Legal

Data processing agreement

The document a brokerage's compliance review asks for first, published, so you do not need a sales call to read it.

Roles

For personal data our customers put into Hubia about their own clients and counterparties, the customer is the controller and Hubia is the processor.

Scope and purpose

We process that data only to provide the service, and on the customer's documented instructions, which include the customer's use of the product's features.

Confidentiality

Personnel with access are bound by confidentiality obligations.

Security

We maintain encryption in transit and at rest, company-scoped access enforced at the database, attribution on every write, continuous monitoring and alerting. The security page describes the current posture, including what we do not yet hold.

Sub-processors

We use sub-processors for hosting, storage, messaging, payments, AI processing and property data. The list is published and we notify customers before it changes so they may object.

Assistance

We assist the customer with data subject requests, security incidents and impact assessments to the extent reasonably required.

Return and deletion

On termination we provide an export window and then delete remaining personal data, except where retention is legally required, including real-estate record-keeping.

Breach notification

We notify affected customers without undue delay after becoming aware of a personal data breach.

Last updated: August 2026