We use HubSpot with junior employees handling inbound phone calls from customers and prospects. They need to be able to look up any contact on demand, but should not have broad access to the full contact database.
Even with very limited permissions (read-only, limited properties, no export), users can still open CRM > Contacts and browse hundreds of contacts per page (including email addresses and phone numbers). In the event of an account compromise, this allows large-scale data exposure via simple scrolling/screenshots.
We have already implemented all available security best practices:
- Mandatory 2FA for all users
- IP allowlisting
- Strict permission sets and property-level restrictions
What’s missing is an additional data‑exposure control layer, for example:
- Ability to disable or hide the global Contacts index for certain roles
- Access to contacts only via search / direct lookup, not bulk browsing
- A “call-center / front-desk” style permission profile focused on reactive access only
This would significantly reduce data leakage risk while still supporting legitimate operational needs.
I believe this would be valuable for many security‑ and compliance‑driven organizations.