HubSpot

Connect HubSpot to collect crm evidence with automated compliance tests, switched on per workspace.

Connect with an API token

1. In HubSpot:

   1. Sign in to HubSpot as a super admin.
   2. Navigate to Development, then click Legacy apps in the left sidebar.
   3. Click Create legacy app in the top right, then select Private.
   4. On the Basic Info tab, enter the app's name (and optionally a logo and description).
   5. Click the Scopes tab and add only the read scope Safeguard needs for users.
   6. Click Create app in the top right.
   7. Go to Development › Legacy apps, click the app's name, open the Auth tab, click Show token, then Copy, and paste it into Access token.

   HubSpot's public documentation does not cover every step.

   Source: developers.hubspot.com, checked 2026-10-07.

   The permissions Safeguard needs: settings.users.read.

2. On Compliance › Connectors, open HubSpot, click Connect, choose API token and fill in:

   Field	What to enter
   Access token	Required. Stored encrypted and never shown again.

3. Click Connect with token.

Connect with the MCP server

Choose MCP server: the address https://mcp.hubspot.com/anthropic is filled in. Sign in to HubSpot when asked. It lets Griffin AI search HubSpot; the compliance evidence comes from the API token connection.

Frameworks

Safeguard's automated tests read HubSpot and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.

These tests are switched on per workspace by the Safeguard team.

Related

• CRM connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks