Safeguard Docs
Compliance ConnectorsSetup by categoryCRM

Attio

Connect Attio to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.

Connect Attio to collect crm evidence with automated compliance tests, switched on per workspace.

CategoryCRM
Connect withAPI token, MCP server
What a connection producesAutomated compliance tests
Attio's guidedocs.attio.com

Connect with an API token

  1. In Attio:

    1. As an Attio workspace admin, open the dropdown beside your workspace name and click Workspace settings.
    2. Click the Developers tab, then click + New access token.
    3. Give the access token a name and set its Scopes, granting only the read access Safeguard needs.
    4. Click the token to copy it (or the eye icon to show it) and paste it into Access token.

    Only admins can create and manage access tokens. The fetched help article does not list scope labels, so the scope to grant for listing workspace members is not confirmed there. Tokens remain viewable (eye icon) and copyable from the Developers tab.

    Source: attio.com, docs.attio.com, checked 2026-10-07.

    The permissions Safeguard needs: user_management:read.

  2. On Compliance › Connectors, open Attio, click Connect, choose API token and fill in:

    FieldWhat to enter
    Access tokenRequired. Stored encrypted and never shown again.
  3. Click Connect with token.

Connect with the MCP server

Choose MCP server: the address https://mcp.attio.com/mcp is filled in. Sign in to Attio when asked. It lets Griffin AI search Attio; the compliance evidence comes from the API token connection.

Frameworks

Safeguard's automated tests read Attio and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.

FrameworkEvidenceControlsTests
SOC2Automated testsCC6.2, CC6.33
ISO/IEC 27001Automated testsA.5.16, A.5.18, A.6.5, A.8.23
HIPAA Security RuleAutomated tests164.308(a)(3), 164.308(a)(4)3
PCI DSSAutomated tests7.2.2, 7.2.4, 8.2.53
NIST CSF 2.0Automated testsPR.AA-01, PR.AA-053

These tests are switched on per workspace by the Safeguard team.

On this page