HubSpot

Breadth across several classes, named on first-party pages. Beyond the CRM itself, agents and assistants reach emails, calendar, shared documents and team conversations in Google Workspace, Microsoft 365 and Slack; the pricing feature inventory names LinkedIn Sales Navigator and CRM Sync, WhatsApp, Facebook Messenger, Google Search Console, ad conversion events synced to ad accounts, connected social accounts, HubSpot-provided telephone numbers and a Custom Channels API for building further channels.

The HubSpot Marketplace is the general route, published as the place to connect third-party apps. That spans productivity, messaging, advertising, social, telephony and sales tooling rather than one ecosystem class. Pre-built agents ship with default tools that cannot be edited or rearranged, a real limit on how one agent is configured rather than on how broadly the platform integrates. No first party count of marketplace apps is published.

Sourcehubspot.com/products/artificial-intelligence/breeze-ai-assistant, hubspot.com/pricing/suite and ecosystem.hubspot.com/marketplace/appsread 2026-09-02

Multi-step and multi-agent execution on a single canvas. The agent builder, formerly Breeze studio, builds custom agents and agentic automation on one canvas covering everything from simple triggers to complex AI tasks, and HubSpot defines agents as components that follow defined steps to complete structured tasks using the customer's data and tools.

Agents hand work to each other across the lifecycle: campaign agent plans a campaign, content agent creates it and nurture agent converts it, while knowledge base agent is documented as requiring an active customer agent subscription because the two work together. Underneath sits the workflow engine, up to 300 workflows on Professional and 1,000 on Enterprise with omni-channel automation, sequences triggerable from workflows and workflow health monitoring.

Sourcehubspot.com/products/artificial-intelligence, knowledge.hubspot.com/ai/understand-breeze and hubspot.com/pricing/suiteread 2026-09-02

Grounding on the customer's own material through two maintained structures. Agents run on the Smart CRM record itself, so output is grounded in live customer data from day one with no setup to connect it, and the data agent answers custom questions about any contact or company by pulling from CRM data, calls, emails and documents.

Alongside that sit knowledge vaults, which store reference information agents and custom assistants draw on, explicitly including internal documentation, product details and process guidelines. Customer agent additionally searches the knowledge base, up to 10,000 articles on the top tier, and past contact and contract history before answering. Both are maintained stores rather than per-request assembly.

Sourceknowledge.hubspot.com/ai/understand-breeze, hubspot.com/products/artificial-intelligence and hubspot.com/pricing/suiteread 2026-09-02

Shipped approval gates at several points, not a claim of control. Prospecting agent output is approved rather than sent: the customer approves automatic CRM updates and follow-up drafts after every meeting. Knowledge base agent output is reviewed, edited and approved before publication. Customer agent escalates to a person when needed. The pricing feature inventory names email approvals, social media approvals and pipeline approvals for deals as tier-gated features.

Underneath these sit two structural limits: admins manage which data AI features can access and can disable that access at account level, and an agent cannot be run by a user lacking permission on the features it depends on, so an agent cannot exceed the authority of the person running it. The marketing line that you decide which channels an agent covers and are always in control is posture; the shipped gates above are the mechanism.

Sourcehubspot.com/products/artificial-intelligence, hubspot.com/products/service/ai-knowledge-base-agent and hubspot.com/pricing/suiteread 2026-09-02

Attestations and access controls are both documented on the vendor's own security page. The Trust Center provides SOC 2 Type II and SOC 3, with no NDA required for SOC 3, backed by annual third-party audits, penetration testing, a formal vulnerability management process and a Bugcrowd disclosure program.

Controls: SAML-based single sign-on with Okta, Azure AD and OneLogin named, SSO enforceable for all users with configurable exemptions, SCIM provisioning through Okta covering onboarding and deprovisioning, a permissions model spanning users, teams, CRM objects, properties and security settings, a Security Center for 2FA enforcement, inactive-user audits and partner access control, and Sensitive Data properties with application-layer encryption and field-level access controls. Permission inheritance is documented at the agent layer too: an agent cannot be run by a user who lacks access to the features its configuration depends on.

Sourcehubspot.com/security-and-compliance and knowledge.hubspot.com/ai-tools/customize-breeze-agentsread 2026-09-02

Three separate records rather than one dashboard. Agent operation: Agent Hub tracks what every agent is doing and delivering in a single view with live status and real outcomes per agent, and the Breeze dashboard reports how AI features are used across the account. Account activity: audit logging is part of the permissions model and covers sensitive-data access.

Method: HubSpot publishes model cards documenting how each AI feature works, what data it uses and what safeguards apply, which is disclosure of why rather than only what, and the AI Trust Center hosts them. No per-run trace of an agent's reasoning steps is documented.

Sourcehubspot.com/products/artificial-intelligence, knowledge.hubspot.com/ai/use-breeze and hubspot.com/security-and-complianceread 2026-09-02

Breeze Assistant keeps per user memories (name, job title, tone, writing style, recurring instructions) that the user adds or removes by instruction and can view and delete one by one under Memories, and Breeze projects store chats, shared instructions and reference files, with the assistant automatically storing relevant information as context for future chats and access shared with chosen users. No lifetime or retention is stated for either.

Sourceknowledge.hubspot.com/ai/use-breeze-assistantread 2026-09-30

Genuine customer choice of location across four regions. HubSpot states that accounts are hosted in regional data centers in the United States, the EU, Canada and Australia, and that paid accounts can migrate to a preferred region, with documentation covering how regional hosting works and the limited cases where processing occurs outside the hosting location.

That is region selection, a choice rather than legal cover: the Data Processing Agreement with its SCCs and Data Privacy Framework coverage sits alongside it rather than standing in for it. Hosting is multi tenant cloud only, with no VPC, on-premises or customer-tenant deployment, so the choice is of region rather than of infrastructure.

Sourcehubspot.com/security-and-compliance and legal.hubspot.com/securityread 2026-09-02

A browsable library of named agents aimed at named jobs. The HubSpot Marketplace is published as the place to discover, browse and install agents, and Agent Hub presents every agent in one view where a customer can turn on what has not been activated in a click.

The named set is long and job-shaped: content, prospecting, customer, data, campaign, nurture and revenue agents generally available, with ABM landing page, blog research, closing, company research, cross-sell and upsell, customer health, deal loss, request for proposal and sales-to-marketing feedback agents documented in the knowledge base, several in beta. Featured agents are presented as recommendations a customer can download and modify.

Prebuilt agents ship with default inputs, instructions and tools that cannot be edited, deleted or rearranged, so adoption is switch-on rather than fork, and the knowledge base notes that certain agents can no longer be installed going forward without listing which.

Sourcehubspot.com/products/artificial-intelligence, knowledge.hubspot.com/ai/understand-breeze and knowledge.hubspot.com/ai/use-breezeread 2026-09-02

Wide channel coverage and several genuine intake routes. Channels named on the pricing inventory include live chat, conversational bots, Facebook Messenger, WhatsApp, one-to-one and marketing email, calling with HubSpot-provided numbers and interactive voice response, social posting across connected accounts, and a Custom Channels API for building channels HubSpot does not ship.

Work reaches agents automatically rather than only on request: prospecting agent watches accounts for buying signals and reaches out when one appears, sales automation triggers tasks and notifications when deals change stage, sequences can be triggered from workflows, and custom events with up to 500 definitions feed the automation layer on Enterprise.

Sourcehubspot.com/pricing/suite and hubspot.com/products/artificial-intelligenceread 2026-09-02

No customer choice of model, and the providers are not named.

HubSpot refers throughout to third-party AI providers in the abstract, stating that they are contractually required to meet its security and privacy standards, process data only to deliver the requested feature and cannot train their models on customer data, and that admins can control what those providers may access and can opt out of HubSpot's own model improvement.

No model selector, per agent model choice, bring your own key option or routing policy is offered. Control is over data access rather than over which model runs. HubSpot publishes model cards for each AI feature in its AI Trust Center.

Sourcehubspot.com/security-and-compliance and hubspot.com/products/artificial-intelligenceread 2026-09-02

Callable from outside through a full developer platform at developers.hubspot.com. REST APIs generated from OpenAPI specifications with the spec itself served at a public endpoint, maintained client libraries including Node, public apps authenticating by OAuth and private apps by access token, a Webhooks Journal API with batched reads and CRM object filtering, date-based versioned APIs, UI extensions with serverless functions, a CLI, and an app marketplace.

Two MCP servers ship alongside: a hosted remote server at mcp.hubspot.com giving read and write access to CRM objects over OAuth with PKCE, managed through MCP auth apps in the developer platform, and a local developer MCP server for building apps and CMS assets from an AI code editor. Product-side surfaces include a Custom Channels API and a marketing email single send API named on the pricing feature list. The fact that prebuilt agents' tools cannot be edited concerns how one agent is configured, not whether the platform is callable.

Sourcedevelopers.hubspot.com/ai-tools, developers.hubspot.com/docs/api/client-libraries and developers.hubspot.com/spotlightread 2026-10-01

A quality gate before an agent goes live, with no readable comparable result. The agent builder documentation states that after a configuration is generated a customer adjusts instructions, adds actions and tests the agent before publishing, which is a real pre-release check the customer runs on the agent itself rather than a claim about internal testing.

Around it sit A/B testing on marketing email, custom reporting, workflow health monitoring on the higher tiers, and the per-agent performance view in Agent Hub for keeping what works. Nothing surfaces a score, pass rate, judge verdict or other readable comparable result from that test, and no sandbox, replay, regression suite or evaluation harness over agent behavior is documented.

Sourcehubspot.com/ai/create-agents-with-breeze-assistant and hubspot.com/pricing/suite; knowledge.hubspot.com/ai/create-agents-with-breeze-assistantread 2026-09-02

Every documented action runs through a programmatic route. Agents act on the Smart CRM and reach third-party systems through integrations, the marketplace and documented APIs, and the extensibility surface is an API and MCP one throughout; the developer MCP server drives an AI code editor rather than a browser. No agent is described operating software through its interface, controlling a browser, or navigating a third-party console where no programmatic route exists.

Sourcehubspot.com/products/artificial-intelligence and developers.hubspot.comread 2026-09-02