus ISO 27001. FedRAMP, StateRAMP, GovCloud, and a HIPAA business associate agreement are all absent at every tier — and rather than leave the question open the way HubSpot does, Mailchimp’s own terms prohibit importing regulated sensitive data outright.
HubSpot publishes seventeen interface languages, English not distinguished as US or UK, last updated the thirty-first of March, twenty twenty-six, though in-product search isn’t always translated. Mailchimp ships a plain six — English, Spanish, French, Portuguese, German, Italian — with video tutorials captioned in only five of them, Italian excluded, apart from the fifty-plus languages its content-translation tool can render for outgoing email.
HubSpot states its own fees exclusive of tax, added by address, and separately offers automated calculation of the customer’s own US and Canadian sales tax through Revenue Hub Professional or Enterprise — at the state level only, no local rate, with nexus responsibility staying on the customer regardless, despite an alert HubSpot fires at the registration threshold. Mailchimp charges its own fees in twenty-one jurisdictions by the customer’s address, but offers no equivalent calculation tool for the customer’s own downstream sales at all.
HubSpot names net-30 payment terms in its own agreement, at section 3.4, then rejects any purchase-order clause the customer tries to attach, at section 12.8 of that same agreement; ACH is US-only, available from Starter through Enterprise, taking three to five days to clear, with no dollar threshold or W-9 published and an actual invoice requiring a Contract Manager. Mailchimp accepts only card, PayPal, SEPA, and iDEAL; invoicing, a purchase order, net-30, ACH, and a W-9 are all simply absent, with what it calls an “invoice” amounting to a relabeled receipt.
Can't find what you're looking for ? Contact us here
jordan@bulldozer-collective.comGet access to playbooks and feedback from those who are shaping the next wave of marketing and AI.