Connect (evidence pull)
An admin connects HubSpot once per workspace, in Settings → Integrations. This authorizes read-only access to contact properties:crm.objects.contacts.read crm.schemas.contacts.read
scope and stores an encrypted refresh token. DataVibe never stores your
HubSpot access token.
Pull evidence before a gate call
Fetch a contact’s acquisition/funding/promotion properties and shape them assource_records for the clay_revops_freshness_v1 policy template:
source_records
straight into metadata.source_records on the POST /v1/gate/outbound
call. See Revenue integrity for how DataVibe uses
these records.
Signed inbound intake
To ingest HubSpot activity into DataVibe (for example, workflow-triggered outbound), register a webhook at:X-HubSpot-Signature-v3,
over the timestamp and body, checked against X-HubSpot-Request-Timestamp.
Requests that fail signature verification are rejected before any policy
evaluation.
Blocked contacts are tagged back in HubSpot (
dv_gate_blocked,
dv_gate_action_id) so a BLOCK verdict is visible directly on the contact
record, not only in the DataVibe audit log.