Skip to main content

Oleeo Security & Compliance FAQ

HubSpot Subprocessor Overview

1. General & Scope Questions
Does this change how we log support tickets or manage cases?

No. There is no change to your support process. You will continue to log into SugarCRM to create and manage your cases and tickets exactly as you do now.

Does HubSpot have access to our ATS databases, candidate records, or job applicants?

No. HubSpot is entirely decoupled from Oleeo's Applicant Tracking System (ATS) environment. No candidate data, CVs, or recruitment pipeline data is transferred to or stored in HubSpot.

Whose personal data is actually processed in HubSpot?

The scope of personal data is strictly limited to the business contact details (names, job titles, business email addresses, and phone numbers) of your company's designated Oleeo Super Users, System Administrators, and Commercial contacts—those who regularly interact with our Customer Success and Commercial teams.

2. Hosting & Security Compliance
Where is our data hosted within HubSpot?

All customer data stored by Oleeo within HubSpot is securely hosted in HubSpot’s European Union (EU) data center infrastructure (located in Frankfurt, Germany).

What security certifications does HubSpot hold?

HubSpot maintains robust security compliance to enterprise standards, including ISO 27001 certification and SOC 2 Type II reports.

Evidence of their security posture and compliance resources can be verified at: https://www.hubspot.com/security

3. Productivity Tool & AI Features
We notice Oleeo teams utilising the HubSpot AI Notetaker during our meetings. Is this mandatory?

No, it is completely optional. We use HubSpot's built-in Breeze AI notetaking and transcription features purely to ensure accurate, actionable meeting outcomes for your account.

However, your privacy is paramount. Our teams are happy to immediately disable and turn off the AI Notetaker at the start of any meeting upon your request.

Is our meeting data or conversation history used to train AI models?

No. Under HubSpot’s strict enterprise data privacy agreements, third-party AI model subprocessors are strictly prohibited from using customer data or meeting transcripts to train their machine learning models. Furthermore, they operate under rigorous zero-retention policies.

How does the HubSpot integration with Oleeo’s email (Gmail) and calendars impact our data privacy?

Our team uses secure Google Workspace integrations to sync customer-facing emails and meetings to HubSpot:

  • Email: HubSpot only syncs and logs emails directly exchanged between Oleeo employees and your key contacts to maintain a clean communication history. Internal Oleeo emails are automatically excluded.
  • Calendar: The integration only processes scheduled meetings where your company contacts are explicitly listed as invitees. HubSpot is strictly restricted from syncing or viewing any internal or private calendar events.