Microsoft Copilot security directory

HubSpot CRM (Independent Publisher)

Published by Troy Taylor, Hitachi Solutions

High risk

HubSpot CRM is a system for managing customer relationships and storing data. The CRM custom connector provides access to CRM objects or groups of objects, which are represented as a map of property names to values.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Can permanently delete data: This connector can erase records, files, or accounts. Once deleted the data may be unrecoverable - even an accidental request can cause permanent loss.
  • Sends your data to outside companies: Anything you share with this connector flows to a third-party service. That company sees, stores, and may use the data according to their own policies.

Available capabilities

This add-on exposes 30 tools or capabilities.

  • Create a company
  • Create a contact
  • Create a deal
  • Create a line item
  • Create a product
  • Create a ticket
  • Delete a company
  • Delete a contact
  • Delete a deal
  • Delete a line item
  • Delete a product
  • Delete a ticket
  • Get a company
  • Get a contact
  • Get a deal
  • Get a line item
  • Get a product
  • Get a ticket
  • List companies
  • List contacts
  • List deals
  • List line items
  • List products
  • List tickets

The interactive security report will load automatically.