Store Highly Sensitive Data in HubSpot (BETA)

If your business works with highly sensitive information, such as social security numbers, you can create properties and upload attachments that store Highly Sensitive Data.

When a property stores Highly Sensitive Data, the property’s values will be encrypted so users with access to the property’s values must click to decrypt to view or edit the value. Highly Sensitive Data can only be used in the following scenarios:

• Viewing and editing properties in HubSpot.
• Uploading to forms via HubSpot forms, non-HubSpot forms, and the forms submissions authenticated API.
• Uploading attachments manually on records or via notes, one-to-one emails, and highly sensitive file properties.

Before you get started

Prior to storing protected Highly Sensitive Data, refer to the following resources:

• Learn more about storing Sensitive Data in HubSpot in this knowledge base article.
• Review which types of data are considered highly sensitive and which features are available to support the storage of Highly Sensitive Data on the Sensitive Data terms page.

Turn on Sensitive Data

Before you create Highly Sensitive Data properties, you need to turn on Sensitive Data in your settings. Learn how to turn on Sensitive Data and specify the type of data you’ll be storing.

Create properties to store Highly Sensitive Data

Super Admins can mark a property as sensitive and specify that it will store Highly Sensitive Data. These properties have additional protection beyond other Sensitive Data properties, including click-to-decrypt values and limited tool availability.

• In your HubSpot account, click the settings settings icon in the top navigation bar.
• In the left sidebar menu, navigate to Properties.
• Click Create property.
• Enter the property’s basic details, select the field type, then click the Sensitive data tab.
• To mark the property as highly sensitive, select Highly-sensitive data.

• If the property will store HIPAA-protected health data, select the Yes, this data contains protected health information (PHI) checkbox.
• Select which users should have access to view and edit the property's values, either Everyone or Super admins only. If you’ve selected Everyone, it’s recommended to restrict the property’s view and edit access after the property is saved.
• Finish setting up your property, then click Create. Once a property is created and marked as storing Highly Sensitive Data, the Sensitive Data setting cannot be changed.

Once created, a Highly Sensitive Data property’s values need to be clicked to be decrypted by a user with access and can only be used in certain tools. In the example below, if a user has access to the property, they must click to view and edit the value.

Storing attachments with Highly Sensitive Data

Depending on how an attachment is uploaded, it will have an additional layer of encryption in HubSpot’s database storage. Before uploading files, understand which files are protected.

Additional resources

• Learn more about storing Sensitive Data.

• Learn how to manage Sensitive Data via API.

• For more information about HubSpot’s security program, refer to the HubSpot Trust Center.