Security

How ExecOS connects to HubSpot and handles commercial and finance-derived data.

Aurum Labs has not published SOC 2 or ISO 27001 certifications at this time.

Encryption in transit

• Customer authorization and API traffic use HTTPS
• HubSpot OAuth consent and token exchange occur over HTTPS

OAuth

• Customers authorize via HubSpot OAuth
• Access scoped to the connected portal
• Disconnect in ExecOS or revoke in HubSpot

Additional token-storage and control details are available during vendor security review.

Data access

• Reads commercial CRM data for executive reporting
• Does not write HubSpot CRM records in the current product
• No CRM migration

Tenant isolation

Workspaces are separated by customer / portal context. Plans include one portal unless agreed under Enterprise.

Finance data

• Processed for Revenue / Enterprise reporting
• CSV / XLSX primary; optional HubDB
• No native ERP connector
• Customers retain ownership of files they supply

Additional architecture details for file processing and retention are available during vendor security review.

Ownership, disconnect & deletion

Customers retain ownership of HubSpot data and files they supply. Disconnect OAuth or uninstall in HubSpot. Request deletion via Data Deletion.

Infrastructure & policies

ExecOS is a hosted SaaS application. Additional architecture and control details — including hosting, logging, access controls, backup/recovery and subprocessors — are available during vendor security review.

• Privacy
• Terms (including Fair use)
• Data Deletion

Security contact

rick@aurumlabs.dev for security and vendor-review requests.