Hubbl analyzes your Salesforce org through a read-only, credential-free connection, builds its picture from metadata alone, and deletes everything it retrieved when the scan is done. No transactional data. No human access. No PII or PHI.
We read metadata — never your data — and delete it when we're done. Hubbl connects read-only, builds its picture from metadata and record counts, then destroys the connection and everything it retrieved.
A secure, read-only OAuth2 connection to the org — no credential handoff.
Metadata and record counts collected to a temporary, encrypted container no human can access.
Metadata is turned into aggregated, anonymized analysis.
Token and all retrieved metadata are deleted once analysis completes.
Findings surface across the Hubbl app and MCP — security, process, benchmarks, recommendations, and monitoring.
The controls behind the diagram — how the connection, the data, and the people are governed.
The org is authorized over OAuth2 with a read-only, least-privilege scope. No admin credentials change hands, and the connection can be revoked at any time.
Metadata and record counts are collected to a temporary, encrypted container that no Hubbl employee can access. The analysis is automated end to end.
When analysis completes, the access token and all retrieved metadata are deleted — retained only if you explicitly schedule ongoing monitoring.
All data moving to and held in the scan environment is encrypted. The limited personal data Hubbl stores — user names and emails — is encrypted as well.
Employee access is restricted to what each role requires. All staff sign data-security agreements, and workstations require encryption, antivirus, and compliance checks.
Hubbl collects only user names, emails, and scan-request recipients — never the personal data inside your org. That's what keeps the scan PII/PHI-compliant.
Hubbl runs on established, compliant providers — the same names your security team already trusts.
See exactly what Hubbl sees — a credential-free, metadata-only scan in about two minutes, with nothing retained. For our full security program, certifications, and to request our SOC 2 report or a DPA, visit the Trust Center.
Questions? Port Moody, BC · support@hubbl.com