Lists (segments) are maintained BP-AUTO-03 4 lists: 1 stale, 1 empty, 2 unreferenced | fail | L | Create active or static lists (segments) |
Custom objects hold real data BP-DM-04 widgets: 2 records | fail | M | Create custom objects |
Every record has an owner BP-DQ-02 contacts.hubspot_owner_id: 100% of 18400 (target 80%); deals.hubspot_owner_id: 75% of 610 (target 80%) | fail | H | opinion |
Unused custom properties are archived BP-DQ-05 5 of 10 custom properties are empty on every record (50%) | fail | M | Create and edit properties |
Super admins within 2 or 10% of users BP-GOV-01 5 of 14 users are super admins (35.7%). Allowed for 14 users: 2. | fail | H | HubSpot user permissions guide: Super Admin |
Non-admin users get access through permission sets BP-GOV-02 0 permission sets; 9 non-admin users | fail | H | HubSpot user permissions guide |
Idle users are removed and seats reclaimed BP-GOV-05 3 of 14 users with no login in 90 days (2 on paid seats) | fail | M | opinion |
Service tickets are owned and moved through a pipeline BP-SP-04 tickets.hubspot_owner_id: 30% of 1240 (target 80%); tickets.hs_pipeline_stage: 100% of 1240 (target 99%) | fail | M | opinion |
Workflows that are off are cleaned up BP-AUTO-01 7 of 24 workflows are off (29.2%) | partial | M | Organize your workflows |
Deals carry amount, close date, company and contact BP-DQ-03 deals.amount: 95% of 610 (target 80%); deals.closedate: 50% of 610 (target 90%) | partial | H | Set up pipeline rules |
Teams mirror the organisation BP-GOV-03 2 teams; 9 of 14 users without a team | partial | M | Teams API |
Connected apps are reviewed BP-GOV-07 2 install and 0 uninstall events in the window: review needed | partial | M | Manage your connected apps |
Custom properties live in named custom groups BP-DM-02 0 of 10 custom properties on core objects sit in default groups | pass | L | Create and edit properties |
Contacts have email, name and lifecycle stage BP-DQ-01 contacts.email: 98% of 18400 (target 90%); contacts.lifecyclestage: 100% of 18400 (target 90%) | pass | H | Set validation rules for properties |
Login and security activity is reviewed BP-GOV-04 35 of 940 logins failed in 90 days (3.7%) | pass | M | View and export account activity history |
Records of deactivated users are reassigned BP-GOV-06 0 active owners linked to deactivated users | pass | M | opinion |
New integrations use service keys or project apps, not legacy keys BP-INT-04 0 legacy credential creation event(s) and 0 other legacy credential event(s) in the window | pass | H | Account service keys |
Lead capture uses HubSpot forms that are maintained BP-MA-01 1 HubSpot form(s), 1 forms in total; 0 not updated in 365 days | pass | M | Create forms |
Marketing emails nurture contacts BP-MA-02 1 batch/automated marketing email(s) of 1 emails; 0 draft(s) and 1 published across all types (0 are ticket emails) | pass | M | Create automated emails to use in workflows |
Lifecycle stage is set on every contact BP-MA-03 lifecycle stage set on 100% of 18400 contacts | pass | M | opinion |
Sensitive data is marked and protected BP-GOV-08 not a regulated industry (per confirmed profile) | not applicable | H | Store sensitive data |
No empty or unfinished workflows BP-AUTO-02 workflow details not available | not assessed | L | Create workflows |
Ownership is assigned automatically BP-AUTO-04 workflow details not available | not assessed | M | Choose your workflow actions |
Every custom property has a description BP-DM-01 properties module not available | not assessed | M | Create and edit properties |
No duplicate property labels BP-DM-03 properties module not available | not assessed | L | Create and edit properties |
Association labels describe key relationships BP-DM-05 association labels not available | not assessed | L | Create and use association labels |
Companies have a domain and industry BP-DQ-04 fill rates not available | not assessed | M | opinion |
Validation rules guard key properties BP-DQ-06 property validation rules are not collected by this audit version (manual check) | not assessed | M | Set validation rules for properties |
No legacy private apps in use BP-INT-01 private app usage not available | not assessed | H | Legacy private app creation sunset |
Custom code uses date-versioned APIs and current credentials BP-INT-02 workflow details not available | not assessed | H | Custom code actions |
Workflow webhook receivers are known and verified BP-INT-03 workflow details not available | not assessed | M | Use webhooks with HubSpot workflows |
Integrations checked against the 2026-27 API retirements BP-INT-05 which endpoints integrations call is not visible through the API (manual check, playbook 03) | not assessed | H | Legacy APIs and legacy apps: what's going unsupported and when |
Headroom on record and property limits BP-LIM-01 limits not available | not assessed | M | Limits tracking API |
Headroom on pipelines, custom objects and association labels BP-LIM-02 limits not available | not assessed | L | Limits tracking API |
Pipeline stages reflect the real process BP-SP-01 deal pipelines not available | not assessed | M | opinion |
Pipelines have closed stages and a manageable number of stages BP-SP-02 pipelines not available | not assessed | L | opinion |
Pipeline count fits deal volume BP-SP-03 pipelines or deal count not available | not assessed | L | opinion |