HubSpot

Governed by default

Like every connector, HubSpot runs inside the ApiSpi governance layer: admins can set it to full, read-only, or approval-required access, every call is audit-logged and firewall-screened, and spend caps apply.