Attio
Connect Attio to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Connect Attio to collect crm evidence with automated compliance tests, switched on per workspace.
| Category | CRM |
| Connect with | API token, MCP server |
| What a connection produces | Automated compliance tests |
| Attio's guide | docs.attio.com |
Connect with an API token
-
In Attio:
- As an Attio workspace admin, open the dropdown beside your workspace name and click Workspace settings.
- Click the Developers tab, then click + New access token.
- Give the access token a name and set its Scopes, granting only the read access Safeguard needs.
- Click the token to copy it (or the eye icon to show it) and paste it into Access token.
Only admins can create and manage access tokens. The fetched help article does not list scope labels, so the scope to grant for listing workspace members is not confirmed there. Tokens remain viewable (eye icon) and copyable from the Developers tab.
Source: attio.com, docs.attio.com, checked 2026-10-07.
The permissions Safeguard needs:
user_management:read. -
On Compliance › Connectors, open Attio, click Connect, choose API token and fill in:
Field What to enter Access token Required. Stored encrypted and never shown again. -
Click Connect with token.
Connect with the MCP server
Choose MCP server: the address https://mcp.attio.com/mcp is filled in. Sign in to Attio when asked. It lets Griffin AI search Attio; the compliance evidence comes from the API token connection.
Frameworks
Safeguard's automated tests read Attio and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.
| Framework | Evidence | Controls | Tests |
|---|---|---|---|
| SOC2 | Automated tests | CC6.2, CC6.3 | 3 |
| ISO/IEC 27001 | Automated tests | A.5.16, A.5.18, A.6.5, A.8.2 | 3 |
| HIPAA Security Rule | Automated tests | 164.308(a)(3), 164.308(a)(4) | 3 |
| PCI DSS | Automated tests | 7.2.2, 7.2.4, 8.2.5 | 3 |
| NIST CSF 2.0 | Automated tests | PR.AA-01, PR.AA-05 | 3 |
These tests are switched on per workspace by the Safeguard team.
Related
- CRM connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks