Pipedrive publishes no HIPAA business associate agreement at any tier, and its Terms, at clause 7.3, bar health data outright, while HubSpot’s own catalog and help center disagree on whether its BAA opens at Starter or waits for Enterprise. Scope compared, criterion by criterion. Checked 7 September 2026.





Pipedrive holds SOC 2 Type 2, SOC 3, ISO/IEC 27001:2022, and 27701, and hosts on AWS, naming US East and US West among seven regions with no customer choice of region. But FedRAMP, StateRAMP, GovCloud, and any HIPAA business associate agreement are simply absent from its Trust Center, and its Terms, at clause 7.3, bar health data from the product outright. It is not a missing feature; it is a contractual exclusion.
HubSpot hosts on AWS US East, holds its own SOC 2 Type 2 and SOC 3 certifications while leaving ISO 27001 to the host, and names no FedRAMP, StateRAMP, or GovCloud authorization. Its HIPAA business associate agreement is real, but its own pages contradict each other on the threshold: the help center says Enterprise-only, the catalog says Starter, Professional, and Enterprise all qualify.
Pipedrive’s product page lists twenty-four languages; its own Help Center lists twenty-three, missing Romanian, with English kept as one entry and no partial-translation flag attached. HubSpot instead states seventeen interface languages outright, last updated the thirty-first of March, twenty twenty-six, without splitting English into a US or UK variant.
Pipedrive’s Terms, at clause 6.1, put all tax and nexus on the customer, with no sales tax, state, or rate published anywhere, and its invoicing feature does not address tax at all. HubSpot states its fees exclusive of tax, added by address, with automated calculation limited to Revenue Hub Professional or Enterprise, US and Canada only, at the state level — but nexus responsibility still stays with the customer, despite an alert HubSpot fires at the registration threshold.
Pipedrive runs fully self-service, accepting card, PayPal, and ACH in US dollars, US only, with no seat threshold and an invoice carrying no fixed term; purchase orders, net-30, a W-9, and any non-card tier are simply absent. HubSpot names net-30 in its own terms at section 3.4, then rejects the customer’s own purchase-order clauses at section 12.8, and getting an invoice at all requires assigning a Contract Manager.
Can't find what you're looking for ? Contact us here
jordan@bulldozer-collective.comGet access to playbooks and feedback from those who are shaping the next wave of marketing and AI.