dtwo Policy Store

Policies tagged "consent"

hubspot · ingress

HubSpot Freeze Destructive Ops

Blocks every archive/deletion-class HubSpot tool call, plus the consent-destroying contact unsubscribe, before it reaches the MCP server.

hubspotfreeze-destructive-opsarchiveconsentingresssoc2

hubspot · ingress

HubSpot Role-Gate Schema and Consent

Sits one privilege tier above hubspot/role-gate-writes: ordinary crm-writers can create and edit CRM records, but two higher-blast-radius write classes are…

hubspotrole-gate-schema-consentaccess-controlleast-privilegesegregation-of-dutiesconsentingresssoc2