Security

HubSpot security and reliability

Reviewer-facing notes on OAuth tokens, app-card requests, privacy, and operational behavior.

Controls

OAuth and tokens

The app uses HubSpot OAuth, exchanges tokens through HubSpot's date-based OAuth v3 token endpoint, stores refresh tokens encrypted at rest, and does not expose tokens in docs or dashboard UI.

Signed app-card requests

App-card requests are sent by HubSpot to Company Data Guys. The backend validates HubSpot request signatures before processing enrichment requests.

Reliability

Invalid or missing LinkedIn company URLs are reported in the app card instead of writing unrelated data. The app records last successful card activity for support and review evidence.

Privacy

Customer HubSpot data is used only to provide the integration. It is not used to train or improve shared AI or machine-learning models.