Hey there @ChristianRieck. To protect customer data accessed through HubSpot CRM on Android devices specifically, I’ve seen and read about teams who adopt these basic policies/protocols:
- Enable device-level encryption and ensure all CRM mobile app data is stored securely.
- Require multi-factor authentication for HubSpot app logins, layering security beyond simple passwords (this is becoming standard for HubSpot anyway).
- Use MDM solutions to enforce password policies, restrict app installations, monitor for compliance, and disable features like device cameras when needed.
- Conduct routine security audits and device lifecycle management, ensuring all devices are properly provisioned, monitored, and securely retired when replaced or when employees leave.
- Leverage enterprise MDM platforms that offer granular control—such as remote wipe, selective wipe (for company data only), and real-time compliance monitoring.
I read that some reliable enterprise MDM solutions include Microsoft Intune, Google Endpoint Management, and Samsung Knox (for Android), with built-in HubSpot access controls.
Here’s something I hadn’t considered until I found it in my research for your questions… “Handling Lost or Compromised Devices.” I think it’s important to have a policy in place with procedures spelled out. (Maybe you’ve thought of this, but I found this list helpful)
When a device is lost or potentially breached, best practices include:
- Initiate an immediate remote wipe through your MDM platform, ensuring all HubSpot-related customer data is deleted from the device.
- Disable CRM and network access for the lost device until its security status is resolved.
- Have a clear incident response protocol: document device information, notify stakeholders, and, if necessary, alert the customer data protection team.
- Ensure data encryption is enabled before any incident, so data remains protected even if physical erasure isn’t possible right away.
- Routinely back up all CRM-related data to a secure cloud platform, so operations are unaffected if a device is wiped.
- Train staff regularly on reporting losses, using remote wipe tools, and understanding the security features of their devices.
Hopefully this helps you think about how to make sure customer data in HubSpot remains protected, even if device security is compromised. From what I can find and what I’ve seen, integrating MDM with HubSpot means adding automation and oversight, but policies with procedures, and ongoing staff training & incident preparedness are the most vital piece for maintaining robust security standards.